Privacy Policy

Account information. When you sign in with Apple, Google, or email, we collect your email address and (when you provide it) your name and profile photo.

Content you create. The people you add to your care circle, the occasions you save, the cards you generate, the photos you upload, and the writing samples you share with us to personalize your style.

Usage data. Anonymous analytics about how you interact with the Service (pages viewed, features used, errors encountered).

Device data.If you opt in to push notifications, we store your device’s push token so we can send reminders.

We use your information to provide the Service: to generate cards in your voice, deliver reminders before the occasions you care about, authenticate your account, and respond to support requests. We use aggregate usage data to improve the Service.

To generate card text in your voice, we send the relevant context (recipient details, occasion, optional writing samples) to our AI provider, Anthropic. Anthropic processes this data on our behalf and does not train models on your data. We do not share your data with any other AI provider.

We share information only with:

• Service providers who help us run the Service (hosting, email delivery, AI inference, payment processing, analytics) under contractual confidentiality obligations.
• Legal authorities when required by valid legal process or to protect rights, safety, or property.
• An acquirer in the event of a merger, acquisition, or sale of assets, with notice to you.

We do not sell your personal information.

You can edit or delete the people, occasions, cards, and style examples you save at any time from within the app. You can request a copy of your data or permanent deletion of your account by emailing privacy@thoughtful.app. Residents of California, the EEA, and the UK have additional rights under applicable law (access, correction, deletion, portability, objection); we honor those rights for all users.

We retain your information for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal, accounting, or fraud-prevention purposes.

We use industry-standard practices including TLS in transit, encryption at rest, hashed passwords, and short-lived signed access tokens. No system is perfectly secure; if we discover a breach affecting you, we will notify you promptly.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We process information in the United States. If you are outside the United States, you consent to your information being processed in the United States and other jurisdictions where our service providers operate.

We may update this Privacy Policy from time to time. We will post the updated version here with a new effective date and, for material changes, notify you in-app or by email.

Questions? Email privacy@thoughtful.app.