Privacy Policy

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• Precise location is optional, consent-based, used only to build your local news feed, and can be revoked at any time.
• AI assistant prompts are processed to answer your question and are not used to train third-party foundation models.
• You can access, correct, export, or delete your data at any time — in the app or by contacting us.
• This summary is for convenience only; the full policy below governs.

Think Right (“Think Right,” “we,” “us,” or “our”) provides a news ranking, AI assistance, and community discussion platform. This policy covers the Think Right website, the Think Right mobile applications for iOS and Android, and any related services, features, and support channels (together, the “Services”).

For users in the European Economic Area and the United Kingdom, Think Right is the “controller” of personal data processed through the Services, except where we act as a processor on behalf of another party and say so explicitly. This policy does not apply to third-party websites, publisher sites, or app stores that you reach through links in the Services; those are governed by their own policies.

By using the Services you acknowledge this policy. Where the law requires consent — for example, precise location or certain analytics — we ask for it separately and you may withdraw it at any time.

• Account information: name or display name, username, email address, password, and optionally a phone number or profile photo.
• Third-party sign-in: if you sign in with Apple or Google, we receive the identifier and email associated with that account (Sign in with Apple may supply a private relay email, which we accept).
• Profile details: bio, avatar, topics and regions you follow, notification and feed preferences.
• Community content: posts, comments, replies, reactions, images, polls, and direct messages you send.
• AI assistant input: the questions and follow-ups you type or dictate to the assistant.
• Reports and appeals: content you flag, moderation appeals, and any supporting details you send.
• Support and feedback: the contents of emails, contact-form submissions, surveys, and beta feedback.
• Payment-adjacent information: if we offer paid features, purchases are processed by Apple or Google; we receive a subscription status and receipt identifier, never your full card number.

• Device data: device model, operating system and version, app version, unique device or installation identifier, screen and locale settings, and network carrier type.
• Log data: IP address, access times, pages or screens viewed, referring URLs, and error states.
• Usage data: stories opened, time spent on a story, topics followed, searches, channels joined, assistant sessions started, and feature interactions.
• Performance and crash data: stack traces, memory and battery diagnostics, and latency measurements.
• Approximate location derived from IP address, used for coarse regionalization, fraud prevention, and legal compliance.
• Precise location from your device's location services, collected only if you grant the permission for the local news station.
• Cookies, SDKs, and similar technologies on the website and in the app, as described in our Cookie Policy.

We do not access your contacts, photos library, microphone, or camera unless you take an action that requires it (for example, attaching an image) and grant the corresponding permission. We do not collect health, biometric, or financial account data.

• News publishers, syndication partners, and content APIs, which supply article metadata (not personal data about you).
• Identity providers (Apple, Google) when you choose social sign-in.
• App stores, which provide aggregate install, crash, and subscription status information.
• Analytics and anti-abuse providers, which return derived signals such as suspected bot activity.
• Public sources, if you choose to link a public profile to your Think Right account.

The table below maps each category of personal information to its purpose and, for EEA/UK users, our legal basis under Article 6 of the GDPR.

• Deliver the ranked news feed and determine story priority.
• Generate and display the local news station when location is enabled, and power the local/global switch.
• Operate the AI assistant: interpret your question, retrieve relevant articles, generate a summary, and cite sources.
• Run community features including channels, threads, direct messages, follows, and notifications.
• Personalize which topics and stories surface for you, and let you turn personalization off.
• Detect, investigate, and prevent spam, fraud, harassment, scraping, and security incidents.
• Enforce our Terms of Use and Community Guidelines, including moderation and appeals.
• Provide customer support and respond to your requests.
• Measure aggregate product performance, run A/B tests, and improve ranking and design quality.
• Send transactional and service messages (security alerts, policy changes, support replies).
• Send optional product updates or newsletters, only where you have opted in or where permitted by law, with an unsubscribe link in every message.
• Comply with legal obligations, respond to lawful requests, and establish or defend legal claims.

