Privacy

The short version

Your thoughts belong to you. We do not run ads, sell your data, or track you across other apps and websites. There is no analytics or advertising code in ThoughtFree at all. You can use the app without an account, export everything at any time, and delete your account and its data yourself.

Without an account

Signed out, ThoughtFree works and nothing you write leaves your device. Notes, diary entries, tracker data and settings live in the app's own storage. Delete the app and that data goes with it. The AI features are the exception: they run on our servers, so they need an account and are simply absent until you sign in.

With an account

Signing in turns on sync. Your notes, diary entries and attachments are stored on our servers so your devices can stay in step. Access is restricted to your own account. We use Supabase for accounts and storage, and PowerSync to move changes between devices. You can sign in with an email code or with Google. If you use Google, we receive your email address and nothing else from your Google account.

To be straight with you: this is not end to end encrypted. Your data is encrypted in transit and at rest, but we hold the keys, so we could technically read it and we do not except when we have to operate or repair the service. If you want writing that nobody but you can ever open, keep it on a signed-out device, where it never leaves the phone.

AI features

Some features work by sending the relevant part of your writing to a model provider. Transcribing a voice note sends that recording. Categorizing, summarizing, researching or asking Brain sends the text it needs. This only happens for the item you act on, or for an automation you set up yourself.

We send your writing to a provider only to return the result you asked for, and we do not use it to train anything ourselves. We use paid developer APIs rather than consumer products, which as a rule means the provider does not train on what is sent. Each provider's own terms govern their handling, so if that matters to you, ask us which provider is behind a given feature and we will tell you.

Your diary is not part of AI

Weekly insights are generated from captured thoughts only. Diary entries, including anything written about sleep, money, food or how a day went, are never included. This is enforced on our servers rather than left to a setting.

Health data

If you connect Health Connect on Android, sleep, workout and drink entries are read on your device and written straight into your diary. That reading happens on the phone. The health data itself is never sent to us or to anyone else.

Services you connect

Google Calendar, Todoist and Notion connect only if you ask them to, and exchange only what the feature needs. Their access tokens are held on our servers, never sent to your devices, and are destroyed when you disconnect or delete your account.

Payments

Subscriptions are handled by RevenueCat and Stripe. They receive your payment details; we never see or store a card number. What reaches us is whether your account is on the free or paid plan, and when the plan renews.

Who processes your data

• · Supabase. Accounts, and the synced copy of your notes, diary and attachments.
• · PowerSync. Moves those changes between your devices.
• · Deepgram. Audio you record, when a voice note is transcribed.
• · OpenRouter. The text of a thought, when you use an AI feature on it, or when a voice note is transcribed and its punctuation tidied. Never a diary entry.
• · OpenAI. The text of a thought, to build the search index behind Brain.
• · Replicate. A generated prompt for a book cover. Never your writing.
• · Resend. The document and address, when you email or send to Kindle.
• · Google Firebase. Delivers push notifications. Carries the notification text.
• · Sentry. Crash reports, when the app fails. Scrubbed before sending: no screenshots, no screen contents, and no thought or diary text. It receives the error and where in the code it happened.
• · RevenueCat and Stripe. Handle subscriptions. They receive payment details, we do not.

Export and deletion

Export your data as Markdown or JSON at any time from Settings. The export is a file handed to you, not uploaded anywhere. Deleting your account from Settings removes your account and the data attached to it, including attachments, recordings and any tokens for services you connected. Export first if you want a copy, because deletion is final.

What we never do

No advertising. No selling or sharing your data with data brokers. No analytics or tracking code in the app. No reading your writing except to give you back the result you asked for.

Changes

If this policy changes in a way that affects what leaves your device, we will say so before the change takes effect rather than after.

Questions

Write to hello@thoughtfree.io.