Privacy

Last updated 20 October 2026

Your notes are often the most personal things you write. Thinkdown keeps them for one purpose: turning what you say into notes you can read, search and sync across your own devices. We don't sell your data, show ads, or use your notes to train AI models.

What Thinkdown stores

Data	Why
Your recordings	To transcribe them, and so you can play back what you actually said
Transcripts, notes, versions, folders and tags	They are your notes
Writing styles and settings	So every device rewrites the same way
Your glossary and About-me profile	To spell your people, places and terms correctly
Where you recorded a note, as the exact spot and its neighborhood or town name, if you allow it. Turn it off in Settings > Recordings > Save where I record.	So you can see where you were when you had the thought, and find it on a map
The place a note is about, when what you say names one	So you can see what the note was about at a glance. You can change or remove either place on the note.
Text extracted from documents you add	As context for rewrites. The original file is not kept.
Your email address (the one you type in for a sign-in code, or the one Apple shares, which can be a private relay address), your Apple ID's anonymous identifier if you use Sign in with Apple, and a session per device	To sign you in. Thinkdown never sees your Apple password.

Each device also keeps a full copy of your notes so Thinkdown works offline. The website you're reading now has no analytics, cookies or trackers.

Who else processes it

AI providers do the transcription and the rewriting. They receive only what each step needs, through their business APIs, which don't use your data to train models. They process it only to provide this service to you, and they protect it at least as well as this policy does.

Soniox transcribes your audio. It receives the recording, plus names from your glossary, a few facts from your profile and, with Spell local places on (the default), the neighborhood and town names where you recorded, never your exact spot, so it spells people and places correctly.
OpenAI transcribes your audio only when Soniox is unavailable. It then receives the recording, names from your glossary and, with Spell local places on, the same neighborhood and town names.
Anthropic (Claude) rewrites the transcript into a note. It receives the transcript, your chosen style, your glossary and profile, passages from your documents that relate to the note, and the name of the place you recorded it, if saved.

To turn your position into a place name, the iPhone, iPad and Mac apps use Apple's location service on your device. The website asks your browser for your position, rounds it to about 100 metres and sends it to BigDataCloud's reverse geocoding service, which returns the name. Your exact spot is saved on the note with the name, so the note can show it on a map, and is removed when you change or remove the place. It is never sent to the AI. With Save where I record off, Thinkdown never reads your location.

Your consent to AI processing

Thinkdown asks before it sends anything to Soniox or Anthropic. Until you agree, you can still record: your recordings are kept on your devices and on Thinkdown’s server, waiting, and nothing is sent to Soniox or Anthropic. Thinkdown is built around this AI processing, so there is no setting to turn it off. To stop it, delete your account in Settings > Account, or email [email protected]; from then on nothing is sent to either provider.

Deleting your data

Deleting a note moves it to the trash, where you can restore it for 30 days. After that the note, its earlier versions and its audio are deleted for good.
You can choose to have recordings deleted automatically after a set number of days. The note and transcript stay.
Glossary entries and documents can be removed at any time from “Memory”.

Your account

You can delete your account in the app under Settings > Account. This immediately deletes your notes, recordings, documents, glossary and profile from our server, signs out every device, and, if you used Sign in with Apple, revokes Thinkdown's access to your Apple ID. Daily database backups are overwritten within 7 days, after which no copy remains.

Security

Everything travels over encrypted connections. Sign-in uses Sign in with Apple or a code emailed to you; there are no passwords. Sessions are stored as one-way hashes, so a copy of the database can't be used to sign in as you.

Contact

Questions about privacy, your data or the app: [email protected].

Changes

When this page changes, the date at the top changes too.