I Thought of You — Privacy Policy

The short version. We store what the app needs to work and nothing else: your account, the profile you choose to show, and who you thought of and when. A thought has no content, so there is no message to read. We don't show ads, track you or sell anything. You can delete everything from inside the app, and it's gone right away.

1. What we store

Your account. The email address you sign up with, or the account ID from Apple, Google, Facebook or X if you sign in with one of them. We use it only to sign you in. Other people never see it.
Your profile. Your name, your username and, if you add them, a short bio and a profile photo.
Your time zone. So the app knows when your “today” starts and ends.
Thoughts. Who thought of whom, and when. That is all a thought is. We keep individual thoughts for 90 days. After that we keep only daily totals, which aren't linked to the people involved.
Your Sky and your blocks. The people you added to your Sky, and anyone you blocked.
Notification tokens. Only if you turn notifications on, so we can tell your device that someone thought of you.

2. Signing in with Apple, Google, Facebook or X

If you sign in with one of these, the provider shares your name, your email address and, for some providers, your profile photo with us. We use them only to suggest your name, username and photo when you set up your profile. Nothing is saved until you tap Continue, and you can change or remove any of it first.

If you keep the suggested photo, we copy it into our own storage once. We never post anything to these accounts and never read your friends, followers or contacts from them.

3. Photos

When you add a profile photo, you pick it in your phone's own photo picker. The app receives only the photo you choose, not your library, and needs no photo permission. The photo is cropped and shrunk on your device before it's uploaded. Profile photos are public: anyone with the link to one can see it. You can change or remove your photo in Profile at any time. Removing it deletes the file.

4. Who can see what

Your profile. Anyone using the app can find you by searching your name or username and see your name, username, bio and photo.
Thoughts are always named. When you think of someone, they see that it was you.
Notifications never name anyone. They only say that someone thought of you, so nothing personal shows on a lock screen.
Counts are private. Nobody can see how many thoughts anyone else sends or receives.
Your Sky is yours. Adding someone to your Sky doesn't add you to theirs, and they aren't told.
Blocking hides you from each other completely: in search, in profiles, and in thoughts.

5. Where your data lives

Your data is stored with Supabase, which hosts our database in Singapore. It is encrypted on its way to and from the app. Access is controlled per account, so the app can only read or change what you're allowed to.

5b. Services that help us run the app

Cloudflare Turnstile runs a short "are you a person?" check before you sign in or sign up with a password. It happens inside the app on our own page; Cloudflare sees ordinary connection data for that page, never your account.
Expo's push service passes notifications to Apple and Google. It sees your device's push token and the fixed words "Someone thought of you", nothing more. Notifications never say who.
Sentry receives crash reports (what went wrong, your device model and system version) so we can fix problems. We strip personal data before sending; no email, name or thoughts are included.

6. What we never do

We don't show ads or include advertising or tracking code.
We don't use third-party analytics, and we don't analyse anyone's relationships.
We don't sell or share your data.
We don't collect your location, your phone number or your contacts.

7. Deleting your account

Go to Profile → Delete account and confirm. This immediately and permanently deletes your account, profile, photo, every thought you sent or received, your Sky and your blocks. It can't be undone, and you don't need to contact us first.

8. Children

I Thought of You is not directed at children under 13, and we don't knowingly collect data from them. If you think a child has made an account, write to us and we'll delete it.

9. Your rights

Laws such as the GDPR and the CCPA give you the right to access, correct, export and erase your personal data. You can correct your profile and delete your account in the app at any time. For a copy of your data, or anything else, write to us and we'll reply within 30 days.

10. Changes

If this policy changes, the effective date at the top changes too, and the new version is published here. Before we collect anything new, we'll update this page and tell you in the app.

11. Contact

For questions about privacy, or about anything on this page, write to appwells31@gmail.com.