Privacy Policy

Thoughtful, provided by Emre Gürbüzer, helps you remember details about your partner and other people you care about. We do not sell your notes or use them for advertising. We use service providers to store data, run the app, and generate suggestions. Those providers and their roles are described below.

• Your original notes and the structured details you confirm, including favorites, dislikes, dates, and shared plans.
• Names or nicknames, optional profile photos, pronouns, birthdays, anniversaries, and extra context you enter for a person.
• Plans you save, their dates and completion, and optional reactions or follow-up notes.
• Questions and the suggestions returned, saved as your question history.
• Occasion type, date, budget, context, generated options and preparation steps, including refinements saved in your occasion history.
• A random device identifier, your selected person, and request counts used to operate the service and apply usage limits.

You can use nicknames and skip optional details. Only enter information you are comfortable storing and have an appropriate reason to record.

Your saved notes and question history are stored in a cloud database provided by Neon. Vercel hosts the application and processes requests. Requests also involve technical information such as IP addresses and error logs; the app uses IP-based request limits to help prevent abuse.

You do not need an email address or password. A functional cookie called fmn_device holds the random identifier used to access your account. Another, fmn_partner, selects the person whose notes you are viewing. This is device-linked access to cloud storage, not storage only on your phone.

Keep your device secure. We do not use advertising or tracking cookies. Local storage keeps your unsaved quick-note text on this device, reminder scheduling history, and whether you skipped the name prompt. Quick-note text is removed locally after saving; it is not included in cloud backups before saving.

A photo you choose is cropped and resized on your device, then stored with that person in the same private cloud account. We re-encode photos to strip metadata, including location. Profile photos are not sent to AI providers or published at public image URLs. Connected devices and your downloaded backups include these photos. You can replace or remove a photo from the person’s profile.

Before a live AI request, the app identifies Anthropic and the details to be shared and asks you to agree. Permission applies to that request, including a retry if it fails. You can leave the checkbox unchecked and continue saving notes and making your own plans.

Saving a quick note as written does not call AI. When you choose Organize with AI and AI is available, the text you submit is sent to the Anthropic API. For a suggestion, the app sends your question, any additional context, the selected person’s details, up to 200 current notes, and the 10 most recently completed plans with any reactions and follow-up notes. This can include names, dates, dislikes, and health information you chose to enter. A note can be sent for processing before you confirm saving it.

Anthropic states that commercial API data is not used to train its models by default. Its own retention rules and exceptions apply; deleting something in this app does not immediately delete service-provider copies. See Anthropic’s API data policy and retention information.

Some versions use built-in rules for suggestions instead of AI. Those requests are not sent to Anthropic. Notes you save still go to the cloud database. The three-question starter saves your reviewed answers directly; its suggestion may use AI. If an AI request fails, the app may ask you to try again.

For a guided occasion, Anthropic receives the occasion, budget and context, the selected person’s profile, up to 30 current notes and five recent completed plans with reactions. A refinement also includes the previous options. Saved occasion results are included in your backup. Trying built-in example options does not use your free live occasion allowance.

These details are optional. If you enter them, they may be stored and sent for suggestion processing as described above. They help highlight things to keep in mind. The app cannot verify ingredients or guarantee that a suggestion is suitable; check relevant details before acting.

With permission, supported iPhone builds schedule notifications locally for dated notes, birthdays, anniversaries, and plans across your people. Names and plan titles may appear on the lock screen. The schedule refreshes when the app opens or data changes on that device. Calendar exports place the selected date and label in your chosen calendar; deleting a note in this app does not remove an event you already exported.

Purchase verification uses a separate random billing identifier, not the identifier that grants access to your notes. We store verified subscription expiry, the time of the last check, a hashed store transaction reference and AI budget reservations, alongside usage counts and whether the first free occasion has been used. Restoring a data backup does not restore a subscription or reset the free allowance.

In supported native versions where purchases are enabled, Apple handles billing and RevenueCat processes purchase and entitlement information with an app-user identifier. Payment card details are not entered into this app. The app’s purchase integration does not send your personal notes to RevenueCat. Available prices and terms are shown before purchase.

Save a recovery key and download a backup before changing devices, clearing browser data, or reinstalling. You can create a random recovery key in People → Settings & backup. The server stores a one-way hash, not the key itself. Anyone with the key can connect to and change or delete the same cloud account. Keep it private in a password manager.

A connected device reads and writes the same cloud records. Pages refresh when reopened or when you return to the app; this is not live co-editing or an offline service. Replacing the key invalidates the old key but does not disconnect devices already connected. Without a saved key, backup, or an accessible device, there is no email recovery.

On a new device, connect with your key or open People → Settings & backup and choose Restore from backup to create a separate copy. Connecting moves existing unprotected-device people into the saved account after confirmation. The backup contains your people and their photos, notes (including archived notes), plans, reactions, and question history as readable text; keep it somewhere private. A purchase restore does not restore your notes.

Edit, archive, restore, or delete individual notes on Notes. Archived notes are excluded from new suggestions and reminders but remain in your backups. Completed plan reactions do not automatically change someone’s saved preferences. Remove questions from their history on Ask. On Person, download your people, notes, plans, and question history, restore a backup, or delete all people and notes along with their question histories.

Delete everything removes your account, recovery-key hash, people, notes, plans, question histories, and usage counters from the application’s active database. This also removes access to those records on other connected devices. Opening the app again creates an empty device-linked account. The app clears quick-note drafts on the device where you delete the account; unsaved drafts on other devices must be cleared there. Deletion does not delete backups you downloaded, cancel an Apple subscription, or immediately erase infrastructure backups and provider logs, which follow the providers’ retention policies. Contact us for questions about access or deletion.

The service is intended for people aged 13 and over.

For privacy questions, contact gurbuzer1@gmail.com. We may update this policy; the date above identifies this version.