Privacy Policy

Last updated: July 9, 2026 · Draft — beta period.

ThoughtBounce is built to hold private thoughts, so this policy is written to be read. The short version: your thoughts live on your devices; sync is optional; we don't sell data; AI only sees what you explicitly choose to send.

1. What ThoughtBounce is

ThoughtBounce provides local-first capture apps for Windows, Android, and the web, plus an optional account service that syncs your data between your own devices ("Sync").

2. Data we do NOT collect

• If you use the apps without an account, your thought content never reaches our servers.
• We do not sell or rent personal data. We do not show ads.
• We do not send your content to AI providers unless you explicitly enable AI features.
• Our server logs and crash reports exclude thought titles and bodies.

3. Data we collect when you create an account

• Account data: email address, display name (optional), hashed password.
• Synced content: the thoughts, projects, tags, and related items you choose to sync, stored so your other devices can retrieve them.
• Device metadata: device name, platform, and last-sync time, so you can manage connected devices.
• Billing data (paid plans): handled by our payment processor (Stripe); we never see full card numbers.

4. How synced content is protected

• All traffic is encrypted in transit (HTTPS/TLS).
• Passwords are stored using the argon2id hashing algorithm; sign-in tokens are revocable per device.
• Server databases and backups are access-controlled and backups are encrypted.
• We are working toward optional end-to-end encrypted sync. Until that ships, we describe ThoughtBounce as local-first and privacy-conscious — we do not claim we are technically unable to access synced content.

5. AI features

• AI assistance is off by default.
• When enabled, you can preview what context is included before anything is sent.
• Journal entries are excluded from AI context by default.
• If you use your own API key, requests go directly to your chosen provider under their terms.

6. Your rights and controls

• Export: download all of your synced data at any time (Settings → Export, or the account export endpoint).
• Delete: permanently delete your account and all synced data, self-service.
• Device control: disconnect any device from your account at any time.
• Residents of the EU/UK/California have additional rights (access, correction, deletion, portability). Email us to exercise them.

7. Data retention

Synced data is retained while your account is active. Deleted items are kept briefly as sync tombstones so your devices converge, then purged. Account deletion removes all content immediately and from backups within 35 days.

8. Children

ThoughtBounce is not directed at children under 13 and we do not knowingly collect their data.

9. Changes

We will post changes here and update the date above. Material changes will be announced in-app or by email before they take effect.

10. Contact

Questions or requests: privacy@thoughtbounce.com

Note: ThoughtBounce is a personal organization tool. It is not a medical device and does not provide medical or mental-health advice.