Privacy policy

Last updated: June 7, 2026

1. Data controller

The controller of your personal data is Rincon sp. z o.o., ul. Spacerowa 9, 10-687 Klewki, Poland, registered in the National Court Register under KRS 0001242776, NIP 7394035448, REGON 544828315.

Contact: hello@thinkoff.eu

2. What data we collect

• Account data: email address, password (hashed), optionally name, country, language.
• Note content: text and audio recordings you create in the app.
• Data generated from notes: tasks, events, facts about you, boards.
• Technical data: device timezone, device type, language, session identifier.
• Diagnostic data: error logs, server response times (anonymous).

3. Purpose and legal basis

We process your data to:

• Provide the service (Art. 6(1)(b) GDPR — performance of a contract)
• Communicate with you (e.g. password recovery) — Art. 6(1)(b) GDPR
• Maintain account security — Art. 6(1)(f) GDPR (legitimate interest)
• Comply with legal obligations (accounting, taxes) — Art. 6(1)(c) GDPR

4. Where we store data

All data is stored on Supabase Inc. servers in the Frankfurt (Germany) region, within the European Union. We do not transfer data outside the EU.

5. Who we share data with

We use the following data processors:

• Supabase Inc. — database and application hosting (Frankfurt, EU).
• OpenAI L.L.C. — audio transcription via Whisper model (USA, under Standard Contractual Clauses).
• DeepSeek — note content extraction (text analysis).
• Google LLC — Google account login, optional Google Calendar sync (USA, under SCCs).

Data processing agreements are in place. None of these processors use your data to train their own AI models or for purposes other than fulfilling services for us.

6. Data retention

• Account data and note content — until you delete your account.
• After account deletion — data is removed from production within 30 days. Backups rotate every 90 days.
• Accounting data — as required by Polish accounting law (typically 5 years).

7. Your rights

You have the right to:

• Access your data
• Rectify your data
• Delete your data (right to be forgotten) — in app: Profile → Delete account
• Restrict processing
• Data portability — in app: JSON export
• Object to processing
• Lodge a complaint with the Polish Data Protection Authority (uodo.gov.pl)

8. Artificial intelligence

ThinkOff uses AI models for audio transcription and meaning extraction:

• OpenAI Whisper — audio to text transcription.
• DeepSeek V3 — organising content into tasks, events and facts.
• OpenAI text-embedding-3-small — semantic search (optional).

None of these models are trained on your data. You can disable AI features at any time in app settings.

9. Cookies and analytics

The thinkoff.eu website uses only technically necessary cookies (login session). We do not use analytics or marketing cookies. We do not track website visitors.

10. Policy changes

If we make material changes, we will notify you by email at least 14 days in advance. Minor language changes are published without notice, but the last update date is always visible at the top of this page.

11. Contact

Privacy questions: hello@thinkoff.eu

Rincon sp. z o.o.
ul. Spacerowa 9, 10-687 Klewki, Poland
NIP 7394035448 · KRS 0001242776 · REGON 544828315