Privacy,
in plain language.

Information stored on your devices

Thought Inbox stores raw transcript text, edits, optional cleaned text, timestamps, capture source, delivery state, flags, and technical metadata needed to organize and sync thoughts locally on iPhone and Apple Watch.

Speech and temporary audio

During a visible Watch capture, a short temporary recording is created in private Watch storage and transferred only to the paired iPhone through WatchConnectivity. The iPhone uses Apple Speech Recognition, saves the final transcript, and deletes its temporary copy. The Watch deletes its source after terminal processing. A pending copy may remain privately on Watch while an interrupted transfer waits to complete.

Apple Watch sync

Transcript text and capture metadata move between the paired devices through Apple services. A thought is saved on its capture device before transfer, and waiting items can retry later.

Optional AI Processing

AI processing stays off until you affirmatively allow AI Processing in the app. After permission, cleaning a thought sends the selected thought text; requesting a daily review sends all thought text for the day you choose. Limited metadata is also sent: thought identifiers, capture date and day, time zone, locale, edited text when present, and your review instructions. Data travels over encrypted connections to the Thought Inbox service hosted by Cloudflare and then to the OpenAI API. No audio is sent. The Thought Inbox service does not store transcript content in a database or use it for advertising. You can revoke permission in Settings at any time.

Cloudflare and OpenAI are service providers whose applicable terms and privacy commitments require the same or equal protection for the personal data they process on our behalf. OpenAI states that API inputs and outputs are not used to train its models by default. OpenAI may retain API content for up to 30 days for safety and abuse monitoring unless different retention controls apply, and may keep it longer when legally required.

Purchases, analytics, and security logs

Apple processes subscriptions and payment details. Thought Inbox receives product and entitlement status but not payment-card details. The app does not include behavioral analytics, advertising, or tracking. Hosting providers may process limited network and security logs needed to operate and protect the optional text service.

Retention and deletion

Local thoughts remain until you delete them or remove the app. Delete-all controls remove supported local content and sync tombstones between paired devices when possible. Text already sent for AI Cleanup is subject to the service-provider retention described above. Support correspondence contains only the information you choose to send.