Privacy

Your notes are yours

Last updated October 4, 2026

Thock is a desktop app for macOS and Linux, Thock Vault for iPhone, an optional Thock Plus service, and this website. This page says what each of them keeps, where it goes, and why. The short version: your notes live as plain files on your own computer, nothing is used for advertising or tracking, and nothing is sold.

The desktop app

• Your vault is a normal folder of Markdown files on your computer. Thock reads and writes it there and keeps its history in a hidden folder inside it. None of this leaves your computer unless you turn on a feature below.
• Telemetry and crash reporting are off. The app checks updates.thethock.com for new versions, which sends your operating system, processor type and current version.
• If you connect Google Calendar, Gmail, Google Tasks or Readwise, the app talks to those services directly from your computer. Their access tokens stay in your system keychain, and what they return is written into your vault.
• From Google, Thock asks only for read-only access: your calendar events, the Gmail messages under the labels you choose to sync, and your tasks. It never sends, deletes or changes anything in your Google account. That data goes only into your vault on your computer; it reaches an AI model only when you ask your agent to read that part of your vault, and it is never sold, used for advertising, or used to train AI models. Thock's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect at any time from the app or at your Google account's permissions page.
• If you use your own AI agent (Claude Code, Gemini CLI and others), it runs under your own account with that provider, under their terms.
• Connecting the Thock Agent (a Thock Plus feature, below) downloads the agent program and a Node runtime from their public registries into a folder the app owns. Nothing of yours is sent in that download.

Thock Plus

• Account. Plus is joined with an invite code. The service keeps your plan, the code you used, the name of your computer, a hash of your connection credential, and a ledger of usage for your allowance. It does not ask for your name or email address.
• The hosted agent. When you talk to the Thock Agent, your messages and the parts of your vault the agent reads are sent through OpenRouter to the AI model that answers. Thock does not store your conversations. OpenRouter and the model provider handle that text under their own policies.
• Phone sync. When you pair a phone, your desktop encrypts each text file with a key that exists only on your two devices, and the service stores the encrypted copy. We cannot read your notes. To keep the two devices in step, the service does see each file's path (folder and file name, which for a captured idea includes a few words of its title), its size, a fingerprint of its encrypted content, and when it changed. Changes made on the phone travel the same way, encrypted, and are deleted once your desktop has applied them.
• Turning sync off deletes the stored files at once. If Plus ends, they are kept for 30 days in case you come back, then deleted. You can ask us to delete your Plus account at any time.

Thock Vault on iPhone

• The practice notebook runs entirely on the phone and sends nothing anywhere.
• Once paired with your desktop, the app talks only to the Thock Plus service described above, sending your phone's name at pairing.
• When you clip a link, the phone fetches that page itself to keep its readable text.
• When you Ask on the phone, your question and the notes the agent reads to answer it are sent from the phone through OpenRouter to the AI model, exactly as the hosted agent on the desktop does. Thock does not store the conversation.
• The camera is used only to scan the pairing code, and Face ID only to unlock your notes on the phone. Neither image nor biometric data leaves the device.
• The app has no analytics, advertising or tracking.

This website

If you join the waitlist, we keep your email address to send you an invite and, now and then, a note about what changed in Thock. Reply to any of them to be taken off the list. The pages load fonts from Google Fonts. There are no analytics or cookies.

Where it is kept

The Thock Plus service, the encrypted sync files and the waitlist run on Google Cloud in the United States. The Plus account records are kept in a hosted PostgreSQL database.

Questions and deletion

Write to diego.exodo@gmail.com to ask what we hold about you or to have it deleted. If this policy changes, the date at the top changes with it.