Privacy Policy

Effective date: 24 March 2026

Information we collect

When you register and use Thumos, we collect the following information:

• Email address and user ID (used for authentication via Supabase)
• Habit names, logs, and completion data you create in the app
• Identity statement and milestone progress
• Device push notification token (for reminders)
• Purchase and subscription status (via RevenueCat)
• Device type and operating system (collected automatically)

Thumos does not collect precise location data, contact lists, photos, or any data unrelated to habit tracking.

How we use your information

• To provide and operate the Thumos app and its features
• To generate AI-powered habit suggestions based on your habit data
• To send morning reminders, night reminders, streak protection alerts, and monthly digest emails (if enabled)
• To process and manage your subscription through RevenueCat
• To improve the app based on anonymised, aggregated usage patterns

Artificial intelligence

Thumos uses Anthropic's Claude AI to generate personalised habit suggestions. When this feature is used, relevant habit data (habit names, completion rates, skip reasons, and streak information) is sent to Anthropic's API for processing. No personally identifiable information such as your email address is included in these requests.

AI suggestions are generated on-demand via secure server-side Edge Functions. Your data is never sent to Anthropic from your device directly.

Anthropic's privacy policy is available at anthropic.com/privacy.

Third-party services

Thumos uses the following third-party services. Each has its own privacy policy governing data handling:

• Supabase

  Database, authentication, and server functions
  Privacy policy →
• RevenueCat

  Subscription and in-app purchase management
  Privacy policy →
• Anthropic

  AI-powered habit suggestions
  Privacy policy →
• Expo

  Push notification delivery
  Privacy policy →
• Resend

  Transactional email (monthly digest)
  Privacy policy →
• Google Play Services

  Android platform services
  Privacy policy →

Data retention and deletion

Your data is retained for as long as your account is active. If you request account deletion, all personally identifiable data will be removed from our systems within 30 days.

To request deletion of your data, contact us at hello@mythumos.app.

Your rights under GDPR

If you are located in the European Economic Area or Serbia, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data
• Right to data portability — request your data in a machine-readable format
• Right to restrict processing — request that we limit how we use your data
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at hello@mythumos.app. We will respond within 30 days.

Children's privacy

Thumos is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Security

All data is transmitted over HTTPS and stored in Supabase with row-level security enabled. We limit access to your data to the minimum necessary for the service to function.

Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by updating the effective date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.