Thankful is designed with a privacy-first architecture that works without an account, using an anonymous identifier. We collect only the minimum needed to run the service.

1.1 Your Entries and Settings

• Gratitude journal entries (text, images, stickers, formatting)
• App settings (notification time, theme, language, lock level)
• Streak and achievement progress
• Mood selections
• Entry images (card snapshots, photos in photo cards)
• Nickname (optional), app language, and time zone

This data is stored on your device and, for backup, recovery, and syncing between devices, also on our servers (Supabase), linked to a random anonymous identifier. We use it only to run the service (sync, recovery, error handling) and for the purposes described in this policy.

1.2 Data Processed by Third-Party Services

• AI Features (Premium): When you use AI mentoring, coaching, or personalized verse features, and for automatic tagging when you save and for photo card recommendations, your gratitude entry text (for photos, only labels extracted on your device) is sent to Anthropic's Claude API for processing. The results (tags, coaching notes) are stored as part of your entries; the data used for processing is not stored by Anthropic beyond the processing session. See Anthropic's Privacy Policy.
• In-App Purchases: Subscription payments are processed through Apple App Store or Google Play Store. We do not collect or store payment information.
• Push Notifications: If enabled, notification tokens are managed by Apple Push Notification Service (APNs) or Firebase Cloud Messaging (FCM). We store the token on our server together with your anonymous identifier in order to send notifications, and stop using it when you turn notifications off.
• Usage Analytics: We use Mixpanel to collect app usage events (screens visited, buttons used) together with your anonymous identifier, device type, and app version. Entry text and photos are never sent.
• Error Reporting: If the App crashes or errors, the error details and device and app state are sent to Sentry. Entry text is not included.
• Subscription Management: RevenueCat manages your subscription status using the store purchase receipt and your anonymous identifier.
• Advertising Measurement: The Meta and TikTok SDKs receive events such as app install, trial start, and subscription to measure advertising performance. The device advertising identifier is used only if you allow app tracking. Entry text is not included.

1.3 Data We Do NOT Collect

• No account registration or login required
• No email addresses, phone numbers, or real names (a nickname is optional)
• No location data
• Entry text and photos are never sent to analytics or advertising services
• No cross-app tracking unless you allow it. (Our website uses advertising-measurement cookies — see Section 10.)

• Local data is used solely to provide app functionality (displaying entries, tracking streaks, rendering your garden)
• Posts you share in Sharing are used to show them to other users, translate them, and review them for inappropriate content
• AI-processed data is used only to generate personalized mentoring responses within the same session
• We never sell, rent, or share your data with third parties for marketing purposes

• All local data persists on your device until you choose to delete it
• You can delete all data at any time via Settings > Reset All Data within the App
• Uninstalling the App permanently removes all locally stored data
• AI results remain part of your entries and are deleted together with the entry
• Copies stored on our servers are deleted when you run Reset All Data or request deletion by email

Sharing is an optional feature that shows only the posts you turn sharing on for to other users. It is off by default, and we ask you to confirm the first time you share.

• Made visible: entry text, photo card image (including the photo), card and decorations, original language and translations, country (shown as a flag), and reactions and comments received
• Not made visible: nickname, profile, email, exact location. Other users see you only as a random identifier
• Photos that include a face require one more confirmation before sharing
• Shared posts are stored on our servers so they can be shown to other users, and may be processed automatically (including by AI) for translation and review of inappropriate content
• Turning sharing off or deleting the entry removes it from Sharing immediately. Only copies needed to handle reports or meet legal obligations are kept, for the period allowed by applicable law
• To handle reports and blocks, we store the identifiers of the reporter and the reported user, the reason, and the outcome

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can view all your data directly within the App at any time
• Right to Rectification: You can edit any entry within the App
• Right to Erasure: You can delete individual entries or all data via Settings
• Right to Data Portability: You can export your data via the App's backup feature
• Right to Restrict Processing: You can disable AI features at any time by not using Premium features
• Right to Object: To object to processing for advertising measurement, turn off app tracking permission on iOS or contact us by email

Legal Basis for Processing: When AI features are used, processing is based on your explicit consent (opt-in by using the feature). You may withdraw consent at any time by ceasing to use AI features.

Data Protection Officer: The Thankful representative (handles access, correction, deletion requests and complaints). For privacy inquiries, contact us at support@thankfuldaily.app.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: We collect only the data described in Section 1 above
• Right to Delete: You can delete all data through the App's settings
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• No Sale of Personal Information: We do not sell your personal information to any third party

Thankful is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete such information.

Our servers and service providers (Supabase, Anthropic, Mixpanel, Sentry, RevenueCat, Meta, TikTok) may be located outside your country of residence. Each provider maintains safeguards for international data transfers in accordance with applicable law.

We implement appropriate security measures to protect your information:

• Data on your device is protected by your device's built-in security
• Server and AI communications use HTTPS encryption
• Server data is stored under an anonymous identifier with no name attached, and access is restricted
• Optional app lock feature for additional privacy

On our website (thankfuldaily.app), we use the Meta Pixel and Meta's Conversions API to measure the performance of our advertising. When you visit the website or tap a download button, we may collect and store: advertising click identifiers (such as the _fbc and _fbp cookies, including the fbclid parameter), your IP address, browser information (user agent), and which download button was used.

If you later install the App and start a trial or subscription, we may share that event — together with these identifiers — with Meta Platforms, Inc. so that ad performance can be measured and our advertising can be optimized. This data does not include your name, email address, or the contents of your journal. Meta processes this data in accordance with its own Data Policy.

You can limit this tracking through your browser settings (blocking cookies) or through your Meta ad preferences.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date and communicated through in-app notifications for significant changes.

For privacy-related questions or to exercise your rights:

• Email: support@thankfuldaily.app
• Support: thankfuldaily.app/support