Draft — pending Ryan's review. This page describes how Whiteboard is built to work. It isn't final legal text yet.

Privacy Policy

Last updated October 12, 2026

Whiteboard is an assistant that remembers things for you. That only works if you can trust it with them, so this page says plainly what it keeps, why, and how you stay in control.

The short version

  • We collect what you put in, plus the minimum signals needed to choose good moments to remind you.
  • We never sell your data and never use it for advertising.
  • Location is stored coarsely. Calendar access is busy/free only.
  • Everything Whiteboard learns about you is visible to you, and you can edit or delete it.
  • You can export everything, and deleting your account really deletes it.

What we collect

Account

Your email address, the name you give us, your time zone, and which sign-in method you use (email, Google or Apple).

What you capture

Items, notes, lists, people, places and views you create — whether you type them in the app or send them through a connected assistant such as Poke or Claude.

Behaviour signals

When you complete, snooze, open or dismiss something, and how you respond to notifications. These are what let Whiteboard learn, for example, that Work nudges after 7pm don't land for you.

Devices

The devices you sign in on, their push-notification tokens and time zone, so reminders reach the right place.

How it's used

Only to run Whiteboard for you:

  • to understand what you capture and organise it,
  • to decide when (and whether) to remind you, and to explain that decision under “Why now?”,
  • to write your morning brief, evening wrap and weekly review,
  • to keep the service secure, reliable and within cost limits.

We don't sell your data, share it with advertisers, or use it to build profiles for anyone else. People who build Whiteboard don't browse user content; access happens only to fix a problem you've reported or when the law requires it.

AI processing

Language features — understanding captures, the assistant, briefs and notification copy — are processed by Anthropic (Claude). Only the text needed for that request is sent. Under Anthropic's commercial API terms, this content isn't used to train their models. Whenever AI isn't available, Whiteboard falls back to simple on-server rules.

Anything an assistant does on your behalf is recorded in Activity and can be undone.

Location

Location is optional and only requested in context on iPhone (for example, the first time you ask to be reminded at a store).

  • We store places you name and a coarse area — a 6-character geohash, roughly a neighbourhood — not a trail of where you've been.
  • Precise coordinates, when your phone reports them, are discarded within 7 days.

Calendar

If you connect a calendar on iPhone, Whiteboard reads only busy blocks — start and end times — to find moments when you're free. It never reads event titles, attendees, locations or notes.

What Whiteboard learns about you

Over time Whiteboard remembers useful things — that you usually shop on Sundays, or that Sam's birthday is in March. Every one of these memories is listed in Settings → What Whiteboard knows, where you can edit or delete it.

Service providers

We use a small number of providers to run Whiteboard. Each only gets what it needs:

  • Supabase — database and sign-in.
  • Vercel — hosting, plus aggregate page-view analytics.
  • Anthropic — language processing (see above).
  • PostHog — product analytics: which features are used and where things break. It does not receive the content of your items.
  • Apple and your browser's push service — delivering notifications.
  • Google and Apple — only if you choose to sign in with them.
  • Poke — only if you connect it, to send and receive messages on your behalf.

Security

  • Every account's data is isolated at the database level.
  • All traffic is encrypted in transit.
  • Connection tokens are stored only as one-way hashes; your Poke key is encrypted at rest and never shown back in full.
  • Connected assistants (like Claude) can be disconnected at any time in Settings → Integrations.

Export and deletion

Export: Settings → Account → Export downloads everything in your account as a file.

Delete: Settings → Account → Delete account permanently removes your account and its data from our database. Copies in routine backups expire on our providers' normal schedule and are never restored into the service. You can also ask us to do it — see Support.

Everything else

Children

Whiteboard isn't intended for children under 13, and we don't knowingly collect their data.

Changes

If this policy changes in a way that matters, we'll tell you in the app before it takes effect.

Contact

Questions or requests: support@whiteboard.ing.