over-thinking.com

Privacy

your 2 a.m. spiral is yours. here's exactly how we keep it that way.

Last updated: July 14, 2026 · applies to over-thinking.com and the over-thinking iOS app.

The short version

You can use over-thinking without an account. Anonymous dumps are processed in memory and never stored. If you log in, your history is saved to your account, visible only to you, and you can delete any of it — or your whole account — anytime. We never sell your data and our AI providers are contractually barred from training on it.

What we collect

Anonymous use: your dump travels to our server over TLS, is turned into your reasoning tree, and is discarded. It never lands in our database. We keep only anonymous counters — token totals and a one-way SHA-256 hash (of your IP or a random visitor id) used for the free daily limit — which cannot be traced back to you or your words. Basic analytics (page visited, a random visitor id, session heartbeats) help us understand traffic; none of it contains your text.

With an account: your email address (for sign-in codes and product email), your untangle history and committed decisions (so you can reopen them), and your subscription status. History is protected by row-level security — readable only by you — and encrypted at rest (AES-256).

If you subscribe:payments are processed by Stripe. Your card number never touches our servers; we store only Stripe's customer/subscription identifiers and status.

Who processes your words

The reasoning runs on enterprise AI APIs under terms that forbid using your data to train models:

· Anthropic (the reasoning engine that builds your tree)
· xAI (optional live web search that grounds an untangle in current, real-world context)

Both receive the text you submit, process it to produce your result, and are bound by API terms that exclude training on your inputs. Supporting infrastructure: Supabase (database & authentication), Vercel (hosting), Stripe (payments), Resend (transactional email).

What we never do

We never sell or rent your data. We never use your words for advertising. We never train models on your dumps — and neither may our providers. Founder feedback you send us is read by a human (Ted); your dumps are not.

Deleting your data

Any history entry can be removed one-by-one or all at once from the history page. Deleting your account removes your profile, history, saved decisions and subscription records; active subscriptions are cancelled first. You can delete your account from the account page on the web or in the iOS app — no email required, effective immediately.

Cookies

We use a session cookie for sign-in, an anonymous visitor id for the daily limit and analytics, and a referral cookie if you arrive via an invite link. No third-party ad trackers.

Contact

Questions, requests, or anything else: ted@over-thinking.com. We answer.