Last updated: 2026-09-19
Thaki is local-first: your paths, camps, and tiny steps live on your device whether or not you ever create an account. We don't run ads, and we don't sell your data — to anyone, ever. If you sign in, a minimal set of data syncs to our backend (Supabase) so your paths follow you across devices; AI charting sends your path's title (not your journal entries or personal notes) to a third-party AI provider through our own server. None of the data described below is used to track you. The details are below.
Everything you do in Thaki — every path, camp, tiny step, check-in, streak, and preference — is saved to a single local data file on your device. This works fully offline, before you ever create an account, and continues to work if you never do. Deleting the app deletes this data; we don't hold a hidden copy of it unless you've signed in and turned on cloud sync (§2).
Thaki uses Supabase as its backend. Signing in is always optional — the app is fully usable without it.
or with an email address and a one-time code we send to it (no password to remember). We store your email address (if you use the email code) and Supabase's authentication records for your account, including an internal User ID we use to link your data to you.
steps, and profile sync to our Supabase database so they're available if you reinstall the app or use it on another device. This is the same data described in §1 — sync doesn't add new categories of data, it just gives your existing data a second home.
record your purchase history and current subscription status, linked to your account, so the app knows to unlock Thaki Pro. We never see your card details — Apple handles billing.
like "app opened," "path started," "camp cleared") to understand how people actually use Thaki and to fix what's confusing. These events are keyed to your account if you're signed in, or to a random, app-generated Device ID for that install if you're not — an identifier that isn't tied to your name, email, or the identity of your device in any way we can reverse, and isn't linked to you. If you later sign in, your anonymous history and your account become linked going forward; we don't retroactively deanonymize anything beyond that. Event data is retained for a limited window (on the order of months) and then deleted.
When you ask Thaki to chart a trail for you ("Chart my trail," instead of building it yourself), we send your path's title — for example, "Run a 10K" or "Learn to bake sourdough" — to an AI model through OpenRouter, a service that routes requests to various AI providers. We don't send your check-ins, journal entries, camp completion history, or any other personal data as part of this request — only the title you typed and a small amount of app-generated context needed to shape a sensible trail (like how many camps you asked for). Charting is optional — you can always build your own path by hand instead — and every camp it suggests is yours to rearrange, rename, or delete afterwards. Chartings are limited to a number per day, higher with Thaki Pro.
Beta caveat, disclosed plainly: during Thaki's beta/TestFlight period, this feature may use a free-tier AI model. Free-tier models from some providers may log prompts for abuse monitoring or use them to improve their own models — this is a limitation of the underlying free service, not something Thaki does with your data on our own servers. We plan to move to a paid, no-logging model before a general App Store release; this policy will be updated when that happens, and this paragraph will be removed once it's no longer true.
Manual path-building — pitching your own camps without asking the AI — never sends anything to this AI provider. It's always available and always free.
across other companies' apps or websites.
ad-targeting profile of you.
any third party, for any purpose, ever.
involved are the ones named in this policy — Apple (App Store, Sign in with Apple, App Attest), RevenueCat (subscriptions), Supabase (backend), and OpenRouter (AI charting) — each used strictly to provide the feature described above.
turned off entirely from Settings, in addition to iOS's own notification controls. Turning this off cancels any scheduled reminders immediately.
This deletes your account and its server-side copy of your data; usage events (§2) are disconnected from your identity at that point and expire within our retention window (on the order of 180 days).
local copy of your paths on that device — useful if you want to begin again without deleting your account.
from syncing until you sign back in.
Thaki does not knowingly collect personal information from children under the age applicable in your jurisdiction, and does not include a birthday or age-gate flow. If you believe a child has provided us personal information, contact us using the address below and we'll remove it.
If we materially change what we collect or how we use it, we'll update this page and adjust the "Last updated" date above. Continuing to use Thaki after a change means you accept the updated policy; if you don't, you can stop using the app's networked features (or the app entirely) and delete your account at any time.
Questions about this policy or your data? Reach us at badambura.corp@gmail.com.
This policy is governed by the laws of Azerbaijan, without regard to its conflict-of-law provisions.