If we ever want to use your personal information for a materially different purpose, we will update this policy and, where required, obtain your consent first.

Story priority and feed personalization are produced by automated systems that score signals such as breadth of coverage, recency, velocity of developments, and your stated topic interests. This ranking is editorial in nature; it does not produce legal or similarly significant effects about you, and no automated profiling is used to deny you a service, benefit, or right.

The AI assistant processes your prompt, retrieves relevant published articles, and generates a summary with citations. Prompts and generated responses may be transmitted to third-party model providers acting as our processors under contracts that prohibit them from using your data to train their own models. Assistant conversations may be reviewed by a limited number of authorized personnel for safety, abuse investigation, and quality purposes. Do not enter sensitive personal information, credentials, or confidential material into the assistant.

AI output can be inaccurate, incomplete, or out of date. It is informational only and is not legal, medical, financial, or professional advice. Always check the linked source articles.

• Precise location is never collected unless you affirmatively grant the permission at the operating-system level.
• We request 'while using the app' access only; we do not collect background location.
• Location is used solely to determine which local news region applies to you and to order local stories.
• We convert precise coordinates to a coarse region as soon as the local feed is built and do not retain identifiable precise coordinates beyond 24 hours.
• We do not sell, rent, or disclose location data to data brokers, advertisers, or location aggregators.
• You can revoke location access at any time in your device settings or in Settings → Location; the local station simply turns off.

We disclose personal information only in the circumstances described here. We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.

• Service providers and processors: cloud hosting and storage, database and authentication services, content delivery, email delivery, analytics, crash reporting, AI model providers, and customer support tooling. Each is bound by contract to process data only on our instructions and to maintain appropriate security.
• Other users: content you post in public channels, your display name, and your profile are visible to other users. Direct messages are visible to their recipients.
• App stores and platform providers: Apple and Google receive purchase and subscription data directly from you.
• Legal and safety: we may disclose information when we reasonably believe it is required by law, subpoena, court order, or governmental request, or where necessary to investigate fraud, protect our rights, or prevent imminent harm to any person.
• Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy continuing to apply to the transferred data.
• Aggregated or de-identified data: we may publish or share information that cannot reasonably be used to identify you, and we commit to not attempting to re-identify it.
• With your direction: when you ask us to share something, for example by connecting an integration.

On the website we use strictly necessary, preference, and analytics cookies. In the app we use software development kits for crash reporting, analytics, and authentication. We do not use third-party advertising SDKs, and we do not participate in cross-app tracking. Because we do not track you across apps and websites owned by other companies, we do not present the App Tracking Transparency prompt unless that ever changes — and if it does, we will ask for your permission first. Details and controls are in our Cookie Policy.

We honor Global Privacy Control signals transmitted by your browser as a valid opt-out request where applicable law recognizes them. Because there is no common industry standard for “Do Not Track” browser headers, we do not respond to them separately.

We keep personal information only as long as necessary for the purposes described in this policy, then delete it or irreversibly anonymize it. Where a legal, tax, audit, or dispute-resolution obligation requires a longer period, we retain the minimum necessary.

Deleting your account removes your profile and content from the Services. Copies may persist in encrypted backups for up to 90 days before being overwritten, and de-identified aggregate statistics may be retained indefinitely.

• Encryption of data in transit using TLS, and encryption at rest for stored data.
• Passwords stored only as salted one-way hashes; we never store them in readable form.
• Role-based access controls and the principle of least privilege for internal systems.
• Logging and monitoring of administrative access to production data.
• Vendor security review before onboarding processors that handle personal data.
• Periodic review of code, dependencies, and infrastructure configuration.
• An incident response process, including notification to affected users and regulators within the timeframes required by applicable law.

No system is perfectly secure. You are responsible for keeping your credentials confidential and for enabling device-level protections. If you believe your account has been compromised, contact us immediately.

