Privacy Policy

What we collect

• Account details. Your name and email address, handled by our authentication provider (Clerk) when you sign in.
• Your content. The things you put into The Thinker: tasks, projects, ideas, rituals, notes, brain dumps and Success Days.
• Google Calendar data (only if you connect it). If you choose to connect Google Calendar, we request read-only access to your calendar events.
• Billing details. If you subscribe, payments are handled by Stripe. We never see or store your full card details.
• Basic usage data. Standard technical information (such as your approximate device and browser) needed to run and secure the service.

If you join our mailing list

You do not need a Thinker account to hear from us. If you sign up for a workshop, a webinar, a waiting list or our newsletter, we keep a separate contact record for you.

What is in it: your email address, your name if you gave one, your phone number if you chose to give one (always optional), where and when you signed up, the wording of the consent you agreed to, any labels we add to group people sensibly, and a record of which emails we sent you and whether they arrived, were opened or were clicked.

Why we are allowed to: your consent, given by ticking the box on the form. We store the date you gave it and the exact wording you saw, so it is always clear what you agreed to. We do not add people to this list without that, and we never buy, sell, rent or share the list.

Stopping: every email has a one-click unsubscribe in the footer, and your email software may offer its own unsubscribe button too. Either works immediately, and no further campaigns will be sent to you. If you would rather have your contact record deleted outright rather than just marked unsubscribed, email us and we will remove it.

We use Resend to deliver these emails. Emails may contain a small image and tracked links so we can see whether a message was opened or clicked. That tells us which emails are useful; it is not used to build a profile of you.

Cookies

We keep cookies to a minimum and we do not use advertising or cross-site tracking cookies. In short: cookies that keep you signed in, plus a couple that stop us double-counting the same visit. Full detail, including names and how to refuse them, is on our cookie page.

How we use Google Calendar data

When you connect Google Calendar, The Thinker requests the read-only calendar scope (calendar.readonly). We use this access for one purpose only: to read your events for the current day so The Thinker can plan your day around your meetings and show you what is coming up.

We do not create, edit or delete anything in your calendar. We do not store your calendar events long-term; they are read when you view your day and are not retained beyond what is needed to show them to you. You can disconnect Google Calendar at any time from the AI Agents settings, which removes our access.

The Thinker’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not use it for advertising, and we do not use it to train generalised AI or machine-learning models.

How your content is used

Your content is used to provide the service to you: to store, organise and display your plans. Some features use AI to help sort your brain dump, build your Success Day or evaluate ideas. To do this, the relevant content is sent to our AI provider (Anthropic) to generate a response. This data is processed to serve your request and is not used to train their models.

Who we share data with

We do not sell your data. We share it only with the service providers that help us run The Thinker, each acting on our instructions:

• Clerk for sign-in and account management.
• Vercel and Neon for hosting and the database.
• Anthropic for the AI features.
• Stripe for subscription billing.
• Resend for sending email, both service emails and, if you opted in, our mailing list.
• Google for calendar access, only if you connect it.

How we protect and keep your data

Data is stored on reputable cloud infrastructure in the UK and Europe, and access tokens are kept securely. You can delete your content in the app, disconnect Google Calendar at any time, or email us to close your account and have your personal data deleted.

How long we keep things. Your account and its content: for as long as your account is active, and deleted when you close it. Mailing list contact records: for as long as you are subscribed. If you unsubscribe we keep a minimal record of your email address and that you opted out, because that is the only reliable way to make sure we do not email you again by mistake; tell us if you would rather it were deleted entirely. Billing records are kept for as long as tax and accounting law requires.

Your rights

Depending on where you live (including under UK and EU data protection law), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Where we rely on your consent, you can withdraw it at any time. To exercise any of these, email hello@cordeliakate.com and we will help. We aim to respond within a few days, and always within one month.

If you are in the UK and you are not happy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you came to us first so we can put it right.

Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page.

Contact

The Thinker, by Cordelia Kate (Rebellious Business). Email hello@cordeliakate.com.