Thumos Privacy Policy

This Privacy Policy explains how MetaMotion LLC ("MetaMotion," "we," "us") collects, uses, and shares information in the Thumos: Daily Excellence iOS app (the "App"). By using the App you agree to this Policy.

Contact: support@thumospractice.com (or andy@metamotionhq.com)

1. Summary

• The App has no account system. We do not ask for an email, password, phone number, or social login.
• During onboarding you type a few short answers about what you're working on. Those answers, plus the first name you enter, are sent to our AI provider to generate your personalized acknowledgment and sessions, then returned to your device.
• If you have Thumos Premium and choose to listen, the text of that session is sent to our text-to-speech provider to create the narrated audio (Section 2.3).
• We use a small number of well-known service providers for AI generation, backend hosting, subscription management, and product analytics (listed in Section 4).
• We do not sell your personal information, we do not use it for advertising, and we do not track you across other apps or websites. The App requests no advertising identifier.

2. Information we collect

2.1 Information you provide

Collected during onboarding and stored locally on your device:

2.2 Subscription information

If you start a free trial or purchase Thumos Premium, our subscription provider (RevenueCat) and Apple process the transaction. We receive your subscription status (active / trial / expired / none), the product purchased, and a random app-generated identifier. We never receive your credit card or Apple ID credentials — Apple handles payment.

2.3 Information collected automatically

• Usage and diagnostic events — e.g. which onboarding step you reached, screen views, feature taps, latency and error events. Used to understand the funnel and fix problems.
• Approximate technical data — app version, OS version, device model, and a randomly generated app user ID (created by RevenueCat; not linked to your Apple ID, name, or email).
• Approximate location — our analytics provider (Mixpanel) estimates your city, region, and country from your IP address and stores them with your usage events and the random app user ID. We use this only for aggregate analytics, never for advertising. The App does not use your device's location services and never collects precise location.
• Request security log — when the App asks our server to generate content, we log the request type, the time, your IP address, and the random app user ID. We use this only to prevent abuse and enforce usage limits, and delete it automatically after 7 days.
• Recent sessions — when our server writes a session for you (your first session during setup, and each Premium daily session), it keeps a copy of that session's text with the random app user ID. If the App is closed before the session arrives, we can deliver the same session when you reopen it instead of generating a new one, and if you have Premium, the copy is what our server reads aloud when you choose to listen. Because the session is written for you, its text includes your first name and details drawn from your onboarding answers. We use the copy only to deliver and narrate that session, and delete it automatically after 48 hours.
• Narrated audio (Thumos Premium) — when you press play on a session, our server sends the text of that session (the parts called Recall, Burn, and Commit, which include your first name and details drawn from your onboarding answers) to our text-to-speech provider (ElevenLabs) to create the audio. We do not send your name as a separate field, your random app user ID, or any other identifier. The audio files are stored on our server with the random app user ID and deleted automatically after 48 hours. The App downloads them to your device so you can replay recent sessions, including offline.
• Narration usage records — for each narrated session we keep the random app user ID, the session number, the time, the length of the text in characters, and whether narration succeeded. These records contain no session text or audio. We use them only to enforce fair-use limits on narration, and delete them automatically after 35 days.
• Feedback notes you choose to send — after a session, you can tell us that the day's act wasn't useful. The reason you pick is recorded as a usage event (above). If you also type a note, the App sends the note, the reason, and the App version to our server, which stores them with the date only: no random app user ID, IP address, or time of day, and the note never goes to our analytics provider. We read these notes only to improve sessions, and delete them automatically after 90 days. Please don't include details you'd rather we didn't read.

2.4 Push notifications

The App does not currently send push notifications. If we add optional reminders, Apple will issue a device push token that we will use only to deliver them, and you will be able to turn them off any time in iOS Settings → Notifications → Thumos.

2.5 What we do NOT collect

Contacts, photos, precise location, health or fitness data, biometric data, advertising identifiers (IDFA), browsing history, or cross-app tracking data.

If you save a Carry Card, the App asks only for permission to add images to your photo library. It can't see or read your photos, and the saved image stays in your library; it is never sent to us.

3. How we use information

• Generate your personalized onboarding acknowledgment and first session, and, for Thumos Premium members, a new session each day and, when you choose to listen, a narrated audio version of it.
• Deliver the App's core features, including the history of your sessions on your device.
• Prevent abuse of our AI generation and narration services and enforce usage limits.
• Process and restore subscriptions and free trials.
• Measure product usage and improve the onboarding funnel and content.
• Diagnose crashes and errors.
• Respond to support requests.

We do not use your information for advertising or for automated decisions that produce legal or similarly significant effects about you.

4. Service providers (sub-processors)

We share the minimum information needed with the following providers, each acting on our instructions under their own security and privacy commitments:

We will update this list before adding any new provider that processes personal information.

5. Storage, retention, and security

• Your onboarding answers and the sessions generated for you are stored on your device (in app storage) and are removed when you use Settings → Start Over or delete the App.
• Today's carry (the one act from today's session, shown in the App and in the Thumos widget if you add one) is stored on your device and cleared at midnight. Settings → Start Over also clears it, including from the widget. Carry Cards you saved to your photo library stay there until you delete them in Photos.
• Narrated audio downloaded to your device is kept only for the sessions listed on the App's Home screen (today's and up to seven earlier ones). Older audio is deleted automatically, and all of it is removed by Settings → Start Over or deleting the App.
• Onboarding text sent for AI generation is processed to fulfill your request and is not retained in a MetaMotion user database; provider-side logs follow each provider's retention schedule.
• The request security log (§2.3) is deleted automatically 7 days after each request.
• Copies of recently generated sessions (§2.3) are deleted automatically 48 hours after generation.
• Narrated audio on our server is deleted automatically 48 hours after it is created, and narration usage records 35 days after the session was narrated.
• Feedback notes (§2.3) are deleted automatically 90 days after the day they were sent.
• Analytics events are retained under Mixpanel's default retention.
• Subscription records are retained for as long as needed to provide the service and to meet tax, accounting, and legal obligations.
• We use encryption in transit (HTTPS/TLS) for all network requests.

6. Your choices and rights

• Clear your data: Settings → Start Over erases the answers stored on your device. Deleting the App removes all local data.
• Access or deletion request: email support@thumospractice.com and we will honor verifiable requests as required by the GDPR, UK GDPR, CCPA/CPRA, and the Virginia CDPA, including the rights to access, correct, delete, and (where applicable) port your information, and to object to or restrict certain processing. We will not discriminate against you for exercising these rights.
• Subscriptions: manage, cancel, or request a refund through your Apple ID account settings (Settings → [your name] → Subscriptions). We cannot cancel or refund an Apple subscription on your behalf.
• Notifications: disable in iOS Settings.

We do not "sell" or "share" personal information as those terms are defined under California law, and we do not process it for "targeted advertising."

7. Children

The App is intended for users 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child provided us information, contact support@thumospractice.com and we will delete it.

8. International users

MetaMotion LLC operates from the United States. If you use the App from outside the U.S., your information will be processed in the U.S. and other countries where our providers operate, which may have different data-protection laws. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for these transfers.

9. Changes to this Policy

We will post any changes here and update the "Last updated" date. Material changes will be surfaced in the App.

10. Contact

MetaMotion LLC 106 Broad St Ste 3 #182, Elizabethton, TN 37643, USA Email: support@thumospractice.com · andy@metamotionhq.com · 423-646-7830