Privacy

dropt holds some of your most private thoughts. Here's exactly what that means for your data — in plain terms, no overclaiming.

Your moments live on your device first

Everything you type is saved on this device immediately, including offline. You can use dropt without an account — those thoughts stay on this phone until you choose to sync them. A picture needs a connection: it uploads to your private storage, then it's dropped the same way.

If you sign in, we back it up for you

An account lets your moments sync across devices and stay safe if you lose your phone. Signed-in data is stored on Supabase, encrypted at rest, and protected by row-level security so that only your account can read your entries — never another user, and not through a shared or public path. Sign-in is for backup and sync — not a gate on AI sorting (see below).

How the AI sorting works — and its honest limit

dropt's whole idea is that you capture first and the AI sorts later — and tagging your words is free whether or not you have an account. When sorting runs, your entry text is sent to Google's Gemini API to generate tags and a one-line label. If you dropped a picture, the same sort can read what's in it (a menu, a chat, a sign) so search can find it later. Because the AI has to read what you saved to sort it, dropt cannotoffer end-to-end encryption the way a pure journaling app can — we're telling you that plainly rather than implying a privacy we can't deliver.

We use Gemini's paid API tier, under which Google states your content is not used to train its models. The AI reads what you saved only to sort it — it is never used to advertise to you, and dropt does not sell your data.

You're in control

You can export all your moments to a file at any time from the account screen. You can also permanently delete your account, which erases your entries from this device and from our servers and removes your account itself. We keep your data until you delete it — we don't hold copies afterward.

Marketing analytics (optional)

The public website may send coarse, content-free events (page path and button id) to a first-party analytics endpoint when configured. Those events never include your notes, tags, or account contents. The capture app's product instrumentation is separate and documented in the product logging policy.

Questions

Reach us at hello.dropt@gmail.com.