Effective August 30, 2026
Privacy Policy
This policy describes how Thelma (also known as Hey Thelma and THE Life Management Assistant; the service at heythelma.com and app.heythelma.com) collects, uses, and shares information. It covers the website, the web app, the iPhone app, and text messages we send when you opt in.
Information we collect
- Account. Email address, and a mobile number if you give us one for texts. Sign-in codes, session tokens, and device names we attach to a session.
- Household content you create. Conversations, memories, lists and list items, people cards, projects, routines, reminders, documents you upload, and sharing choices.
- Voice. When you talk to Thelma, audio is used to transcribe what was said and to speak replies. We do not sell voice recordings.
- Connected accounts. If you connect Google, Microsoft, Spotify, Linear, or a similar service, we store the tokens needed to act on your behalf (calendar, mail, contacts, playback, issues) and the data those tools return for a turn.
- Technical. IP address, user agent, and logs we need to keep the service up and to debug failures. We try not to put secrets in logs.
How we use it
We use this information to:
- Run the assistant — chat, voice, lists, memories, and sharing.
- Sign you in, keep you signed in, and protect the account.
- Send the emails and, if you opt in, the text messages described in our Terms (sign-in codes, household alerts you asked for, help/opt-out replies).
- Meet legal obligations and fix abuse or outages.
Mobile information and SMS
If you provide a mobile number and opt in to texts, we use that number only to deliver Thelma messages you consented to (verification codes and household/account notifications), and to honor STOP and HELP.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We do not sell mobile numbers, SMS opt-in records, or consent status. Carriers and our texting provider (Vonage) see what they must in order to deliver a message you asked us to send. That is not a sale and is not sharing for marketing.
When we share information
We do not sell your personal information. We share it only:
- With people you choose — household members and anyone you share a list, conversation, or invite with.
- With processors that run the product — hosting and database (DigitalOcean), email (Resend), SMS (Vonage), and the model providers that generate replies (for example Anthropic). They are not allowed to use your content to market their own products to you.
- With services you connect — Google, Microsoft, Spotify, Linear, and similar, solely to perform the action you asked for. You can disconnect those in Settings.
- If the law requires it, or to protect someone from serious harm.
Retention
Account and household content stay until you delete them or close the account. Superseded memories are kept so we can see what changed, not so we can market to you. SMS opt-in and opt-out records are kept long enough to prove consent and to honor STOP. Backups and logs age out on a schedule measured in weeks to months, not forever.
Your choices
- Update or delete household content in the app.
- Disconnect a third-party account in Settings.
- Stop texts anytime by replying STOP to a Thelma message. Reply HELP for help, or email [email protected].
- Email [email protected] to ask what we hold, to correct it, or to delete your account. We will need enough to verify it is you.
Children
Thelma accounts are for adults. We do not knowingly collect personal information from children under 13 as account holders. A household may mention family members, including children, in lists or people cards; that content is yours to manage.
Changes
If this policy changes in a way that matters, we will update this page and the effective date. Continued use after that date is acceptance of the update.
Contact
Questions about privacy: [email protected]. Website: https://heythelma.com.