Privacy policy

1. What stays only on your computer

Session history, conversations, transcripts, screenshots, summaries, custom modes and settings stay in a folder on your Windows PC. AI provider API keys are stored encrypted by Windows itself. We have no access to any of it.

2. What goes to the AI provider you choose

When you ask for an answer, a suggestion, a transcription or a summary, the app sends the screenshot, the conversation text and/or the audio to the provider you set up (Google Gemini or OpenRouter and the chosen model), using your key. It goes straight from your computer to the provider and follows that provider’s privacy policy.

3. What we store

1. Account: email and password (stored securely by Supabase, never in plain text) or your Google account email, if you sign in with Google.
2. Subscription: plan, start and end dates and the Stripe customer ID. Card details are handled only by Stripe; they never go through the app or us.
3. Devices: a random identifier and the name of the computer where the account is in use, for the 2-computer limit.
4. Contact and suggestions: the message, its type, the app version and, if you provide it, a reply email.

4. Why we use it

To create and keep your account, unlock Premium, charge the subscription, prevent account sharing, reply to your messages and meet legal and tax obligations. We do not sell your data, do not run targeted ads and do not use the content of your sessions to train AI.

5. Who we share it with

1. Supabase (account and database), Stripe (payments), Resend (account and contact emails), GitHub (app downloads and update checks) and Cloudflare (website and the [email protected] mailbox).
2. Google, only when you sign in with Google or send a summary to Google Docs; Notion, only when you send a summary there.

Some of these services are outside Brazil; they follow recognized security standards and are used only for the purposes above.

6. Website

thucca.com does not use tracking cookies or ad tools. Fonts are loaded from Google Fonts, which receives the visitor’s IP address.

7. How long we keep it

Account and subscription data are kept while the account exists and, after that, for the period required by law (such as tax records). Contact messages are kept as long as needed to help you. Local data stays on your computer until you delete it or uninstall the app and remove its data folder.

8. Your rights

You can ask to access your data, correct it, delete your account and data, receive a copy, learn who it is shared with and withdraw consent. Write to [email protected]; we reply within 15 days.

9. Security and minors

We use encrypted connections and restricted access to data. ThuccaAI is not intended for people under 18.

10. Changes and contact

We may update this policy; important changes will be announced in the app or on the website. Controller: EmiApps. Questions and requests: [email protected].