Privacy Policy

1. Overview

Thoughts by OTS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Our app is designed with privacy at its core. We believe in minimal data collection and anonymous expression. When you use Thoughts, your identity remains private from other users.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and authentication credentials (via Google Sign-In or email/password)
• User Content: The daily thoughts you submit (stored anonymously)
• Interactions: Likes and flags on thoughts

2.2 Automatically Collected Information

• Usage Data: App open times, feature usage patterns (anonymous)
• Device Information: Device type, operating system version, app version
• Analytics: Crash reports and performance metrics (via Firebase)

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our service
• To authenticate users and secure accounts
• To enforce our one-thought-per-day limit
• To display thoughts to other users (anonymously)
• To track likes and implement content moderation through flags
• To improve app performance and fix bugs
• To comply with legal obligations

4. Data Storage and Security

Your data is stored using Google Firebase, which provides enterprise-grade security. We implement the following security measures:

• End-to-end encryption for data in transit (TLS/SSL)
• Encryption at rest for stored data
• Secure authentication via Firebase Auth
• Regular security audits and updates
• Strict access controls and authentication requirements

While we strive to use commercially acceptable means to protect your information, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following situations:

• Service Providers: With Firebase (Google) for data storage and authentication
• Legal Requirements: If required by law or in response to valid legal process
• Protection of Rights: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, sale, or acquisition

6. Your Rights

Under GDPR and CCPA, you have the following rights regarding your personal data:

6.1 GDPR Rights (European Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request limited processing of your data
• Right to Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing

6.2 CCPA Rights (California Users)

• Right to Know: Request disclosure of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise any of these rights, please contact us using the information provided below.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active
• Thoughts: Retained indefinitely unless you request deletion
• Deleted Account Data: Removed within 30 days of account deletion
• Anonymized Data: May be retained indefinitely for analytics

8. Children's Privacy

Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Effective Date" at the top
• Sending an in-app notification for significant changes

You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us