Privacy policy
Effective date: May 14, 2026
Last updated: May 14, 2026
thinkalong ("we," "our," or "us") provides a thinking partner for conversations. This Privacy policy explains how we collect, use, and protect your information.
1. Information we collect
Account information
- Email address (for authentication)
- Password (hashed, never stored in plain text)
Usage data
- Session start and end times and durations
- Subscription plan and billing status
- Device type and name (for session management)
Audio and transcript data
- Audio is captured in your browser and streamed to AssemblyAI for transcription. We do not store or have access to your raw audio.
- Transcripts and session data are stored securely in your thinkalong account. Data is encrypted at rest and in transit.
- Insights (questions, context, research) are generated in real time and saved to your session history.
Payment information
Payment processing is handled entirely by Stripe. We do not store credit card numbers or payment details. We store only the Stripe customer ID and subscription ID for managing your account.
2. How we use your information
- Provide the service: Authenticate your account, manage your subscription, and track usage hours.
- Improve the service: Analyze aggregate usage patterns (not individual transcripts) to improve performance and features.
- Communicate: Send essential service emails (account verification, billing notifications).
3. Data sharing
We share data only with:
| Third party | Data shared | Purpose |
|---|---|---|
| AssemblyAI | Audio stream (direct from device) and transcript text | Real-time transcription, plus AI insights generation (questions, summary, research) through AssemblyAI's LLM Gateway. We do not contract with the underlying model providers directly. |
| Stripe | Email, payment info | Subscription billing |
| Supabase | Account data, usage records | Authentication and data storage |
| Google Tag Manager | Page paths, click events, scroll depth, referring URLs | Loads our analytics tags. We use it to understand which pages people visit and which actions they take. |
| Google Analytics 4 | Pseudonymous device identifier, IP address (anonymized), page paths, custom events (sign-ups, plan selections, FAQ expansions, etc.) | Measures site traffic and product funnel. Ad personalization signals are turned off. We do not share this data with advertisers. |
We do not sell your personal information to third parties.
Cookies used by analytics
Google Analytics 4 sets the following first-party cookies on your browser:
- _ga: distinguishes unique visitors. Expires after 2 years.
- _ga_<container-id>: persists session state for Google Analytics 4. Expires after 2 years.
You can decline analytics any time. [Opt-out mechanism to be finalized with the consent banner work.]
4. Data storage and security
- Transcripts, insights, and session data are stored securely in your thinkalong account.
- Account and usage data are stored in a Supabase-hosted PostgreSQL database with encryption at rest.
- Authentication is handled via secure session tokens in your browser.
- All network communications use TLS encryption.
5. Data retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
- Usage records: Retained for 12 months for billing and support purposes.
- Session data (transcripts, insights, research): Stored in your account; you can delete individual sessions or your entire history at any time.
6. Your rights
You have the right to:
- Access your personal data
- Delete your account and associated data
- Export your session transcripts and insights
- Opt out of non-essential communications
To exercise these rights, contact us at privacy@thinkalong.app.
7. Recording consent
thinkalong captures audio from your device for transcription. You are responsible for:
- Obtaining consent from all conversation participants before recording
- Complying with applicable recording laws in your jurisdiction
- Many jurisdictions require two-party (all-party) consent for recording conversations
The app includes a consent reminder that can be enabled in Settings.
8. Children's privacy
thinkalong is not intended for use by individuals under 16 years of age. We do not knowingly collect information from children.
9. Changes to this policy
We may update this Privacy policy from time to time. We will notify you of material changes via email or in-app notification.
10. Contact
For privacy questions or concerns:
- Email: privacy@thinkalong.app
- Website: https://thinkalong.app