Privacy Policy for ThoughtsAI

Last Updated: February 13, 2026

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the ThoughtsAI application (the "Service") and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
• Application refers to ThoughtsAI, the software program provided by the Company.
• Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to ThoughtsAI.
• Device means any device that can access the Service such as a computer, a cellphone, or a digital tablet (specifically iPhone or iPad for this Application).
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Application.
• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used. For ThoughtsAI, this includes AI processing services (e.g., Google Cloud Platform for Google's Gemini API) and analytics services (e.g., Firebase Analytics).
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

• Account Information: If You create an account (e.g., via Email, Apple Sign In, or Google Sign In), We may collect your email address and name.
• Journal Entries and Tags: The content you create within the Application, such as your thoughts, tasks, and any associated tags ("Entries"). This data is primarily stored locally on Your Device using Apple's Core Data framework.
• Voice Recordings: If You use the voice note feature, audio recordings are captured and stored locally on Your Device. With Your explicit consent, these recordings may be sent to third-party services for transcription as described below.
• Coaching Conversations: If You use the AI coaching feature, the text of Your coaching conversations is sent to third-party AI services for processing as described below.

AI Processing Data

With Your explicit consent, certain data is sent to third-party AI services to provide intelligent features. You are asked to provide this consent before any AI features are used, and You may revoke consent at any time in the Application's Settings.

The following third-party AI services process Your data:

• Google Gemini AI (via Firebase Vertex AI): The text content of Your journal entries, task descriptions, and coaching conversations is sent to Google's Gemini AI service for processing. This service provides text analysis, summarization, insight generation, tag suggestions, task extraction, and AI coaching responses. Google processes this data in accordance with the Google Cloud Data Processing Addendum and does not use Your data to train their general AI models. Data is processed and returned to You — it is not retained by Google beyond the processing request.
• AssemblyAI (via Firebase Cloud Functions): If You use the voice note feature with cloud transcription enabled, Your voice recording audio files are securely uploaded to our backend and processed by AssemblyAI for speech-to-text transcription. Audio files are transmitted over encrypted connections and are deleted from AssemblyAI's processing servers after transcription is complete. AssemblyAI does not retain Your audio data or use it for model training.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's operating system version, the types of features You use within the Application, the time and date of Your Application usage, crash reports, performance data, and other diagnostic data. We use standard services like Firebase Analytics to collect this anonymous, aggregated information to help us improve the Application.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID (or a resettable identifier), the IP address of Your mobile device (which may be used to infer general location), Your mobile operating system, and unique device identifiers for analytics and troubleshooting.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service: This includes ensuring the core functionality of the Application, such as storing Your Entries locally on Your Device.
• To manage Your Account: To manage Your registration as a user of the Service if account features are enabled.
• To provide AI-powered features (with Your consent): Processing Your Entries, coaching conversations, and voice recordings through our secure backend and the third-party AI services identified above to deliver features like classification, summarization, insights, coaching, and voice transcription. These features require Your explicit consent and can be disabled at any time.
• To improve the Service: Using aggregated and anonymized Usage Data and feedback to understand how the Application is used and to make improvements.
• To contact You: To contact You by email or through in-app notifications regarding important updates to the Service, security updates, or changes to our policies, when necessary or reasonable for their implementation.
• To provide You with news and offers (with consent): If you opt-in, to provide You with news, special offers, and general information about other goods, services, and events which We offer that are similar to those that you have already purchased or enquired about.
• To manage Your requests: To attend and manage Your requests to Us, such as customer support inquiries.
• For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.
• For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

Third-Party Service Providers

We share Your information with the following categories of Service Providers:

• AI Text Processing — Google (Gemini AI via Firebase Vertex AI): Receives the text of journal entries, task descriptions, and coaching conversations. Returns AI-generated summaries, insights, tags, task extractions, and coaching responses. Google is contractually obligated not to use Your data for any purpose other than providing this processing service.
• Voice Transcription — AssemblyAI: Receives voice recording audio files via our secure backend (Firebase Cloud Functions). Returns text transcriptions. Audio data is deleted after processing and is not used for model training or any other purpose.
• Analytics — Firebase Analytics (Google): Collects anonymous, aggregated usage data to help us understand how the Application is used. No personally identifiable journal content is shared with this service.
• Authentication — Firebase Authentication (Google): Manages user account creation and sign-in. Handles email addresses and authentication tokens only.
• Subscription Management — RevenueCat: Manages in-app subscription purchases and receipt validation. Processes purchase-related data only, not journal content.

Your Consent and Control

• AI features require explicit consent: Before any data is sent to AI services (Google Gemini or AssemblyAI), You are presented with a clear disclosure of what data will be shared and asked to provide explicit consent.
• You can revoke consent at any time: Navigate to Menu > AI Data & Privacy to disable AI features. This immediately stops all data sharing with AI service providers.
• The app works without AI features: If You decline or revoke AI data consent, You can still use all core features of the Application including creating entries, tasks, and voice recordings. AI-powered features (summaries, insights, coaching, and cloud transcription) will be disabled.

We may also share Your personal information in the following situations:

• For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
• With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy.
• With Your consent: We may disclose Your personal information for any other purpose with Your explicit consent.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Journal Entries are stored locally on Your Device and are under Your control.

Account information (if applicable) will be retained as long as Your account is active or as needed to provide You services. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

AI Processing Data Retention:

• Data sent to Google Gemini for text processing is not retained by Google beyond the processing request.
• Voice recordings sent to AssemblyAI are deleted from their servers after transcription is complete.
• AI-generated results (summaries, insights, tags) are stored locally on Your Device as part of Your Entries.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located (such as data centers for AI Service Providers, which may be global). It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. Data stored locally on your device is not transferred unless you initiate an action that requires it (e.g., AI processing, future iCloud sync).

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information (e.g., through standard contractual clauses or other recognized transfer mechanisms if transferring data outside regions like the EEA/UK).

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

Your Journal Entries are stored locally on Your Device. You can delete them directly from within the Application. If using iCloud sync in the future, deleting from the app will also remove them from iCloud.

For Account information (if applicable) or any other Personal Data We may hold (like support correspondence), You may update, amend, or delete Your information by contacting Us. Our Service may also give You the ability to delete certain information about You from within the Service settings if applicable.

Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so (e.g., for tax or accounting purposes, or to comply with legal requests).

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us. We use commercially reasonable administrative, technical, and physical safeguards to protect Your data. Specifically:

• Journal entries are stored locally on Your Device using iOS's secure storage capabilities.
• All communication with AI processing services is encrypted using HTTPS/TLS.
• Voice recordings are transmitted via secure, authenticated Firebase Cloud Functions.
• We do not have direct access to Your journal entries stored on Your Device.

However, remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Children's Privacy

Our Service does not address anyone under the age of 13 (or a higher age threshold if required by applicable law in your jurisdiction, e.g., 16 in some EU countries for consent purposes). We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our systems.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites or services that are not operated by Us (e.g., if we link to a support article or a partner service). If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page within the Application or on our website.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last Updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

By email: fuzzylogicgamingstudio@gmail.com