Privacy Policy

Short version: We collect only what's necessary to run the app. We don't sell your data. Your presentation content is used solely to generate your deck and is never used to train AI models. You can delete your account and all data at any time.

This Privacy Policy explains how Aethelon Labs LLC ("we", "us", "Thumpdeck") collects, uses, and protects information when you use the Thumpdeck mobile application ("the App").

What we collect

Information you provide

DataWhenWhy
Email address When you create an account (optional) Authentication and account recovery
Presentation prompts When you generate a deck Sent to Claude AI to create your presentation
Presentation content When you save or sync a deck Stored to enable editing, export, and sharing
Brand kit When you set up a brand kit (Pro) Applied to your generated presentations

Automatically collected

DataWhy
Anonymous usage events (e.g. "deck generated", "export tapped") Understand which features are used; improve the product
Crash reports (device type, OS version, stack trace — no PII) Fix bugs
Subscription status Unlock Pro features via RevenueCat

What we do NOT collect

  • Location data
  • Contacts, calendar, or photos (beyond what you explicitly share)
  • Browsing history or data from other apps
  • Device identifiers for advertising (IDFA)

How we use your information

  • Generate your presentations — your prompt is sent to Anthropic's Claude API and returned as structured slide data
  • Store and sync your decks — so you can access them across devices when signed in
  • Process payments — subscription status managed by RevenueCat/Apple/Google
  • Fix bugs — anonymized crash logs help us reproduce and resolve issues
  • Improve the product — aggregate, anonymized usage events (no PII)

We will never sell, rent, or share your personal information with third parties for advertising purposes.

Third-party services

Thumpdeck integrates with the following services. Each has its own privacy policy.

Anthropic (Claude AI) AI generation — your prompts are sent to Claude. Anthropic does not use API inputs to train models.
Supabase Authentication — stores email and session tokens in encrypted US-based infrastructure.
RevenueCat Subscription management — handles purchase validation with Apple/Google.
PostHog Product analytics — anonymized, self-hosted-compatible event tracking. No cross-site tracking.
Pexels / Unsplash Stock photos — image searches are made server-side; your query is sent to fetch relevant images.
Apple / Google App distribution and in-app purchases. Governed by Apple's and Google's own privacy policies.

AI and your content

When you generate a presentation, your prompt is transmitted to Anthropic's Claude API. Anthropic's API Terms of Service explicitly state that API inputs and outputs are not used to train AI models.

Your generated decks belong to you. We do not read, use, or repurpose your presentation content for any purpose other than delivering the service to you.

AI-generated content may occasionally be inaccurate. You are responsible for reviewing any AI-generated content before sharing or relying on it.

Data retention

  • Presentation data: Retained as long as your account is active. Deleted within 30 days of account deletion.
  • Authentication data: Retained by Supabase until you delete your account.
  • Crash logs: Automatically purged after 90 days, capped at 32KB per device session.
  • Analytics events: Anonymized; retained for 12 months.

Your rights

Depending on your location, you may have the following rights:

  • Access — request a copy of the data we hold about you
  • Deletion — delete your account and all associated data in Settings → Account → Delete Account, or by emailing us
  • Correction — update your email address in Settings → Account
  • Portability — export your presentations as .pptx, .pdf, or PNG from within the app
  • Opt-out of analytics — email privacy@thumpdeck.com to opt out of analytics collection at any time

For GDPR (EU/UK) or CCPA (California) requests, email privacy@thumpdeck.com. We respond within 30 days.

Cookies & local storage

Thumpdeck is a mobile app and does not use browser cookies. The app uses device-local storage (iOS Keychain / Android Keystore for secure values; SharedPreferences for non-sensitive user preferences such as selected theme and draft prompts). This local storage:

  • Never leaves your device unless you are signed in and sync is active
  • Is not shared with advertisers or third-party trackers
  • Can be cleared by uninstalling the app

The share viewer at thumpdeck.com/s/… does not set cookies. It fetches deck data once per page load using your share token.

Children's privacy

Thumpdeck is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

Privacy questions?

Contact us at privacy@thumpdeck.com
Aethelon Labs LLC · United States

Email Privacy Team