Privacy Policy

ddppee operates thrw and is responsible for the processing described in this policy. This policy applies to the thrw mobile apps, authenticated web app, public website, synchronization service, and AI-assisted features.

Contact us at ddppee@ddppee.com with privacy questions or requests.

We collect information you provide, information needed to operate your account and requested features, and limited technical information generated when the service is used.

• Account information: the Apple or Google account identifier used for sign-in, and your name and email address when the identity provider makes them available.
• Planning content: todos, lists, groups, schedules, notes, messages, AI conversations, learned context, attachments, suggestions, completion state, and related timestamps or metadata.
• Preferences: language, time zone, display settings, and feature choices.
• Service records: synchronization revisions, authentication sessions, AI-run status, feature operations, and records needed to prevent duplicate or unauthorized actions.
• Technical information: network requests, error and security events, IP address and similar connection information that our infrastructure necessarily processes when you contact the service.
• Support communications: the content and contact details you send when asking for help or making a privacy request.

We use information only for the purposes described below or for another purpose disclosed when we ask for permission.

• Create and secure your account and authenticate supported sign-in methods.
• Store, synchronize, search, and display your planning information across supported devices.
• Provide AI-assisted planning, question answering, suggestions, and automation that you request.
• Maintain reliability, investigate errors, prevent fraud or abuse, and protect users and the service.
• Respond to support, privacy, and legal requests.
• Comply with applicable law and enforce the Terms of Service.

thrw may keep durable working data on your device so core planning features can continue when the network is unavailable. When synchronization is enabled, selected account and planning data is also transmitted to and stored by thrw servers.

Sensitive synchronized payloads are encrypted in server storage. Authorized service components must decrypt content when necessary to synchronize it, perform a requested search, execute an AI request, or otherwise provide a feature you invoke.

When you choose to use an AI feature, thrw sends the information needed for that request from your device or synchronized workspace to the thrw server. The server then sends the request to a third-party AI routing service, which forwards it to a selected AI model provider to generate a response.

Depending on the feature, the request may include your prompt, relevant conversation history, selected todos, notes, schedules, learned context, tool descriptions, and tool results. AI responses and related run state may be returned to your device and stored with your synchronized workspace. We do not intentionally include your Apple or Google authentication token, thrw access token, or provider credential in the model prompt.

The routing service may select OpenAI, Anthropic, DeepSeek, or a Qwen service operated by Alibaba Cloud or its affiliate. The selected provider may vary by request, feature, availability, or service configuration. The routing service and selected model provider process the request and generated output under their applicable developer-service terms and privacy practices.

Before personal planning content is first shared for AI processing, thrw will ask for your explicit permission. If you decline or later withdraw permission, AI features that require external processing will be unavailable, while non-AI features remain available. Avoid submitting information that is unnecessary for your request, especially another person's sensitive information.

• OpenAI Privacy Policy
• Anthropic Privacy Center
• DeepSeek Privacy Policy
• Alibaba Cloud Privacy Policy

We do not sell personal information or share it for cross-context behavioral advertising. We disclose information only as needed to operate requested features, protect the service, complete a business transaction, or comply with law.

• Identity providers: Apple and Google process sign-in information under their own terms and privacy policies.
• AI routing and model providers: the routing service and the selected provider receive the content described in the AI section only when an external AI feature is used with permission.
• Infrastructure providers: hosting, database, storage, networking, security, and support providers may process the minimum information needed to perform services for us.
• Legal and safety disclosures: we may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or defend legal claims.
• Business transfers: information may transfer as part of a merger, financing, reorganization, or sale, subject to applicable privacy requirements.

We retain account and synchronized planning information while your account remains active and for as long as needed to provide the service. Deleted or replaced records may remain temporarily in synchronization history, security records, and backups until they are safely overwritten or no longer needed.

When you delete your account or request deletion, we will delete or de-identify personal information under our control within a reasonable period, except information we must retain for security, fraud prevention, dispute resolution, or legal compliance. External providers may retain information under their own applicable terms and legal obligations.

You can request account or data deletion at ddppee@ddppee.com. When in-app account deletion is available, you may also initiate deletion from the account settings. We may need to verify that a request comes from the account owner.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information. You may also withdraw consent for processing based on consent. These rights may be subject to legal exceptions.

You can manage device permissions through system settings and may contact ddppee@ddppee.com to exercise a privacy right. Withdrawing AI-processing permission stops future external AI requests but does not invalidate processing that lawfully occurred before withdrawal.

We use technical and organizational safeguards designed to protect information, including authenticated access, encrypted transport, encryption for sensitive synchronized payloads in server storage, and limits on production logging of raw planning content.

No system is completely secure. Protect your device and identity-provider account and contact us if you suspect unauthorized access.

Service providers may process information outside your country. AI processing locations depend on the routing service and selected model provider and may include the United States, the People's Republic of China, Singapore, or other regions where those providers operate. Where required, we use appropriate legal mechanisms or obtain permission for an international transfer.

thrw is not directed to children under 13 or a higher minimum age required by local law. If you believe a child provided personal information without valid authorization, contact us so we can investigate and take appropriate action.

We may update this policy as the service, providers, or legal requirements change. We will update the document version and effective date and provide additional notice when a change materially affects how we use personal information or requires renewed permission.

Privacy questions and requests may be sent to ddppee at ddppee@ddppee.com.

• Email the privacy contact