Trust and data
Privacy Policy
Thought Pins uses your account and memory content to provide a private journaling, source, search, and recall service. It is not designed to sell journal content, build advertising profiles, or track you across unrelated apps.
Scope #
This policy applies to the Thought Pins website, web app, and mobile applications. Thought Pins is a journaling and personal memory product for saving notes, chat messages, articles, documents, and the relationships between those memories. Questions can be sent to privacy@thoughtpins.com or support@thoughtpins.com.
Data categories #
Thought Pins may process the following data, depending on the features you use:
- Contact Info: email address, optional phone number, display name, and support correspondence.
- User Content: journal entries, chat messages, voice-note transcripts, reminders, uploads, imported article text, source metadata, extracted memories, relationships, and Obsidian-compatible vault exports.
- Audio Data: voice-note recordings you deliberately create or upload. Recordings are discarded after transcription by default. Personal voice archive is available only in deployments that explicitly enable it; it is disabled in the current public store configuration. Where available, separately consenting users can retain recognizable recordings in encrypted form until they delete the archive, the related entry, or their account.
- Identifiers: internal user IDs, session IDs, device installation IDs, API request IDs, and OAuth subject identifiers.
- Diagnostics: error events, worker status, audit events, service health metrics, device and app version, and limited security metadata.
- Preferences: notification choices, timezone, recap settings, privacy choices, personality settings, and legal acceptances.
Journal and source content may contain sensitive information because users choose what to write. Thought Pins processes that content only to provide requested product functions, protect the service, meet legal obligations, or act on the user's instructions.
How data is used #
Data is used for account creation, authentication, tenant isolation, message routing, voice transcription, memory extraction, semantic search, contextual AI answers, document recall, reminders, recap generation, export, backup and restore, security, reliability, abuse prevention, support, and account deletion. Data may also be used to diagnose failures and improve product reliability using minimized or de-identified operational information where practical.
Thought Pins does not use journal content for advertising or cross-app tracking. Voice recordings are not used for advertising or cross-app tracking either. In private or self-hosted deployments where Personal voice archive is enabled, retained recordings are reserved for account-scoped personal voice functionality. Thought Pins does not use them to train a shared model, a model for another user, or a general-purpose foundation model. A materially different use would require new notice and consent.
AI and service-provider processing #
Journal and document content may be sent to configured third-party AI providers to classify messages, extract memories, summarize sources, create embeddings, and answer questions from saved context. A user-initiated voice note may be transcribed locally or sent to the deployment's disclosed transcription processor. Article-fetch providers may process user-submitted URLs. Infrastructure, email, authentication, and crash-reporting providers may process the limited data needed to perform those services.
Before production use, Thought Pins presents notice and obtains explicit permission for AI and provider processing through account creation, onboarding, legal acceptance, or an equivalent in-app control. Provider categories and active product capabilities are disclosed without exposing security credentials. Providers are permitted to process data only for contracted or configured service purposes and are subject to their own privacy and security terms.
Article imports and source rights #
Thought Pins imports only user-submitted URLs, pasted text, or user-uploaded files. When a source limits access, Thought Pins retains public metadata or authorized material and does not defeat publisher controls, impersonate crawlers, or retrieve content the user is not authorized to process. Users should only import content they have the right to store and process.
Browser and device storage #
The web app may store authentication tokens, interface preferences, installation identifiers, and unsent local drafts in browser storage so sessions and offline-safe capture can work. The public website does not use advertising cookies. Mobile apps may use secure device storage and notification tokens for equivalent functions.
When data is shared #
Data may be shared with service providers that operate hosting, databases, AI processing, embeddings, source retrieval, authentication, email, diagnostics, or customer support. Data may also be disclosed when required by law, to protect users or the service, during a corporate transaction subject to appropriate safeguards, or at the user's direction. Thought Pins is not designed to sell personal data or share it for targeted advertising.
Retention and deletion #
Most account data and User Content is retained until the user deletes specific content or deletes the account. Voice audio is temporary by default and is discarded after transcription. Where Personal voice archive is available, enabling it affects future recognizable recordings only; disabling it stops future retention but does not silently delete recordings already retained. Deleting a linked journal entry removes its retained recording, and the user can separately delete the entire voice archive. Voice-note transcripts remain ordinary journal content until the related entry or account is deleted.
Account deletion removes user-scoped journal entries, voice recordings and any derived personal voice data, memories, entities, relationships, document sources, chunks, chat history, jobs, sessions, devices, preferences, and the account record where supported by the backend lifecycle. Deletion is intended to be permanent, not a temporary deactivation.
Minimal security, audit, legal, fraud-prevention, or backup-integrity records may be retained only as required or reasonably necessary. Residual encrypted backups may remain until ordinary backup rotation, but deleted data is not restored to provide the product. Retained records are not used to continue the deleted memory profile.
Your choices and rights #
Users can export account data, correct profile and preference information, delete individual content, and delete their account and associated data from the app. Where Personal voice archive is enabled, users can also stop future retention and delete retained recordings. Normal JSON and Obsidian exports include voice metadata and transcripts where applicable, but not retained audio bytes, integrity fingerprints, or internal storage references. The public account deletion page provides a request path for people who cannot sign in. Depending on location, users may also have rights to access, correct, restrict, object to, or receive a portable copy of personal data, and to appeal or complain to a data-protection authority.
Requests can be sent to privacy@thoughtpins.com. Thought Pins may request limited verification before acting on a request and will not discriminate against users for exercising applicable privacy rights.
Security #
Thought Pins uses technical and organizational safeguards designed for the sensitivity of personal memory data, including authenticated sessions, tenant-scoped access, encryption of retained voice recordings, request and audit identifiers, protected production transport, restricted secrets, data lifecycle controls, and security monitoring. No service can guarantee absolute security. Suspected vulnerabilities should be reported privately through the Security page.
International processing #
Service providers may process data in countries other than the user's country. Where required, Thought Pins uses contractual, technical, or other recognized safeguards for international transfers.
Children #
Thought Pins is not directed to children under 13, and users must meet the minimum age required to consent to online services in their jurisdiction. Thought Pins does not knowingly collect personal data from a child who cannot legally consent. A parent or guardian who believes a child submitted data should contact privacy@thoughtpins.com.
Policy changes #
This policy may change as the product, providers, or law changes. Material changes will be dated and presented through the app or another appropriate notice before they take effect where required.
Contact #
For privacy, access, export, correction, or deletion questions, contact privacy@thoughtpins.com. For general product help, contact support@thoughtpins.com.