Privacy, in plain language.

What stays on your Mac

Quick Voice is transcribed locally. Local History, including activity records created by the app, remains on the Mac where CoThinker is used. Clerk-backed session material is stored in the macOS Keychain.

When CoThinker sends data

CoThinker Cloud sends the text and instruction needed for an Enhance or Scribe request to CoThinker’s authenticated Worker, which sends the request to Groq for processing. If you choose the optional personal Gemini-key mode, the request is sent directly to Google’s Gemini service instead. CoThinker does not upload local History as part of either path.

Account, analytics, and feedback

Clerk provides account authentication. PostHog receives small operational product events such as launches, completion or failure categories, and version information. CoThinker does not send dictated text, selected text, prompts, Scribe instructions or results, Enhance input or output, clipboard contents, passwords, tokens, or API keys to PostHog.

If you submit feedback, the description you write and any screenshot you choose to attach are sent to CoThinker’s feedback service and stored with its metadata so the issue can be investigated.

What we deliberately do not collect

CoThinker does not use PostHog as a store for your writing or account credentials, and it does not automatically upload voice recordings, local History, or clipboard contents.

CoThinker in ChatGPT and Codex

Guest consultations do not create a saved project. When you ask to save, we store the selected working brief, source links, plan versions, approval time and reported results in Neon, linked to your Clerk account. We do not request or store the full ChatGPT or Codex conversation. Your AI provider handles the conversation under its own terms.

When enabled, web research sends a short task-specific question to OpenAI’s Responses API and web search. We set response storage off; provider security and retention policies still apply. Do not include secrets in a research question or saved brief. Hosting is provided by Vercel. Operational logs should contain error categories, not brief or query contents.

Saved projects remain until you delete them from Saved projects. Deletion removes the live brief, versions, approvals and results; provider backups may persist for their configured recovery period. Deleting a CoThinker project does not delete your conversation with an AI provider. Contact us for account-level deletion assistance.

Research limits use daily one-way identifiers to prevent abuse, not raw IP addresses in our application tables. Content-free usage measurements distinguish consultation feedback, saved and reopened projects, CoThinker page visits and visits onward to ThinkVelocity. When analytics is disabled, those events are not sent. We do not send brief text or source queries to analytics.

Questions

For a privacy question or a problem report, contact hello@toteminteractive.com.