Privacy Policy
What Ultrathink collects, how it is used, who else handles it and your rights.
Last updated: 15 October 2026
This policy covers the Ultrathink website, web app, browser extension, desktop app and iPhone app. In short: we keep what you choose to save, we use it to run Ultrathink for you, and we never sell it or use it for advertising.
What we collect
What you save
Ultrathink keeps what you choose to capture: links and page titles, text you select, your notes, screenshots, images, files, voice recordings and anything else you save. When you save a page, we also keep details about it such as its author, date and description.
The browser extension only reads a page when you save from it. It does not record your browsing history.
Your account
To run your account we keep your name, your email address, the device keys you create to connect the extension and apps, and your plan.
We also record when you last used Ultrathink, and whether you have saved from the browser extension, the desktop app or the API. We use this to count how many people use Ultrathink and which apps they use. Our administrators can also see it on your account in our admin tools. When device keys and API keys were last used is recorded too.
To protect sign-in from abuse, we keep a scrambled (hashed) form of your IP address to limit repeated attempts.
The desktop app’s agent sessions
If you switch on agent sessions in the desktop app, it reads which AI tools are running on your computer, the titles and folders of your Claude Code and Codex sessions, your AI browser tabs, and the account email and plan those tools show. It sends these to Ultrathink with your computer’s name and platform, so you can see your sessions in one place. To recognise new tools, it sends their program names and website addresses to OpenAI, and keeps what it learns about each tool (not about you) in a list shared across Ultrathink. Nothing is read while the feature is off.
Visits to this website
We count visits to the public pages of tryultrathink.com with a small analytics script. For each visit it records:
- the page address, without anything after the question mark
- the page title, the website that sent you there and any campaign tags in the link
- your browser, device type, screen size, language and time zone
- clicks on links and buttons, how far down the page you scroll and how long you stay
Your IP address is used only to group the pages of one visit under an id that changes every day. The IP address itself is not stored. The script sets no cookies for visitors. One cookie, ut_internal, is set only on our own team’s browsers so our visits are left out of the numbers. If your browser sends a Do Not Track signal, the script records nothing.
The analytics service is run for us by Fifty Five and Five Ltd on Google Cloud. The web app, the extension and the apps do not use this script.
Using the web app
The web app uses Google reCAPTCHA to check that sign-ins and requests come from a real person.
It also uses Google Analytics for Firebase to count how the app is used, but only if you accept the cookie notice. Analytics sets cookies in your browser and keeps an id for it there. If you decline, Analytics does not run. You can change your choice at any time in Settings > Account > Privacy; turning it off removes the Analytics cookies and id from that browser. Your choice applies to the browser you made it in.
How we use it
- To store your entries and keep them in step across your devices
- To search your entries and show related ones
- To run the AI features you use, described below
- To send the emails you ask for, such as password resets, and the task reminders you switch on
- To see which pages of the website people find useful
AI features
When AI processing is on, Ultrathink sends an entry’s title, address, notes, selected text, screenshots, files and audio to OpenAI to write its summary, title, topics and people, and to find related entries. You can switch AI processing off in Settings. That stops the automatic pass on each entry. Features you use on purpose, such as Ask, AI search and text correction, still send what they need to OpenAI. OpenAI does not use data sent through its API to train its models.
Search by meaning and similar entries by meaning work separately from AI processing. If you have either switched on, Ultrathink sends the text of your entries, with their summaries, topics and people, to OpenAI to build a search index of them, even when AI processing is off. With similar entries by meaning on, it also sends short extracts of an entry and its closest matches to OpenAI to say why they are alike. With search by meaning on, your question and the matching entries go to OpenAI to write the answer. Switch both off to stop this.
On the free plan, the AI features use your own OpenAI API key. We keep the key on our servers, use it only for your requests, and those requests are covered by your own agreement with OpenAI. On Pro, including a Pro trial, they run on Ultrathink’s account.
Questions you type into the search on our help pages are sent to OpenAI to write the answer.
Who else handles your data
| Service | What for |
|---|---|
| Google Cloud and Firebase | Sign in, storing your entries and files, running Ultrathink, app analytics and reCAPTCHA |
| OpenAI | The AI features described above |
| Stripe | Payments. We never see or store your card number. |
| Fifty Five and Five Ltd | The website analytics described above |
We do not sell your data or share it for advertising.
Organisations
If you join an organisation in Ultrathink, entries you share with it can be seen by its members. Private entries stay visible only to you and to Ultrathink’s administrators, who can access them to run and support the service. You can change an entry from shared to private at any time.
How long we keep it
Files you upload, such as screenshots, recordings and documents, are stored at a long, unguessable web address. Anyone who has that address can open the file, and the address does not expire, so take care where you paste it.
Your entries stay until you delete them. Deleting an entry also deletes the files you uploaded with it, such as screenshots and recordings, unless another of your entries still uses them. It also deletes the copies we keep of any entries you merged into it, with their files. When you delete your account, your entries, files, settings and account details are deleted with it.
Your rights
You can see, change and delete your entries in the app at any time, and delete your whole account from Settings. To ask for a copy of your data, or to use any of your rights under UK and EU data protection law, such as objecting to how we use your data, email me@cmw.email. You can also complain to your local data protection authority; in the UK that is the Information Commissioner’s Office.
Browser extension permissions
| Permission | Why the extension needs it |
|---|---|
| activeTab | To read the address and title of the page you are saving |
| tabs | To save all your open tabs at once |
| tabGroups | To keep tab group names when you save tabs |
| scripting | To read the content you save from pages such as ChatGPT and Outlook |
| storage | To keep your extension settings and device key in your browser |
| Access to all sites | So you can save from any website. It reads a page only when you save it. |
| nativeMessaging (optional, asked for separately) | To let the Ultrathink desktop app on your computer read your open tabs, if you switch this on |
Children
Ultrathink is not meant for anyone under 16, and we do not knowingly collect their data.
Changes to this policy
When we make an important change we will tell you by email or in the app, and update the date at the top of this page.
Contact
For privacy questions, email me@cmw.email.