1. Scope of this Policy

This Privacy Policy applies only to individuals physically located within the United States. Thoughtful does not market, offer, or provide the Service to users outside the United States. If you are located outside the U.S., you are not authorized to use the Service.

REMINDER: Thoughtful IS NOT A HEALTHCARE PROVIDER, MEDICAL DEVICE, OR SUBSTITUTE FOR PROFESSIONAL ADVICE. IF YOU NEED HELP, CONTACT A LICENSED PROFESSIONAL OR EMERGENCY SERVICES.

2. Information We Collect

We collect the following categories of information:

We do not intentionally collect sensitive medical information (such as PHI under HIPAA). Please do not submit such data.

3. How We Use Your Information

We use collected information to:

• Operate and maintain the Service.

• Train and improve AI models.

  • Thoughtful uses Inputs and Outputs to improve its AI models. This use is a core part of the Service, and by using Thoughtful you agree to this processing. If you do not agree, do not use Thoughtful.

• Conduct analytics, research, and product development.

• Monitor usage, ensure security, and detect misuse.

• Communicate with you about updates, features, and policy changes.

Use of Sensitive Personal Information (SPI)

“Sensitive Personal Information” under California and other state laws may include things like health-related reflections, racial or ethnic origin, religious or philosophical beliefs, sexual orientation, union membership, government ID numbers, or precise location.

• Not Required: You are not required to provide SPI to use Thoughtful. We ask that you avoid submitting such information unless you are comfortable doing so.

• Default Handling: If you provide SPI while using the Service, we will process it only as necessary to deliver the Service to you (for example, to generate responses back to you).

• Optional Consent for Model Training: We will only use SPI for AI model training or product improvement if you have given us separate, explicit consent through a clear opt-in prompt. If you do not consent, your SPI will not be used for model training.

• Withdrawal of Consent: You may withdraw your consent at any time by emailing careteam@thoughtful.com or updating your privacy settings. Withdrawal will apply going forward and will not affect models already trained.

4. Sharing of Information

We may share information:

• With Service Providers: Vendors who help us run the Service (cloud hosting, analytics, support).

• With Research Partners: Academic or industry collaborators, but only with aggregated or deidentified data.

• During Business Transfers: If Thoughtful is acquired, merged, or undergoes a similar corporate event.

• When Legally Required: If required to comply with law, regulation, subpoena, or government request.

We do not sell your personal information for money. Some disclosures may be considered “sharing” under certain state privacy laws, and you may opt out by contacting Thoughtful at careteam@thoughtful.com

5. Privacy Rights (U.S. State Laws)

Depending on your state of residence, you may have rights to:

• Access the personal information we hold about you.

• Request correction or deletion.

• Receive a copy of your information in a portable format.

• Opt out of the “sale” or “sharing” of your personal information.

• Limit the use of sensitive personal information (see Section 3).

• Be free from discrimination for exercising your privacy rights.

To exercise these rights, contact us at careteam@thoughtful.com or through our designated web form.

You have the right to request deletion of your account and personal information. Deleting your account will permanently remove your profile, all settings, and any personal data associated with your account.

After deletion is complete, you will be logged out of the app. You may still see products or aggregate trends based on anonymized data, but such data cannot be used to identify you or restore your prior account. If you choose to sign up again after you have deleted your account, your new account will be fresh and unconnected to any prior data or identifiers.

6. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than the 36 months after the period of time in which users have an active account with us.

Data considered Protected Health Information (PHI) — may be retained for the period required by law.

7. Security

We implement technical and organizational safeguards to protect your data. However, no system is 100% secure.

8. Third-Party Services

Thoughtful may integrate or link to third-party services. Those services are governed by their own privacy policies and terms. We are not responsible for their data practices.

9. Children’s Privacy

The Service is not directed at children under 18. We do not knowingly collect data from minors.

10. Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice on our website, through the Service, or by email. Continued use of the Service constitutes acceptance of the revised policy.

11. Contact Us

For privacy questions or requests, contact us at:
careteam@thoughtful.com

12. Entire Agreement

This Privacy Policy, together with the Thoughtful Terms of Service, constitutes the entire agreement between you and Thoughtful regarding your personal information and supersedes prior understandings.

REMINDER: Thoughtful IS NOT A HEALTHCARE PROVIDER, MEDICAL DEVICE, OR SUBSTITUTE FOR PROFESSIONAL ADVICE. IF YOU NEED HELP, CONTACT A LICENSED PROFESSIONAL OR EMERGENCY SERVICES.