Privacy Policy

Last updated: March 2, 2026

At tocolabs ("we", "us", "our"), we build Afterthought with a local-first and privacy-first approach. We do not sell customer data, and we do not store customer note content on tocolabs servers.

1. No Account Requirement

Afterthought does not require account creation, login credentials, or personal profiles to use core functionality.

2. What Data We Process

Afterthought captures and processes note content only to provide the features you request.

3. Where Data Is Stored

Afterthought is local-first. Your note content is stored on your devices and in services you connect. tocolabs does not run customer content storage for your notes, recordings, or transcriptions.

4. Processing Options

Processing is purpose-limited: data is used to generate your requested note output.

When cloud LLM processing is off: note processing stays on-device unless you route output to a destination you enabled.

When cloud LLM processing is on: the content needed for your request (for example, note text/transcript and required context) is sent to the cloud provider you selected. tocolabs does not store a copy of that note content on tocolabs servers.

Cloud provider handling, including any temporary logging or retention, is governed by the provider and configuration you choose.

5. Integrations You Enable

You can route output to connected destinations. Data sent to these destinations is governed by their policies.

6. Subscription and Billing Data

Afterthought Pro billing is handled by Apple through the App Store. We do not receive or store payment card data.

7. Website Analytics

Our website uses Google Analytics 4 to understand page usage and improve the site. This is separate from app note content and does not include your in-app note data.

8. Data Retention and Control

You control note retention in the app and in your connected destinations. You can delete note content from your devices and connected services at any time.

9. Security

Security Model

Afterthought is designed to minimize data exposure.

No system is guaranteed to be fully risk-free. Device security, network reliability, and third-party service availability may affect outcomes.

10. Changes to This Policy

We may update this policy when the app or legal requirements change. The latest date will always be shown at the top of this page.

11. Contact

Questions about privacy can be sent to hello@tocolabs.co.uk.