Privacy

• Your thoughts: title, transcript, the AI-refined version, folders, tags, pins and locks.
• Voice notes: the audio file for each voice thought, kept in your own private storage area.
• To-dos: task text, notes, priority, dates and completion state.
• Account basics: your email and display name, plus your app preferences.
• Usage records of AI calls (duration, tokens, cost) so the app can meter fair use.

Thoughts is local-first: everything is written to your device first so it works instantly and offline. When you are signed in, the same data is backed up to your private account so it follows you between devices. Rows are scoped to your user account, and audio files live in a private bucket that is not publicly readable.

To turn speech into text, the audio you record is sent to a speech-to-text provider: Groq, running Whisper. To produce the refined version of a thought and to pull tasks out of a ramble, the text is sent to a language-model provider (currently DeepSeek). Only the audio or text needed for that request is sent. These providers process the request and return the result; thoughts does not use your content to train any model, and your audio and transcripts are never used to train public AI models.

Our service infrastructure (hosting, database and storage) is provided by Lovable Cloud, which acts as a sub-processor for this data. These are the only third parties that process your content.

Audio is processed solely to produce a transcript. No voiceprints, speaker identifiers or other biometric data are created, stored or derived from your recordings, and the app makes no attempt to identify anyone from their voice.

When a recording includes other people, you are responsible for the consent those conversations require under your local law. thoughts does not monitor or review your recordings; it only processes what you capture to return your transcript.

The lock on a thought hides its content in the app interface. It is a privacy screen against over-the-shoulder reading, not encryption, and it does not hide the thought from the account owner tooling described below.

Deleting a thought or task moves it to the bin, where you can restore it. Emptying the bin removes the item and its audio from your device and your account. Deleting your account from Settings removes your thoughts, to-dos, folders and audio. To keep paid trials fair, a one-way hash of your email is kept after deletion so the same address cannot claim a new trial — the email itself is not stored and the hash cannot be reversed into one.

You can export your data at any time from Settings, and you can request a copy or full deletion of your data by emailing us. You may also ask what data we hold, correct it, or object to its processing.

The maker can see account-level metadata (sign-up date, counts, usage and spend) to run the service. Reading the actual content of a thought requires a deliberate, reason-logged unlock, and every such access is recorded in an audit log.

Questions, corrections or a data request: use the White Box inside Settings, or email hello@thoughtsbysohail.com.