App Privacy Policy

Last Updated: January 2026

Your privacy matters to us.

We know that suffering from any form of anxiety causes worry, so we designed ThoughtStore to help you track your thoughts in a safe, secure, and private space. This policy explains how we handle your data.

The short version: All of your data stays on your device under your control. We never see it, we never access it, and we never share it with anyone.

What We Collect

ThoughtStore processes and stores the following data locally on your device only:

Thought entries (text, categories, triggers and severity ratings)
Notes and additional details you add to your entries
Timestamps of when entries were created
Your app preferences and settings
Thought Echo counter activity

Important: This data never leaves your device. If you use the data export feature, your content is only shared at that point. We do not collect or see this data.

What We Don't Collect

We do not collect, access, or store:

Your name, email address, phone number, or location
Any personally identifiable information (PII)
IP addresses or device identifiers
Your data on our servers (we do not operate servers)
Behavioural data for advertising or tracking

Subscription and Payment Data

If you subscribe to ThoughtStore Premium:

Apple processes all payments through the App Store
We only receive subscription status (active/inactive) and subscription tier
We do not receive your payment details, credit card information, or billing address
Apple Inc. is the data controller for payment processing
Apple's Privacy Policy governs payment data

Your subscription status is used solely to enable premium features within the app.

How We Use Your Data

Your data is used solely within the app to:

Display your thought entries and patterns
Generate insights and visualisations about your thoughts
Provide you with a personal tracking tool

We never:

Transmit your data to our servers
Share your data with third parties
Sell or monetise your data
Use your data for any purpose other than app functionality

Biometric Authentication

ThoughtStore uses Face ID or Touch ID (if available) to secure access to your thoughts.

Your biometric data never leaves your device and is managed entirely by iOS. We never access, store or process your biometric information. This is handled securely by Apple’s operating system.

Apple iCloud Backup

If iCloud Backup is enabled, Apple Inc. processes your data as an independent data controller under its own privacy policy. iOS may automatically back up ThoughtStore data to your personal iCloud account.

ThoughtStore Limited does not access, control, or manage iCloud backups. Apple’s handling of iCloud data is governed entirely by Apple’s Privacy Policy and applicable data protection laws. This means:

A secure, encrypted copy of your data is stored in your iCloud account
Your backup is controlled by Apple’s iCloud service, not by us
We cannot access your iCloud data
Apple’s Privacy Policy governs iCloud storage

To manage iCloud Backup for ThoughtStore:

Go to Settings > [Your Name] > iCloud > iCloud Backup
Select your device
Toggle ThoughtStore on or off

Third-Party Services

We do not use third-party analytics, tracking, or advertising services. Your data remains entirely on your device and is never shared with external services.

Cookies and Tracking

ThoughtStore does not use cookies, pixels, or any tracking technologies.

We do not track your activity, build user profiles, or share data with advertisers.

Data Retention and Deletion

Retention: Your data is stored on your device indefinitely until you choose to delete it.

Deletion: You can:

Delete individual entries from within the app
Delete all data from the app’s settings screen
Uninstall the app to remove all local data

Important: Once deleted, data cannot be recovered unless you have a backup (via iCloud or manual export).

Your Rights and Control

You have complete control over your data.

Access – View all your data from within the app
Export – Manually export your data at any time
Delete – Remove individual entries or all data
Portability – Export your data in a readable format for use elsewhere

Since all data is local to your device, you have direct control without needing to contact us.

Note on Historical Records

ThoughtStore is designed to preserve your thoughts as historical records for pattern analysis and therapeutic insight. While you can delete any entry at any time, editing past entries would compromise the therapeutic value of tracking your thoughts as they occur.

If you've recorded something incorrectly, you can:

Delete the entry
Record a new corrected entry
Add a follow-up thought with clarification

This approach maintains the integrity of your historical record while giving you full control over your data.

GDPR Compliance (UK & EU)

If you are located in the UK or European Union, you have additional rights under GDPR:

Right to Access – You can access all your data within the app
Right to Erasure – You can delete your data at any time
Right to Data Portability – You can export your data at any time
Right to Object – You can stop using the app at any time

Role Under Data Protection Law:

ThoughtStore Limited provides the ThoughtStore application. All personal data entered into the app is processed locally on the user's device and remains under the user's direct control at all times.

ThoughtStore Limited does not access, collect, transmit, store, or independently process user content or personal data on external servers.

Where data protection law applies, ThoughtStore Limited acts as the provider of the software, while the user retains full control over their personal data processed within the app.

Legal Basis for Processing:

ThoughtStore processes data locally on your device solely to provide the app's functionality.

Where applicable under UK and EU GDPR, the lawful basis for this processing is the performance of a contract (the provision of the app's features requested by the user).

Since all data remains on the user's device and is not accessed or processed by us externally, consent mechanisms for data transfer or third-party processing are not required.

Many GDPR obligations relating to external processing and data sharing do not apply. However, we respect your rights and provide full control over your data.

California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

Know what personal information we collect (see 'What Data We Collect' above)
Delete your personal information (you can do this within the app
Opt out of the sale of your data (we do not sell data)

Since all the data remains on your device, you have direct control without needing to submit requests to us.

We do not sell, share or disclose personal information for cross-context behavioural advertising or commercial profiling.

Canadian Privacy Rights (PIPEDA)

If you are a Canadian resident, you have the right to:

Access your personal information (available within the app)
Remove entries by deleting them and recording new thoughts - historical entries are preserved for pattern analysis and therapeutic value
Withdraw consent (by deleting data or uninstalling the app)
File a complaint with the Privacy Commissioner of Canada

Since all data remains on your device, you have direct control without needing to contact us.

Australian Privacy Rights

If you are an Australian resident, you have rights under the Australian Privacy Act 1988:

Access your personal information (available within the app)
Remove entries by deleting them - ThoughtStore preserves historical records as they were written to maintain therapeutic accuracy and enable pattern analysis
Make a complaint to the Office of the Australian Information Commissioner (OAIC)

Since all data remains on your device, you have direct control without needing to contact us.

Age Restrictions

ThoughtStore is intended for users aged 16 and over. We do not knowingly collect data from children under 16. If you are a parent or guardian and believe your child under 16 has used the app, please contact us at hello@thoughtstoreapp.com and we will provide guidance on data deletion.

Data Security

We take security seriously.

All data is stored locally on your device using iOS's secure storage
Face ID/Touch ID authentication protects access to the app
iCloud backups (if enabled) are encrypted by Apple
We never transmit your data over the internet

However, the security of your device is your responsibility. Please use a strong device passcode or biometrics to keep your device secure.

Data Breach Notification

Since all data is stored locally on your device and never transmitted to our servers, the risk of a data breach involving ThoughtStore Limited is minimal.

However, if we become aware of any security vulnerability in the app that could affect your data, we will:

Release an app update to address the issue
Notify users through the App Store and our website
Provide guidance on protective measures

The security of your device remains your responsibility. Use strong passwords and enable device encryption.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. When we make changes, we will update the ‘Last Updated’ date at the top.

Your continued use of ThoughtStore after any changes indicates your acceptance of the updated policy.

Governing Law

This privacy policy is governed by the laws of England and Wales.

Any disputes relating to this policy or our handling of data will be subject to the exclusive jurisdiction of the courts of England and Wales.

Users in other countries may have additional rights under their local data protection laws, as outlined in the relevant sections above.

Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how your data is handled, please email us at the address below. We aim to respond within 30 days.

hello@thoughtstoreapp.com