Privacy Policy
Think Further Ltd · Last updated: June 2026
This policy explains what personal data Think Further Ltd collects, why we collect it, how long we keep it, and what rights you have over it.
We are committed to handling your data honestly and minimally. Think Further is a thinking tool — the content of your sessions is personal, and we treat it that way.
1. Who We Are
Think Further Ltd is the data controller for the personal data described in this policy.
Registered in England and Wales. Company number: 17249084. Registered office: 82a James Carter Road, Bury St. Edmunds, IP28 7DE.
For data protection enquiries, contact us at privacy@thinkfurther.uk.
2. What Data We Collect
Account information
When you create an account, we collect your first name and email address. These are used to authenticate you, deliver communications, and identify your account.
Session content
When you use Think Further, the messages you send and the AI responses you receive are processed to generate replies and are stored so you can access previous sessions. Session content includes the persona you chose, the topic you brought, and the exchange that followed.
Usage data
We collect structured data about how you use the service. This includes:
- Number of sessions completed and your session sequence number
- Number of exchanges within each session
- Which persona you used in each session
- Session topic or tag
- Whether a session wrap-up was completed
- Whether a session was a continuation of a previous one
- Number of API calls made during a session
- Which features you opened and when
- Session start time and duration (approximate)
This data is used solely to understand how the product is being used so we can improve it. It is never shared with third parties, sold, or used for advertising purposes.
Goals and check-ins
If you use the goal-setting feature, we store the goal text and any scheduled reminder dates you choose. This data is not shared with third parties.
Weekly reviews
If you complete a weekly review, we store your written answers to the review questions (up to eight, depending on whether you carried a commitment from the previous week), alongside derived data including how the week felt, your energy score, your weekly commitment, the AI-generated observation, and any session starters recorded. Your answers are stored so we can surface patterns back to you over time — recurring themes, energy trends, and the gaps between what you intend and what you follow through on. This data is used solely for your benefit and is never shared with third parties.
Feedback
If you submit feedback through the app, we store the content of that feedback alongside your account identifier.
Newsletter
If you subscribe to From the Desk, our newsletter, we store your email address for the purpose of sending you issues. Newsletter subscription is separate from your app account and managed through Brevo.
3. Why We Process Your Data
We process your data on the following legal bases:
- Contract performance — to provide you with the service you signed up for
- Legitimate interests — to understand how the product is used and improve it, where this does not override your rights
- Consent — for newsletter communications, which you may withdraw at any time
4. Third-Party Processors
We use the following third-party services to operate Think Further. Each is a data processor acting on our instructions.
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication — stores your account data, session records, and usage data | EU (London, eu-west-2) |
| Anthropic Ireland, Limited | AI model provider — processes the content of your session messages to generate responses. Anthropic retains session content for up to 30 days for safety and operational purposes. Anthropic does not train its models on API customer data. A Data Processing Addendum is in place. | Ireland (EU) |
| Resend | Transactional email — sends account-related emails including goal reminders, weekly review nudges, and operational notifications | US (Standard Contractual Clauses apply) |
| Brevo | Newsletter platform — manages newsletter subscriptions and sends From the Desk issues | EU (France) |
| Vercel | Hosting and serverless functions — serves the application and processes API requests | EU (where applicable) |
We do not sell your data to any third party. We do not use your data for advertising.
5. Session Content and AI Processing
The content of your Think Further sessions — what you write, the problems you bring, and the exchanges you have — is processed by Anthropic's API to generate AI responses. This is the core function of the service.
We want to be direct about what this means: your session content passes through Anthropic's infrastructure to produce the AI's reply. Anthropic Ireland is your data processor for this purpose, and a formal Data Processing Addendum governs this relationship. Anthropic does not use API data to train its models.
Session content is stored in our database so you can return to previous sessions. We recommend using common sense about what you share — if something is genuinely sensitive, treat it with the same caution you would any online service.
6. How Long We Keep Your Data
- Account data — retained while your account is active
- Session content — retained for 12 months from the date of the session, then deleted
- Usage and event data — retained for 24 months
- Goal data — retained until the goal period has passed, then deleted within 90 days
- Weekly reviews — retained for 12 months
- Feedback submissions — retained for 24 months
- Newsletter subscriptions — retained until you unsubscribe
When you close your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer.
7. Your Rights
Under UK GDPR, you have the following rights:
You can request a copy of the personal data we hold about you.
You can ask us to correct inaccurate data we hold about you.
You can ask us to delete your personal data. We will do so within 30 days unless we have a legal basis to retain it.
You can ask for your data in a machine-readable format to transfer to another service.
You can object to processing based on legitimate interests.
You can ask us to limit how we use your data in certain circumstances.
To exercise any of these rights, email us at privacy@thinkfurther.uk. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies and Analytics
The Think Further app does not currently use third-party analytics or tracking cookies.
The Think Further website (thinkfurther.uk) uses analytics to understand how visitors interact with published content. This may involve cookies. We use this data only in aggregate and do not use it to identify individuals.
Essential cookies — those required for the service to function, such as authentication — are used on the app. These are strictly necessary and cannot be disabled.
9. Children's Data
Think Further is not intended for anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us at privacy@thinkfurther.uk and we will delete the account promptly.
10. Account Deletion
To delete your account and request erasure of your personal data, email privacy@thinkfurther.uk with the subject line "Account deletion request." We will confirm deletion within 30 days.
Note: deletion of your account will permanently remove your session history, goals, weekly reviews, and all associated data. This cannot be undone.
11. Changes to This Policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. For material changes, we will notify you by email or by a notice when you next log in.
Data protection enquiries:
Think Further Ltd · Registered in England and Wales · 17249084