Privacy Policy

Last updated: September 8, 2025

Introduction

TinyThoughts (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information Collection

We collect information you provide directly and information we collect automatically. For detailed information about what we collect, please see our Information Collection Notice.

Information you provide:

  • Account registration information
  • Content you create (thoughts, messages, files)
  • Subscription preferences
  • Communications with us

Information we collect automatically:

  • Usage data and analytics
  • Device and browser information
  • IP address and location data
  • Cookies and similar technologies

2. How We Use Your Information

We use your information for the following purposes:

  • Service delivery: Provide, maintain, and improve our services
  • Communication: Send notifications, updates, and respond to inquiries
  • Personalization: Customize your experience and content
  • Analytics: Understand usage patterns and improve features
  • Security: Protect against fraud, abuse, and security threats
  • Legal compliance: Meet legal and regulatory requirements

3. Information Sharing and Disclosure

We may share your information in the following situations:

  • With your consent: When you explicitly agree to share information
  • Public content: Information you choose to make public
  • Service providers: Third parties who assist in operating our service
  • Legal obligations: When required by law or legal process
  • Business transfers: In connection with mergers or acquisitions
  • Safety and security: To protect rights, property, or safety

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

4. Third-Party Services

We use third-party services to provide and improve our platform:

  • Clerk: User authentication and account management
  • Supabase: Database hosting and real-time features
  • OpenAI: AI-powered transcription and analysis
  • Vercel: Application hosting and file storage
  • Novu: Notification and messaging services

These services may collect and process your information according to their own privacy policies. We encourage you to review their privacy practices.

5. Data Security

We implement appropriate security measures to protect your information:

  • Encryption of data in transit and at rest
  • Access controls and authentication requirements
  • Regular security assessments and updates
  • Employee training on data protection
  • Incident response procedures

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a portable format
  • Restriction: Request limitation of processing in certain circumstances
  • Objection: Object to certain types of processing
  • Withdraw consent: Withdraw consent for processing based on consent

To exercise these rights, please contact us through the methods provided below.

7. Data Retention

We retain your information for different periods depending on the type:

  • Account data: Until you delete your account
  • Content: Until you delete it or your account
  • Usage data: Typically 24-36 months for analytics
  • Communication records: As required by law or business needs

Some information may be retained longer for legal compliance, dispute resolution, or legitimate business purposes.

8. International Data Transfers

Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions.

9. Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain your session and authentication
  • Remember your preferences and settings
  • Analyze usage and improve performance
  • Provide personalized experiences

You can control cookie settings through your browser preferences.

10. Children's Privacy

Our service is not intended for children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our service and updating the “Last updated” date. Your continued use constitutes acceptance of the updated policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

  • Through the contact forms in our service
  • Via the support channels provided in the application
  • By visiting the help section of our website

We will respond to your inquiries within a reasonable time frame as required by applicable law.

This Privacy Policy is effective as of the date listed above and will remain in effect until modified.