Privacy Policy
Last updated: September 8, 2025
Introduction
TinyThoughts (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
1. Information Collection
We collect information you provide directly and information we collect automatically. For detailed information about what we collect, please see our Information Collection Notice.
Information you provide:
- Account registration information
- Content you create (thoughts, messages, files)
- Subscription preferences
- Communications with us
Information we collect automatically:
- Usage data and analytics
- Device and browser information
- IP address and location data
- Cookies and similar technologies
2. How We Use Your Information
We use your information for the following purposes:
- Service delivery: Provide, maintain, and improve our services
- Communication: Send notifications, updates, and respond to inquiries
- Personalization: Customize your experience and content
- Analytics: Understand usage patterns and improve features
- Security: Protect against fraud, abuse, and security threats
- Legal compliance: Meet legal and regulatory requirements
3. Information Sharing and Disclosure
We may share your information in the following situations:
- With your consent: When you explicitly agree to share information
- Public content: Information you choose to make public
- Service providers: Third parties who assist in operating our service
- Legal obligations: When required by law or legal process
- Business transfers: In connection with mergers or acquisitions
- Safety and security: To protect rights, property, or safety
We do not sell, trade, or rent your personal information to third parties for marketing purposes.
4. Third-Party Services
We use third-party services to provide and improve our platform:
- Clerk: User authentication and account management
- Supabase: Database hosting and real-time features
- OpenAI: AI-powered transcription and analysis
- Vercel: Application hosting and file storage
- Novu: Notification and messaging services
These services may collect and process your information according to their own privacy policies. We encourage you to review their privacy practices.
5. Data Security
We implement appropriate security measures to protect your information:
- Encryption of data in transit and at rest
- Access controls and authentication requirements
- Regular security assessments and updates
- Employee training on data protection
- Incident response procedures
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a portable format
- Restriction: Request limitation of processing in certain circumstances
- Objection: Object to certain types of processing
- Withdraw consent: Withdraw consent for processing based on consent
To exercise these rights, please contact us through the methods provided below.
7. Data Retention
We retain your information for different periods depending on the type:
- Account data: Until you delete your account
- Content: Until you delete it or your account
- Usage data: Typically 24-36 months for analytics
- Communication records: As required by law or business needs
Some information may be retained longer for legal compliance, dispute resolution, or legitimate business purposes.
8. International Data Transfers
Your information may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions.
9. Cookies and Tracking
We use cookies and similar technologies to:
- Maintain your session and authentication
- Remember your preferences and settings
- Analyze usage and improve performance
- Provide personalized experiences
You can control cookie settings through your browser preferences.
10. Children's Privacy
Our service is not intended for children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our service and updating the “Last updated” date. Your continued use constitutes acceptance of the updated policy.
12. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
- Through the contact forms in our service
- Via the support channels provided in the application
- By visiting the help section of our website
We will respond to your inquiries within a reasonable time frame as required by applicable law.
This Privacy Policy is effective as of the date listed above and will remain in effect until modified.