Privacy Policy

We store your email, password (as an authentication credential only), and the thoughts and vision data you capture. Your content is isolated to your account through row-level security and is never shared with other users or sold. We use AI to process your notes and power the advisor, and we keep only what's needed to run the Service.

Account data: your email address and an authentication credential, managed by the platform's backend so we never see your plaintext password.

Content you create: text and voice-to-text captures, summaries, action items, folder and pillar tags, alignment scores, and your 5-year vision entries.

Usage data: basic, anonymous analytics like page views and aggregate counts, used to keep the Service reliable.

If you capture by voice, audio is transcribed in your browser and only the resulting text is stored with your account. We do not retain or store raw audio recordings on our servers.

Your notes are used to clean up, categorize, and align captures, and to hydrate the Tommy AI advisor's context with your live vault. When a live AI model is enabled, your note content and questions are sent to that provider to generate a response. Processing is scoped to your session; your data is never used to train a public model.

Data is stored in the platform's managed backend (Cloud). Every table is protected by row-level security policies tied to your account identity, so only you can read or write your own rows. Access is encrypted in transit. Administrative access is restricted to maintenance and is never used to browse user content.

We do not sell your data and we do not share your content with other users. We may share limited data with trusted infrastructure providers that help operate the Service (such as hosting, auth, and AI providers), only as needed to deliver features, and under contractual obligations to protect it. We may disclose data when required by law.

You can export or delete your content at any time from within the app, and you may delete your account to remove your stored data. To exercise access, correction, or deletion rights, use the controls in the app or contact us.

We keep your content for as long as your account is active. When you delete content or your account, we remove the associated data from active systems within a reasonable period, subject to legal retention requirements.

The Service is not intended for users under 16, and we do not knowingly collect data from them.

We may update this policy as features evolve. Material changes will be posted here with a new “last updated” date. Continued use after a change means you accept the updated policy.

Privacy questions? Reach us from within the app or at the contact point provided on your account dashboard and we'll respond promptly.