Privacy Policy

THRW is operated by DDPPEE ("we," "us," or "our"). This Privacy Policy covers the THRW mobile apps, web app, public website, and the services that support them.

For privacy questions or requests, contact [email protected]. Third-party services you connect to THRW also have their own privacy policies.

We collect information you provide, information needed to operate your account and requested features, and limited technical information generated when the service is used.

• Account details: your Apple or Google sign-in identifier, and your name and email address when provided by that service.
• Your content: todos, lists, groups, schedules, notes, Memory Wiki pages, messages, AI conversations, attachments, and the context and preferences you save or generate using THRW.
• Connected services: account identifiers, authorization credentials, and information needed for an integration you enable. For Google Calendar, this includes calendar and event information used for synchronization.
• Purchase and usage records: store transaction identifiers, purchase verification information, subscription status, credits, and AI usage and cost records. Purchases are processed by the relevant app store; THRW does not receive your full payment card details from those purchases.
• Preferences and device information: language, time zone, display settings, notification registration information, and feature choices.
• Operational records: authentication sessions, synchronization revisions, AI processing status, error and security events, IP addresses, and information used to detect duplicate actions, unauthorized access, or misuse.
• Support information: messages, contact details, and any screenshots or other material you include in a support or privacy request.

We use information only for the purposes described below or for another purpose disclosed when we ask for permission.

• Create and secure your account and authenticate supported sign-in methods.
• Store, synchronize, search, and display your planning information across supported devices.
• Provide AI-assisted planning, question answering, suggestions, and automation that you request.
• Maintain reliability, investigate errors, prevent fraud or abuse, and protect users and the service.
• Respond to support, privacy, and legal requests.
• Comply with applicable law and enforce the Terms of Service.

THRW stores working data on your device to support local access and offline use. When synchronization is enabled, account and planning data is also sent to our servers so it can be available across your devices.

Sensitive synchronized content is encrypted in server storage and information is protected in transit. This is not end-to-end encryption: authorized service components can access the content needed to provide synchronization, search, AI processing, and other features you use.

Where voice input is available, microphone and speech-recognition access is controlled by your device permissions. Speech recognition may be provided by your operating system or its speech service. The resulting text becomes part of your input to THRW.

When you use an AI feature, THRW sends the information needed for that request to an external AI service through our server. We use OpenRouter to route requests to the model provider selected for the feature. Models and providers can change as the service develops.

A request can include your message, relevant conversation history, todos, notes, schedules, Memory Wiki content, attachments, and information returned by connected tools. Responses and related processing records may be stored with your workspace. We do not intentionally include sign-in tokens, THRW access tokens, or integration credentials in model prompts.

THRW asks for permission before first sharing personal planning content for its external AI features. If you decline or withdraw that permission, features requiring this processing will be unavailable. This does not prevent you from using available non-AI features or undo processing that has already occurred.

OpenRouter and the model provider process requests under their applicable service terms and data policies. Retention and use of content, including any use for model training, depend on the provider and its configuration. Review these practices before submitting sensitive information, and avoid including information that is not needed for your request.

• OpenRouter Privacy Policy

Connecting Google Calendar is optional. If you connect it, THRW uses the permissions you authorize to read calendar information and create, update, or delete events as required by the synchronization features you enable. Relevant calendar information may be included in AI requests when you use AI features with permission.

You can manage the connection in THRW and revoke access through your Google Account permissions. Disconnecting or deleting your THRW account does not, by itself, delete events already stored in Google Calendar or revoke permissions in your Google Account.

If you connect an external AI client or agent through MCP or another supported integration, that client can access information and perform actions within the permissions you authorize. Data returned to that client is also handled under its own terms and privacy policy. Review its access before connecting it.

• Manage Google Account connections

We do not sell personal information or share it for cross-context behavioral advertising. Information may be disclosed in the following circumstances.

• Sharing you enable: people who can access a shared link can view the information made available through that link. A shared AI feature may also use that information to answer their questions. Choose what you share carefully. Revoking a link does not erase copies someone has already saved.
• Connected clients and services: we exchange information needed for integrations you authorize, including external AI clients and calendar services.
• Service providers: identity, hosting, storage, networking, AI, and other providers process information needed to supply their services to THRW. App stores process purchases under their own policies.
• Legal and safety matters: we may disclose information when reasonably necessary to comply with law, respond to lawful requests, protect rights and safety, investigate misuse, or resolve disputes.
• Business transfers: information may be transferred in connection with a merger, reorganization, financing, or sale, subject to applicable privacy requirements.

We store account and planning information to provide the service. Records removed from the app may remain in synchronization storage or backups; removing an item from view is not the same as permanently erasing every copy.

To request deletion of your THRW account and its associated personal information, email [email protected]. You can send the request from a browser without reinstalling THRW or signing in to this website. Account deletion is also available in the account settings of supported app versions.

Include your sign-in provider (Apple or Google), the email associated with the account or your THRW account ID if known, and a clear request to delete the entire account. If you use Apple Hide My Email, include the relay address associated with THRW if available. Do not send passwords, sign-in codes, or access tokens.

We need to establish that you own the account before acting on a deletion request. Verification depends on the information available and the scope of the request.

Permanent deletion of selected server-held data while keeping the account is not currently offered as a separate request service. You can remove items using the app, but related synchronization records can retain their contents. For questions about particular data, identify it in an email to us and make clear that you want to keep your account.

Account deletion does not erase every associated record. Purchase and subscription verification records, credit and AI usage records, synchronization records, backups, and uploaded support images may remain.

Account deletion does not cancel an App Store or Google Play subscription. Manage or cancel subscriptions through the relevant store separately. Information held by connected services and other recipients is subject to their own policies and deletion processes.

• Request account deletion
• Contact us about your data

Depending on where you live, you may have rights to access, correct, obtain a copy of, delete, or restrict the use of your personal information, or to object to certain processing. These rights may be subject to legal conditions and exceptions. Contact [email protected] to make a request.

You can manage microphone, speech-recognition, and notification permissions in your device settings, and manage access for connected services with the relevant provider. Withdrawing permission for future processing does not reverse processing that already took place.

We use technical and organizational safeguards designed to protect information, including authenticated access, encrypted transport, encryption for sensitive synchronized payloads in server storage, and limits on production logging of raw planning content.

No system is completely secure. Protect your device and identity-provider account and contact us if you suspect unauthorized access.

THRW and its service providers may process information in countries other than where you live. Processing locations depend on the infrastructure, routing service, and model providers used for the feature. Data protection laws in those locations may differ from those in your country. International transfers remain subject to applicable legal requirements.

thrw is not directed to children under 13 or a higher minimum age required by local law. If you believe a child provided personal information without valid authorization, contact us so we can investigate and take appropriate action.

We may update this policy when our service or data practices change. The effective date above identifies the current version. Where required by law, we will provide additional notice or obtain consent before a material change takes effect.

Privacy questions and requests may be sent to DDPPEE at [email protected].

• Email the privacy contact