Privacy

Last updated 8 September 2026.

thinkering is local-first. Your interests, plans, activities, answers and notes live in a database on your device, and there is no account to make, nothing to sign in to, and no copy of any of it on our side. If you delete the app it is gone, which is why backup exists.

What leaves your device, and when

Generating an activity

When the app writes something for you — reading up on your subject, suggesting topics, drafting your plan, or writing the day’s activities — the relevant part of your plan is sent to our server and on to Anthropic, and the result comes back to your device. We keep no copy of either the request or the response. Our server records that a call happened, which prompt it was, how long it took and whether it failed; when a response is malformed it also records which fields were wrong, by name, never their contents.

Anthropic processes the request in order to produce the response, under their commercial API terms, which do not permit training models on it. If you would rather our server never saw any of it, Settings → Advanced lets you use your own Anthropic key, and requests then go from your device straight to Anthropic.

Keeping the service standing up

Each device mints a short-lived token so the generation endpoint is not open to the world, and the daily limit is counted against that token and against the network address the request came from. That means our host’s request logs contain IP addresses and timestamps, as every web server’s do. They are retained by our hosting provider for a short period and are not joined to anything else.

Feedback you send

Feedback sent from the corner of any screen is emailed to us and stored nowhere else. It carries your message, the app version and the platform. The screen you were on is included only if you tick the box, and then only as a path — never anything that was on it. Your email address is included only if you type one in.

An account, if you make one

An account exists for one reason: to hold an encrypted backup. No screen in the app is gated on it, and generation does not use it. If you make one, our authentication provider (Supabase) holds your email address, a hash of your password, and the usual sign-in timestamps.

A cloud backup, if you turn it on

Your device encrypts the whole backup with AES-256-GCM before it is uploaded, and the key is generated on your device and never leaves it. What is stored is one encrypted file per account, readable only with your recovery key. Alongside the ciphertext, and outside it, sit three plain values so the app can show you what it has without decrypting anything: when it was sealed, which app version sealed it, and a short non-secret label identifying which key it was sealed with.

We cannot read your backup and we cannot recover your key. That is the point of it rather than a limitation we are apologising for. If you lose the recovery key, the cloud copy cannot be opened by anyone, us included.

Analytics, tracking and advertising

There are none. No analytics SDK, no advertising identifiers, no third-party trackers, no crash reporter that phones home with your content, and nothing about you is sold or shared with anyone for their own purposes. This site sets no cookies.

Children

thinkering is not directed at children under 13, and we do not knowingly collect anything from them.

Getting rid of your data

• On the device: delete the app. Everything local goes with it.
• The cloud backup and the account: mail hello@thinkering.app from the address you signed up with, and we will delete both. Deleting the account leaves nothing readable behind — the file is ciphertext we cannot open — but it is deleted along with it.
• Feedback: ask at the same address and we will delete the email.

Who processes what

• Vercel — hosts this site and the generation endpoint; sees requests and their network addresses.
• Anthropic — receives the contents of a generation request in order to answer it.
• Supabase — holds the account and the encrypted backup file, if you make one.
• Resend — delivers feedback emails, if you send one.

Changes, and how to reach us

If this policy changes in a way that matters, the app will say so rather than relying on you re-reading this page. Questions, or anything above that does not match what you are seeing: hello@thinkering.app.