Privacy Policy

1. Who operates ThoughtReps

ThoughtReps is currently operated by Paul Tongyoo. In this policy, “ThoughtReps,” “we,” “us,” and “our” refer to Paul Tongyoo operating the ThoughtReps service.

2. Information we collect

The information we collect depends on how you use ThoughtReps. It can include:

• Account and authentication information. If you create an account, we collect information such as your email address and account identifiers. Authentication is provided through Supabase Auth. ThoughtReps does not intentionally store your password in plaintext in its own application database.
• ThoughtReel content and settings. We may store ThoughtReel names, selected categories or contexts, ThoughtRep selections, custom ThoughtRep text, ThoughtRep selection/order preferences, Focus-card selections and exercise counts or placement settings, avatar or appearance settings, and other preferences you choose.
• Optional age group. A ThoughtReel can use General wording or an optional age group (13–15, 16–17, or 18+). We store that selection with the ThoughtReel and use it to choose ThoughtRep wording intended to be easier to understand at different ages. You can leave the setting at General, and we do not ask for a birth date for this feature.
• Uploaded media, Moment content, and editing information. If you add videos or photos, we may receive the source media, rendered clips or images, poster or first-frame images, trim selections, portrait-framing or crop information, ordering, file metadata, and related processing information. If you create a text Moment, we receive the text, selected background, date settings, and related configuration. Uploaded media may include you or other people who appear in content you provide.
• Media-processing and export records. To prepare videos, photos, text Moments, and downloadable ThoughtReels, we create technical records such as job identifiers, processing status, error information, source and output storage references, export snapshots, and timestamps.
• Sharing and device-access information. Some ThoughtReels can be viewed through temporary share links or through a parent/owner-authorized device. We may store the identifiers, hashed device credentials, and metadata needed to make those experiences work and to let the owner revoke device access.
• Billing and product-interest information. If you purchase Plus, our payment provider processes payment details and we receive subscription and billing-status information needed to manage your plan. If you ask to be notified about Game Film or another unavailable feature, we may collect your account/email information, the plan or feature selected, displayed price, trigger/source information, page path, referrer, and timestamp. ThoughtReps does not receive or store your full payment-card number.
• Support and communications. If you contact us, we receive the information you choose to include in the message.
• Usage and analytics information. We collect product-research and usage events such as page or section views, navigation and button interactions, scroll depth, ThoughtReel progress, ThoughtRep or Focus-card interactions, pricing-interest events, and similar product-use signals. Event data may also include technical context such as a session identifier, app environment/release, browser or device characteristics, screen or viewport size, page path, and referrer.
• Technical information. Our hosting, storage, authentication, analytics, and security providers may receive technical information that is normally transmitted when you use an online service, such as IP address, browser type, device information, request timestamps, and network or diagnostic information.

3. Browser storage and similar technologies

ThoughtReps uses browser storage and similar technologies to keep the service working and reduce repetitive steps. For example, the public site may remember an email used for a paid-plan notification request and a recently selected plan, and the app may retain authentication/session information needed to keep you signed in. When a ThoughtReel owner uses Add to a device, that authorized phone or tablet may also store a persistent device credential so it can reopen that specific ThoughtReel without signing in. We also use Amplitude for event analytics. ThoughtReps does not currently use this information to serve targeted advertising.

4. How we use information

We use information to:

• create and authenticate accounts;
• provide, personalize, and maintain ThoughtReels and related features;
• use an optional ThoughtReel age-group selection to tailor ThoughtRep wording for understandability at different ages;
• store, trim, frame, transcode, render, play, share, and export media at your direction;
• operate product-interest notifications and communicate with you about features you asked about;
• provide support and respond to requests;
• understand how people use ThoughtReps and improve product design, reliability, performance, and safety;
• detect, investigate, and prevent abuse, security incidents, fraud, harmful-content reports, or violations of our Terms of Use;
• comply with legal obligations and protect the rights, safety, and property of users, ThoughtReps, and others.

We do not sell personal information. We do not currently use personal information for cross-context behavioral advertising.

5. Uploaded media, people in your content, and shared ThoughtReels

ThoughtReps is designed to work with personal performance media. Please upload only media you are authorized to use. If your media includes teammates, children, students, spectators, family members, or other people, you are responsible for having any permissions or other legal basis needed to upload, process, share, or export that media.

Custom ThoughtReps and other user-entered text are stored as part of the ThoughtReel. If you choose to create a share link or export a ThoughtReel that includes ThoughtReps, that text may be disclosed to the people who receive or view the shared content.

