ThinkOff Privacy Policy

Last Updated: November 24, 2025

🏠 LOCAL MODE - Maximum Privacy

Local Mode uses your own API keys and provides maximum privacy. Your queries go directly from your device to AI providers.

What We Collect (Local Mode)

Minimal Data Collection:

• App Settings: Your preferences, provider selections, and UI customizations (stored locally on your device)
• Chat History: Your conversation history (stored locally on your device)
• Optional Telemetry (Opt-in only): Anonymous usage statistics when you enable "Share Usage Data" in settings

What We Do NOT Collect (Local Mode)

• ❌ Your API Keys: Never transmitted or stored on our servers
• ❌ Your Query Text: Never sent to our servers
• ❌ AI Responses: Never sent to our servers
• ❌ Images: Never sent to our servers
• ❌ Personal Information: No account creation required
• ❌ Payment Information: Not applicable (you pay AI providers directly)

How Your Data Flows (Local Mode)

• Queries go directly from your device to AI providers
• ThinkOff servers are not involved in query processing
• Your API keys never leave your device
• Images are sent directly to AI providers (not through our servers)

Optional Telemetry (Local Mode)

If you opt-in to "Share Usage Data":

What's Shared: Anonymous statistics only

• Query type classifications (topic, style, complexity)
• Which providers you used
• Provider performance metrics
• Response times
• User feedback (thumbs up/down)

What's NOT Shared:

• Your actual query text
• AI responses
• API keys
• Personal information
• Device identifiers

Purpose: To improve provider routing recommendations

You Can Opt-Out: Disable anytime in Settings → Privacy & Data

Data Storage (Local Mode)

• Local Only: All data stored on your device
• No Cloud Storage: Nothing stored on ThinkOff servers (except optional anonymous telemetry)
• You Control: You can clear app data anytime

🌐 FULL MODE (Concierge Mode) - Backend Processing

Full Mode uses ThinkOff's backend infrastructure. Your queries are processed through our servers to provide optimized routing and credit management.

What We Collect (Full Mode)

Account Information:

• Google Sign-In (Optional): Email address and display name if you sign in with Google
• Anonymous Account: User ID if you continue as guest

Query Data:

• Query Text: The text of your queries (required to process requests)
• Query Metadata:
  • Provider used
  • Model used
  • Token usage (input/output tokens)
  • Cost information
  • Response times
  • Query type classification (topic, style, complexity)
  • Content type flag (text/image/audio)
  • Timestamp

Payment Information:

• Credit Balance: Your credit balance and transaction history
• Purchase Records: Records of credit purchases (amount, date, transaction ID)
• Payment processing handled by PayPal/Google Play (we don't store payment card details)

Usage Analytics:

• Provider performance metrics
• User preferences and feedback
• Service usage patterns

What We Do NOT Store (Full Mode)

Images:

AI Responses:

• We do not store the full text of AI responses
• Only metadata (tokens, cost, response time) is stored

How Your Data Flows (Full Mode)

• Queries are processed through ThinkOff servers
• Backend routes queries to optimal AI providers
• Responses are returned through our servers
• Query metadata is stored in Firebase for analytics and credit management

Data Storage (Full Mode)

Firebase Firestore:

• User sessions and account information
• Credit balances and transaction history
• Query metadata (provider, tokens, cost, timestamps)
• User preferences and settings

What's NOT Stored:

• Image data (only content type flag)
• Full AI response text (only metadata)
• Payment card details (handled by payment processors)

🔄 Third-Party Services

AI Providers

Local Mode:

• Your queries go directly to AI providers using your API keys
• ThinkOff is not involved in the data transfer
• Providers process queries according to their privacy policies

Full Mode:

Queries are routed through ThinkOff to:

• OpenAI
• Anthropic (Claude)
• Google (Gemini)
• Grok (xAI)
• Mistral
• Meta (Llama)
• Perplexity
• Kimi (Moonshot AI)

These providers process queries according to their own privacy policies.

Payment Processors (Full Mode Only)

• PayPal: Handles credit purchases
• Google Play: Handles in-app purchases
• We do not store payment card details

🔒 Data Security

Local Mode:

• All data encrypted on your device
• API keys stored securely using Android's secure storage
• No data transmitted to ThinkOff servers (except optional telemetry)

Full Mode:

• Data in transit encrypted using HTTPS/TLS
• Firebase Authentication for secure account management
• Firebase Firestore for secure data storage
• Images never stored (only passed through temporarily)

👤 Your Rights

Local Mode:

• Full control over your data (stored locally)
• Can clear app data anytime
• Can opt-out of telemetry
• No account required

Full Mode:

• Access your data through app settings
• Request deletion of your account and data
• Unlink Google account anytime
• View credit balance and transaction history

📊 Data Retention

Local Mode:

• Data stored locally on your device
• You control retention (can clear anytime)
• Optional telemetry: Anonymous data retained for analytics

Full Mode:

• Query metadata retained for analytics and service improvement
• Account data retained while account is active
• Can request deletion at any time

👶 Children's Privacy

ThinkOff is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.

📝 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date.

📧 Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Email: hello@thinkoff.app
• Website: https://thinkoffapp.github.io/thinkoff-privacy/