Privacy Policy

Effective date: May 19, 2026

Summary

Cool Thoughts is a self-guided wellness tool operated by Suffica. We designed it to minimize data collection. Please do not submit personally identifiable information (PII), health records, or confidential data. The app is not a medical device and is not intended for emergencies.

What we collect

  • User inputs: triggers, reactions, beliefs, and reframes you enter to complete the CBT flow. These are the only text-based data you provide.
  • Usage data: basic analytics about feature usage and performance (for example, screen views or crash reports) via Firebase Analytics. No personally identifiable information is included in analytics events.
  • Device data: OS version, device model, and diagnostic logs to keep the app stable.
  • Subscription state: whether you have an active premium entitlement, managed via RevenueCat. RevenueCat does not receive your CBT content.

What we do not want

  • Do not include your full name, address, phone number, or account numbers.
  • Do not include medical records, diagnoses, or therapy notes.
  • Do not include passwords, security codes, or other sensitive credentials.

How we use data

  • To deliver the CBT reframe flow and Thought Vault features.
  • To maintain, debug, and improve app reliability.
  • To respond if you submit a support or bug report.

We do not sell your personal data. We do not use your CBT content for advertising, profiling, or any purpose beyond delivering the features you requested.

AI processing and data sharing

What data is sent to AI providers: Only the text content you enter during a CBT session — your trigger description, selected reactions, identified beliefs, and chosen reframes. No names, contacts, email addresses, device identifiers, or location data are sent. Your data is transmitted through a secure gateway operated by Suffica before reaching any third-party AI provider.

Who receives the data: Your session text is sent to one or more of the following third-party AI providers, depending on the provider configured for your request:

Each provider is contractually required or publicly committed to processing data solely for the purpose of generating your CBT reframe and to providing protections equivalent to those described in this policy. These providers do not use your data to train their models and are prohibited from reusing your content for other purposes. For full details on each provider's data practices, please review their privacy policies linked above.

User consent required: Before any data is shared with an AI provider, the app presents an in-app consent screen that clearly explains what data will be sent, who will process it, and your responsibilities. You must actively tap "Agree & Proceed" before any AI processing begins. You can decline at any time, in which case no data is sent and the AI features will not be available for that session. If you do not want your content processed by AI providers, do not tap "Agree & Proceed" on the consent screen.

Storage and retention

The free tier stores CBT session data and your Thought Vault locally on your device using Hive. Deleting the app removes all local data. If you enable cloud sync in a future version, your data may be stored in the cloud until you delete it or request deletion.

Sharing

We do not sell your data. We share data only with service providers needed to operate the app (AI providers listed above, Firebase for analytics, RevenueCat for subscriptions) and only for the purposes described in this policy. Each provider is bound by their own privacy and data protection commitments.

Security

We use reasonable security measures to protect data, including HMAC request signing, nonce-based replay protection, and HTTPS encryption for all network communication between the app, our gateway, and third-party AI providers. No system is perfectly secure, and you use the app at your own risk.

Children's privacy

Cool Thoughts is not intended for children under 13 (or the minimum age in your region). We do not knowingly collect data from children.

Your choices

  • Delete the app to remove all locally stored data.
  • Do not submit sensitive or personally identifiable information.
  • Decline AI consent during the session to prevent data from being shared with third-party AI providers for that session.
  • Contact support to request access or deletion of data you shared with support.

Contact

Email: hello@suffica.com