Legal

Privacy Policy

Last updated: October 14, 2026

Your relationship data supports your ForThought account. You choose outgoing gestures and whether to enable email reminders. We do not sell your contact information.

What we collect

When you create a ForThought account we collect:

Your name and email address (used to create your account)
Contact information you add — names, birthdays, phone numbers, addresses, notes, and relationship details
Activity you log within the app (cards sent, calls made, etc.)
Your account profile preferences

How we use your data

Your data is used solely to power the ForThought app for you. Specifically:

To surface birthdays, milestones, and follow-up reminders
To draft messages and structure updates you request using Anthropic's API; prompts include relevant saved contact and profile context
To facilitate gestures you trigger — sending cards via Handwrytten, flowers via FloristOne, etc.

We do not use your data for advertising, profiling, or any purpose beyond operating the service for you.

Third-party services

ForThought uses these providers to operate the service and carry out features you choose:

Anthropic — generates message drafts. Relevant saved contact details and profile preferences are sent when you request AI suggestions or a Quick Update. Provider handling follows Anthropic’s applicable API terms and privacy policy.
Handwrytten — sends physical cards. Your recipient's mailing address is sent when you place a card order.
FloristOne — delivers flowers. Recipient address and order details are sent when you place a flower order.
Resend — can deliver optional email digests and reminders when configured and enabled by you. These include relevant contact names and event dates. Account confirmation and reset emails are delivered by the configured authentication email service.

Provider requests are limited to the information required for the selected feature. Opt-in reminders run on a schedule until you turn them off in your profile. Links to gift, dining, and travel websites open external services governed by their own policies.

Data storage and security

Your data is stored in Supabase, a secure cloud database. All data is encrypted at rest and in transit. Row-level access policies separate customer accounts. This is cloud storage rather than end-to-end encryption; authorized operators and infrastructure providers may access data to operate and support the service.

Data retention and deletion

You can delete your account and all associated data at any time by emailing hello@forthought.ai. We will permanently delete your data within 30 days of the request.

Cookies and local storage

ForThought uses browser storage to remember your session, preferences, and an account-specific activity cache. Provider connection details are cleared from the app session when you sign out. We do not use advertising cookies or third-party tracking.

Children's privacy

ForThought is not directed at children under 13. We do not knowingly collect data from anyone under 13.

Changes to this policy

If we make material changes, we'll notify you by email and update the date at the top of this page.

Contact

Questions? Email us at hello@forthought.ai.