Privacy Policy

Business Insiders Media LLC (“we”, “us”, “our”) operates Thoughtline at thoughtline.co. This Privacy Policy explains how we collect, use, share, and protect your personal information, and your rights regarding that information.

We take privacy seriously — Thoughtline is a personal wellbeing tool and we treat your data with the care it deserves.

1. Who We Are

Business name: Business Insiders Media LLC

Jurisdiction: Wyoming, USA

Contact: hello@thoughtline.co

Website: thoughtline.co

2. Information We Collect

Information you provide directly

• Account information: your name and email address when you register
• Check-in responses: your answers to daily check-in questions (mood, thoughts, reflections)
• Payment information: billing details processed by Stripe (we do not store full card details)

Information collected automatically

• Usage data: how you interact with the Service (features used, time spent, session data)
• Device and technical data: browser type, operating system, IP address, and general location (country/region)
• Cookies and similar technologies: session cookies necessary for the Service to function (see Section 7)

Information from third parties

• Stripe: payment status and subscription data
• Supabase: authentication data (we use Supabase for secure login)

3. How We Use Your Information

We use your information to:

• Provide, operate, and personalise the Service
• Generate AI-powered reflections and insights based on your check-in responses
• Process payments and manage your subscription
• Send you service communications (account notices, receipts, updates)
• Improve the Service through aggregate, anonymised analysis
• Comply with legal obligations

We do not sell your personal information. We do not use your health or wellbeing data for advertising purposes.

4. AI Processing

Your check-in responses are sent to the Anthropic API to generate personalised reflections and insights. Anthropic processes this data in accordance with their privacy and data handling policies. We send only what is necessary to provide the AI features and do not include unnecessary identifying information.

For information about Anthropic's data practices, see anthropic.com/privacy.

5. Sharing Your Information

We share your information only in the following circumstances:

• Service providers: Stripe (payments), Supabase (database/auth), Anthropic (AI processing), Vercel (hosting). These providers are bound by data processing agreements and may only use your data to provide services to us.
• Legal requirements: if required by law, court order, or to protect our rights or the safety of others
• Business transfers: in the event of a merger, acquisition, or sale of assets, with notice to you

We do not share your personal data with advertisers or data brokers.

6. Data Retention

We retain your account and check-in data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or tax purposes.

Aggregated, anonymised data (which cannot identify you) may be retained indefinitely for product improvement.

7. Cookies

We use only essential cookies required for the Service to function (for example, session authentication). We do not use advertising or tracking cookies.

You can control cookies through your browser settings, though disabling essential cookies may affect your ability to use the Service.

8. Security

We implement reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), secure authentication, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

If you believe your account has been compromised, contact us immediately at hello@thoughtline.co.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

All users

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your account and data
• Portability: request your data in a portable format

EU/UK users (GDPR and UK GDPR)

In addition to the above, you have the right to:

• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

Our lawful bases for processing are: contract performance (to provide the Service), legitimate interests (to improve the Service), and legal obligation (compliance).

EU representative: We are a US-based company. For GDPR enquiries, contact hello@thoughtline.co.

Australian users (Privacy Act 1988)

You have the right to access and correct your personal information. To make a request or complaint, contact hello@thoughtline.co. You may also contact the Office of the Australian Information Commissioner at oaic.gov.au.

California users (CCPA/CPRA)

You have the right to know what personal information we collect and how it is used, to delete your personal information, to opt out of the sale of personal information (we do not sell personal information), and to non-discrimination for exercising your rights.

To exercise any of these rights, email hello@thoughtline.co. We will respond within 30 days (or 45 days for complex requests with notice).

10. Children's Privacy

Thoughtline is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

11. International Transfers

We are based in the United States. If you are located in the EU, UK, or Australia, your data may be transferred to and processed in the US. We ensure such transfers comply with applicable law, including through the use of Standard Contractual Clauses where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service. The updated policy will be effective from the date shown at the top of this page.

13. Contact Us

Business Insiders Media LLC

Email: hello@thoughtline.co

Website: thoughtline.co