Rendered app media is generally stored in private cloud storage and delivered through short-lived signed media URLs or authenticated/public reel-content flows as appropriate. Temporary share links are designed for limited viewing. Separately, an account owner may use Add to a device to give a specific phone or tablet ongoing, view-only access to one ThoughtReel without signing that device into the owner’s account. That device access remains available until it is revoked, the ThoughtReel/account is removed, or the stored device credential is otherwise invalidated. Device access does not provide editing, sharing, downloading, account, or settings privileges.

Public marketing/demo media on thoughtreps.net is separate from private user-uploaded app media.

6. Service providers

We use third-party providers to operate ThoughtReps. Current providers include:

• Supabase for authentication and application/database services;
• Amazon Web Services (AWS) for media/object storage, serverless APIs, video-processing infrastructure, operational logging/monitoring, product-interest storage, and email delivery;
• Render for public/static website hosting; and
• Amplitude for product analytics; and
• Stripe for payment collection, subscription billing, and related payment processing.

These providers may process information on our behalf in the United States and other locations where they operate. We may change or add providers as the service evolves.

7. When we disclose information

We may disclose information:

• to service providers that help us operate ThoughtReps;
• when you direct us to share content, such as by creating or using a shareable ThoughtReel or exporting a video;
• when reasonably necessary to comply with law, legal process, or valid governmental requests;
• to protect the rights, safety, security, and integrity of ThoughtReps, our users, or others; or
• in connection with a financing, merger, acquisition, reorganization, sale of assets, or similar business transaction, subject to applicable law.

8. Data retention

We retain personal information for as long as reasonably necessary to provide and improve the service, maintain security and business records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type. Account content may remain while your account is active; media-processing files, exports, logs, backups, and operational records may be retained for different periods based on their purpose. We aim not to keep information longer than reasonably necessary for the purpose for which it was collected.

9. Your choices and privacy rights

You can start deletion of your ThoughtReps account from Account Settings. The deletion process is asynchronous and is designed to remove your user-owned private ThoughtReps media, ThoughtReel/application data, product-interest records associated with the account, and the authentication identity after the related data has been removed. You may also contact us to request access to, correction of, or deletion of personal information associated with you. We may need to verify your identity and may retain limited information where required or permitted by law, including for security, fraud prevention, legal compliance, backup lifecycle, or legitimate recordkeeping.

Depending on where you live and whether a particular privacy law applies to ThoughtReps, you may have additional rights regarding your personal information. California law, for example, provides qualifying consumers rights that can include knowing, deleting, and correcting personal information, opting out of sale or sharing, limiting certain uses of sensitive personal information, and receiving equal treatment for exercising privacy rights. ThoughtReps does not currently sell personal information or use it for cross-context behavioral advertising.

10. Children and teenagers

ThoughtReps is not intended for children under 13, and children under 13 should not create an account or submit personal information through the service. Teenagers ages 13 through 17 should use ThoughtReps only with the permission and appropriate involvement of a parent or legal guardian.

If we learn that we collected personal information directly from a child under 13 without legally sufficient parental consent, we will take reasonable steps to delete it. A parent or guardian who believes a child under 13 has provided personal information to ThoughtReps should contact us using the information below.

Adults who upload media involving minors are responsible for making sure they have appropriate authority and permissions to do so.

The optional Age Group setting is used only to adapt ThoughtRep wording. It is not an age-verification tool and does not change the account eligibility or parent/guardian involvement requirements described above.

11. Sensitive information

ThoughtReps is a mental-performance practice product, not a medical or mental-health service. Please do not use ThoughtReps to submit medical records, diagnoses, treatment information, government identification numbers, financial account credentials, passwords, or other highly sensitive information that the service does not request. Avoid placing sensitive personal information in custom ThoughtReps, support messages, or other free-form fields.

12. Security

We use administrative, technical, and organizational measures designed to protect information, including private cloud media storage for app media, short-lived signed URLs for certain media access, access controls, environment-scoped infrastructure, and server-side credentials for privileged operations. No system is completely secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or lost.

13. International use

ThoughtReps is operated from the United States. If you use the service from another country, your information may be transferred to and processed in the United States and other countries where our providers operate, which may have different data-protection laws than your home jurisdiction.

14. Changes to this policy

We may update this Privacy Policy as ThoughtReps changes. We will post the revised policy here and update the effective date. If a change materially affects how we handle information, we may provide additional notice when appropriate.

15. Contact

Privacy questions and requests can be sent to Paul Tongyoo at paul.tongyoo@gmail.com.