The Services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Consistent with the U.S. Children's Online Privacy Protection Act (COPPA), if we learn that we have collected personal information from a child under 13, we will delete it promptly. A parent or guardian who believes a child has provided us information may contact us to request deletion.

Where local law sets a higher digital age of consent (for example, up to 16 in parts of the EEA), we require that users meet that age or have verifiable parental consent. We do not knowingly profile minors for advertising purposes and do not sell or share the personal information of users we know to be under 16.

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, or another state with a comprehensive privacy law, you may have the rights below.

• Right to know or access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
• Right to correct inaccurate personal information.
• Right to delete personal information we collected from you, subject to legal exceptions.
• Right to obtain a portable copy of personal information you provided.
• Right to opt out of the sale or sharing of personal information, and of targeted advertising. We do not engage in these activities, but the control remains available to you.
• Right to limit use of sensitive personal information. We use sensitive information (precise location) only for the purpose you enabled it for.
• Right to non-discrimination for exercising any of these rights.
• Right to appeal a decision on your request; if we deny an appeal, you may contact your state attorney general.

California residents may also request the categories of personal information disclosed for a business purpose in the preceding 12 months; those categories are the ones listed in Section 5, disclosed to the recipient types listed in Section 9. To exercise any right, see Your Privacy Choices. We verify requests using the email address on the account and respond within 45 days, with one 45-day extension where permitted.

If the GDPR or UK GDPR applies to you, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing carried out on the basis of our legitimate interests, including profiling. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing. You may also lodge a complaint with your local supervisory authority or the UK Information Commissioner's Office.

Where we rely on legitimate interests, we have carried out a balancing assessment and concluded that our interest in providing, securing, and improving the Services is not overridden by your rights and freedoms. You may request more detail about that assessment.

We operate from the United States and use service providers located in the United States and other countries. When we transfer personal data out of the EEA, UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (plus the UK Addendum where relevant), on adequacy decisions where they exist, or on another lawful transfer mechanism, together with supplementary technical and organizational measures such as encryption in transit and at rest.

• Canada (PIPEDA): you may request access to and correction of your personal information and may complain to the Office of the Privacy Commissioner of Canada.
• Brazil (LGPD): you have rights of confirmation, access, correction, anonymization, portability, deletion, and information about sharing.
• Australia (Privacy Act): you may seek access and correction and complain to the Office of the Australian Information Commissioner.
• Nevada: you may submit a request that we not sell covered information; we do not sell it.

You can update your profile, change notification settings, turn personalization off, clear AI assistant history, revoke location permission, block other users, and delete your account entirely from within the app. A full walkthrough is in Your Privacy Choices.

The Services link to articles and media hosted by third-party publishers. Once you follow a link, the destination's own privacy policy governs. We are not responsible for the privacy practices, cookies, or content of third-party sites and services.

If a security incident affects your personal information, we will notify you and the appropriate regulators as required by applicable law, describing what happened, what data was involved, what we are doing about it, and steps you can take.

We may update this policy to reflect changes to the Services or to law. We will update the “last updated” date at the top and, for material changes, provide prominent in-app notice or email at least 7 days before the change takes effect where required. Your continued use after the effective date constitutes acceptance of the updated policy.

To exercise a privacy right, ask a question, or raise a concern, use the Contact Us page and select the topic “Privacy Request.” Include the email address on your account so we can verify the request. We respond to verified requests within the timeframe required by applicable law, and always as quickly as we reasonably can.

Data controller and contact details:
Think Right
3264 Rancho Santa Fe, California, 92067, United States
Privacy requests: privacy@thinkrightusa.com
General support: support@thinkrightusa.com

Separate from the app, this marketing website does not run advertising or analytics scripts, does not embed social or video widgets, and does not store form submissions. Forms here open a message in your own email application. Web fonts are served by Google Fonts, so your browser sends your IP address to Google for that request. See our Cookie Policy for details.