Hindsight
SupportTerms

Privacy policy

Last updated: November 10, 2026

This policy explains what the Hindsight app ("Hindsight", "we") collects, why, who it is shared with, and how you can delete it. Hindsight is operated by Tom Plaes, 66 Rue Emile Deroover, 1081 Brussels, Belgium. Contact: plaes.dev@gmail.com.

The short version

  • There is no account to create. You don't give us an email or a phone number.
  • Your name, answers, conversations and progress are stored on your phone. The short memory note future you keeps about you is stored on our server.
  • To write a reply, the relevant part of your conversation is sent through our server to an AI provider. We don't keep the content of your conversations on our server.
  • No ads, no advertising trackers, no selling of data.
  • We measure how the app is used (which screens, which steps) and collect crash reports, without the content of your conversations.
  • You can delete everything, on your phone and on our server, from the app: Profile → Delete all my data.

What is stored on your phone

Your first name, the year and voice you picked, your onboarding answers, your conversations with future you, a copy of the short memory note future you keeps about you, intentions, check-ins and settings. This stays on your device and is removed when you use "Delete all my data" or delete the app.

What is sent to our server, and why

DataWhyKept
A random anonymous user ID created when you first use the appTo apply fair-use limits and keep the service runningAs long as the app is in use
Your message, recent turns of the conversation (at most 30), your first name, chosen year, voice and memory noteTo generate future you's reply, daily letter or path entryNot stored by us. Processed and passed to the AI provider, then discarded
Voice recordings during a voice callTo turn your speech into text and future you's reply into speechNot stored by us
Daily usage counters (number of requests, seconds of talk time and voice)To apply your plan's daily time and fair-use limits30 days
The memory note: a short summary (at most about 300 words) of what you shared, written by the AI, for example your job or a goal you mentionedSo future you remembers you in every conversationUntil you erase it (Profile → What future you remembers) or delete your data
How many messages of your free first conversation you usedTo give each person one free conversationAs long as the app is in use
Your current plan (free or Plus), read from RevenueCatTo give you the time and features of your planAs long as the app is in use
A one-way hash of your IP address when your anonymous ID is first usedTo limit how many free accounts one network can create per day (abuse prevention). The hash cannot be turned back into your IP address30 days
Usage events: screens opened, steps completed (onboarding, purchase, data deletion), counts, error types. Never your messages, name or answersTo understand which parts of the app work and fix what doesn'tUp to 12 months
Crash reports: the error, device model and OS version, app version. No messages, no IP addressTo find and fix crashes90 days
Safety events: only a category (for example "crisis") and the action taken, never your messageTo check that our safety features work90 days
A reply you report with a long press, including its textTo review it and improve safety. You choose to send itUntil reviewed, at most 12 months

Hindsight does not use your camera and does not read your contacts.

Who processes data for us

  • Supabase (United States): hosts our server functions and the usage and safety tables.
  • Anthropic (United States): the Claude models write future you's replies. Anthropic does not use data sent through its API to train its models by default.
  • OpenAI (United States): speech-to-text and text-to-speech during calls.
  • RevenueCat (United States): manages subscriptions, linked to the anonymous ID and your store receipts.
  • Apple or Google: payments. We never see your card details.
  • Expo (United States): delivers app updates to your device.
  • PostHog (European Union): usage events listed above, linked to the anonymous ID.
  • Sentry (United States): crash reports, linked to the anonymous ID.

These providers act on our instructions and are bound by contracts that protect your data. Transfers outside the European Economic Area rely on the European Commission's standard contractual clauses or an equivalent safeguard.

Legal bases (EEA and UK)

We process data to provide the service you ask for (performance of a contract), to keep it safe and prevent abuse (legitimate interest), and, for anything you choose to report, on the basis of your action. Conversations about your wellbeing can reveal sensitive information. You choose what to share, and you can delete it at any time.

Your rights

You can access, correct or delete your data. Profile → Delete all my data removes it from your phone and deletes your anonymous ID on our server, with its memory note, usage counters, plan record, reported messages and safety events, and your RevenueCat customer record. Usage events and crash reports already sent are no longer linked to a new ID; to have them erased too, or for any other request, write to plaes.dev@gmail.com. You can also complain to your data protection authority (in Belgium, the Autorité de protection des données / Gegevensbeschermingsautoriteit).

Age

Hindsight is for people 17 and older. We don't knowingly collect data from younger people. If you think a minor is using the app, contact us and we will delete the related data.

Changes

If this policy changes, we update the date above and, for important changes, tell you in the app.

HomeTerms of useSupport