Privacy Policy

This policy explains what data ThoughtDrop ("we", "us", "our") collects, why, and how we handle it. The short version: we collect what's needed to run the product and nothing else.

What we collect

Account information. When you sign up, we receive your name, email address, and profile photo from your OAuth provider (Google or Apple). We don't store your password — authentication is handled entirely by your provider.

Your content. Thoughts, notes, files, and any other data you capture in ThoughtDrop. This is your data. We store it to provide the service.

Usage data. We collect anonymized product analytics — events like signups, captures, and feature usage. This helps us understand what's working and what isn't. IP addresses are anonymized.

AI processing data. When you capture a thought, we send the text to an AI provider for classification. We also use AI for digest generation and chat features. Our AI provider does not use API inputs or outputs to train their models.

What we don't collect

• We don't sell your data. Not now, not ever.
• We don't run third-party advertising.
• We don't share your content with other users.
• We don't use your content to train AI models. Your captures are sent to OpenAI for classification and returned — they are not used as training data.

How we store your data

Your data is stored on secure cloud infrastructure. All data is encrypted in transit and at rest.

Google data

We access the following data from Google, depending on how you use ThoughtDrop:

• Google Sign-In: When you sign up or log in with Google, we receive your name, email address, and profile photo. This data is used to create and manage your account and is stored as part of your user profile.
• Google Calendar: If you connect your Google account for Calendar features (Pro tier), we read your upcoming calendar events (titles, times, attendees) to surface them in your daily digests and link them to related captures. When you create projects or tasks with deadlines, we can create calendar events on your behalf. You can also edit and delete these events from within ThoughtDrop. We only modify events that ThoughtDrop created or that you explicitly ask us to update.
• Google Contacts: If you connect your Google account for Contacts features (Pro tier), we read your contact names, email addresses, and organizations to help classify captures related to people you know. We do not modify or delete your contacts.

This data is stored on the same secure infrastructure as your other ThoughtDrop data. You can disconnect your Google account at any time from Settings, which revokes our access and deletes the stored Google data from our systems.

ThoughtDrop's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Third-party services

We use third-party services for hosting, database storage, authentication, AI processing, email delivery, and analytics. These providers process data on our behalf and are contractually prohibited from using it for their own purposes.

Cookies

We use essential cookies for authentication (session management). Our analytics provider may set cookies to understand product usage. We don't use advertising or tracking cookies from third parties.

Data retention

Your data is retained as long as your account is active. If you delete your account, we delete your data from our systems. Backups may retain data for up to 30 days after deletion.

Your rights

You can:

• Export your data at any time from Settings → Export.
• Delete your account from Settings. Your data will be removed from our systems.
• Correct your data directly in the app — you have full edit access to everything you've captured.

Children

ThoughtDrop is not intended for children under 13. We don't knowingly collect data from children.

Changes to this policy

If we make material changes, we'll notify you via email or an in-app notice. Minor wording updates won't trigger a notification.

Contact

Questions about this policy? Reach us at privacy@thoughtdrop.io.