Privacy policy

Your library

Records are stored as Markdown with their original source files. The library uses device storage and, when enabled and available, your iCloud Drive. Apple handles iCloud storage and synchronization under its own terms. Thought Box does not upload your library to an operator-run note service.

Text recognition, library search and semantic ranking run on your device. Ask and Inspired Talk conversations are stored locally. A conversation you choose to save to the library follows the library's storage and sync settings.

Capture and permissions

Camera access lets you photograph material, the photo picker imports images you select, and microphone access records voice notes. The app transcribes speech on-device on supported devices and languages. It may download Apple speech model assets; transcription may be unavailable when the required support is missing. It does not fall back to uploading recordings for Apple's remote speech recognition.

You can manage camera, microphone, speech and notification permissions in system settings. Declining a permission affects the related feature. Notifications can let you know that background generation has finished.

Optional AI requests

AI content sharing is off until you explicitly allow it. Before confirmation, the app identifies the recipient and service endpoint and explains the data and purpose. Cloud read-aloud requires a separate permission. Changing the provider or service address requires a new decision.

Depending on the feature, requests may include record text, including text extracted on-device from photos, recordings and files; questions, comments, conversation history and summaries; and relevant record IDs, titles, summaries, tags, highlights, excerpts, saved dates, source types, folder names and paths, and record counts. Original photos, recordings and files are not included in these AI text requests.

After permission is granted, new captures may automatically send text for tags. Ask and Deep Dive send relevant library content with your question and conversation context. Inspired Talk and manual tags send the selected record; conversation summaries send the conversation and its context. The app connects directly to the service identified in the permission sheet. The operator does not receive these AI requests through a Thought Box server.

Version 1.0.1 (75) uses a fixed mainland-China distribution policy in every region and interface language. Text services are Kimi Open Platform (China), Kimi Code, DeepSeek, GLM (BigModel mainland China) and Qwen (DashScope Beijing). Cloud Read Aloud supports Qwen and GLM with separate matching voice API keys and separate voice-sharing permission; general-model keys are not reused. Unsupported providers, models and service endpoints are blocked. You can capture, browse, search locally and use On-Device Voice without an AI key. Provider charges and account or subscription requirements may apply.

Read Aloud

On-Device Voice uses the system voice on your device. Choosing LLM Voice and separately allowing sharing sends the prepared text of your selected record or reply to the speech provider shown before confirmation. It does not include separate metadata or original media. Returned audio stays in memory. The provider may retain requests under its own policy.

Keys and third-party processing

API keys are stored in the current device's Keychain with synchronization disabled. They are sent to the corresponding provider to authenticate requests, including connection tests and model-list requests. The operator does not receive your API keys through the app or this website.

Requests use HTTPS and supported service endpoints; AI-request redirects are blocked. Sharing requires your permission for the named recipient, data and purpose. The policies linked below describe provider safeguards and controls; they are not a promise that all accounts have identical retention, training or deletion terms. The app operator does not receive your AI content through a Thought Box server and cannot delete content already sent to a provider.

Kimi Code is separate from Kimi Open Platform and uses its own subscription API key. Its official product page links to the general Kimi privacy policy below. That policy describes encryption and access controls, permits de-identified content to be used for model improvement, and says users may contact Kimi support to request exclusion from model training. Review the terms applicable to your own service and account before sharing.

Your choices and deletion

You can withdraw text sharing and cloud voice sharing separately in Settings. The app cancels related active work and blocks new content requests. Data already transmitted cannot be recalled. Removing a key does not erase requests already received by a provider. Model-list requests and connection tests may still send API credentials and technical connection information for an available service; connection tests use fixed test text, send no library content and do not grant content permission.

Use the app's record, conversation, export and library controls to manage your data. Library files and saved conversations remain until you remove them; separate exports, backups and copies on other devices may remain. iCloud deletions can propagate to synced devices. Manage Apple backups and iCloud data through Apple's controls, and contact the selected provider about its retained data.

Contact Zhong Yang at the address below to request access, correction or deletion of personal information held through support or website operation. The operator cannot directly inspect or delete your device library or a provider's records.

This website and support messages

This is a static marketing website with a support form endpoint. Its guided demonstrations use fictional records and curated conversations, make no AI requests and accept no API keys. The site has no accounts, advertising or analytics, and does not set cookies or use browser local storage.

The web server processes ordinary request information, such as IP address, requested page, time and browser information, to serve pages, maintain security and diagnose errors; server access and error logs may contain this information. This technical processing is separate from analytics.

When you use the support form, your email address, question, submission time, page language and optional name are stored on the Thought Box VPS. Zhong Yang receives them in a weekly digest at chrixbell@gmail.com to answer questions and investigate issues. Form entries are automatically deleted from the VPS 90 days after successful digest delivery. The sent digest remains in the operator's email account under its retention settings. The form does not accept attachments. Please do not include API keys, passwords or a complete private library.

If you email support directly, Zhong Yang receives your email address, message and any attachments through the email provider. Support correspondence and operational logs are kept as needed to answer requests, investigate issues and meet applicable legal obligations. You can request access or deletion using the contact below.

Policy updates

Updates will be published on this page with a revised effective date. Questions about this policy or the handling of your information can be sent to the contact below.

Provider policies and data controls

Version 1.0.1 (75) keeps the mainland-China service restrictions in every region. The app names the recipient and endpoint before you allow sharing. The links below describe Apple storage and the supported domestic services. Provider terms, training choices, retention and deletion controls can differ by service and account.

• Apple
• DeepSeek
• Kimi Open Platform (中国)
• Kimi Code — Kimi Privacy Policy
• GLM / BigModel
• Qwen / 阿里云