Privacy Policy
Last updated: 9 January 2026
1. Introduction
UltraThink is a knowledge management browser extension and web application developed by Fifty Five and Five Ltd ("we", "our", "us"). This privacy policy explains what data we collect, how we use it, and your rights regarding that data.
In summary: We only collect data you explicitly choose to save. We never track your browsing, sell your data, or use it for advertising.
2. Data We Collect
2.1 Data You Explicitly Save
| Data Type | When Collected | Purpose |
|---|
| URLs and page titles | When you click "Save" | Reference and organization |
| Selected text | When you highlight and save | Knowledge capture |
| Your notes | When you write in the extension | Personal annotations |
| Screenshots | When you press Ctrl+Shift+5 | Visual reference |
| Audio recordings | When you use voice capture | Voice notes |
| Page metadata | Automatically when saving a page | Context (author, date, description) |
2.2 Data We Do NOT Collect
- Browsing history or pages you don't explicitly save
- Cookies or tracking identifiers
- Device fingerprints
- Location data
- Personal information beyond what you save
2.3 Account Data
If you create an account, we store:
- Email address (for authentication)
- Device keys (hashed, for extension authentication)
- Subscription status (if you have a paid plan)
3. How We Use Your Data
- Storage: Your entries are stored in Google Firebase Firestore
- AI Processing: When enabled, entries are sent to OpenAI for summaries, classification, and relationship detection
- Search: Your entries are indexed to enable search functionality
- Sync: Data syncs between your devices via your account
4. Organization Sharing
If you join an organization:
- Entries marked "Organization" are visible to other organization members
- Entries marked "Private" remain visible only to you
- Organization admins can see shared entries but cannot access your private entries
- You can change an entry's visibility at any time
5. Third-Party Services
5.1 OpenAI
When you enable AI features, the following is sent to OpenAI:
- Entry title, URL, notes, and selected text
- Screenshots (for vision-based analysis)
- Audio transcripts
OpenAI processes this data according to their Privacy Policy. OpenAI does not use API data to train models.
5.2 Google Firebase
We use Firebase for:
- Authentication (Firebase Auth)
- Data storage (Firestore)
- File storage (Cloud Storage)
- Serverless functions (Cloud Functions)
See Firebase Privacy.
5.3 Stripe
Payment processing is handled by Stripe. We do not store credit card numbers. See Stripe Privacy Policy.
6. Data Security
- Encryption in transit: All data transmitted via HTTPS/TLS
- Encryption at rest: Firebase encrypts stored data
- Access control: Firestore Security Rules ensure you can only access your own data
- Authentication: Device keys are hashed using SHA-256 before transmission
7. Data Retention
- Your entries: Retained until you delete them
- Deleted entries: Permanently removed within 30 days
- Account deletion: All data deleted within 30 days of account closure
- Backups: Firebase maintains backups for disaster recovery (encrypted, access-controlled)
8. Your Rights
All Users
- Access: View all your data in the web application
- Deletion: Delete individual entries or your entire account
- Correction: Edit any entry at any time
- Portability: Export your data (contact support@fiftyfiveandfive.com)
EU/UK Users (GDPR)
You additionally have the right to:
- Request erasure of all personal data
- Object to processing
- Lodge a complaint with your local data protection authority
To exercise GDPR rights, contact: privacy@fiftyfiveandfive.com
California Users (CCPA)
We do not sell personal information. You have the right to know what data we collect and request deletion.
9. Browser Extension Permissions
| Permission | Why We Need It |
|---|
| activeTab | To capture URL and title of the current page when you save |
| tabs | To enable "Save All Tabs" feature |
| tabGroups | To preserve tab group names when saving |
| scripting | To extract content from specific pages (ChatGPT, Outlook) |
| storage | To save your extension settings and device key locally |
| <all_urls> | To work on any website (we only access pages you explicitly save) |
10. Children's Privacy
UltraThink is not intended for users under 16. We do not knowingly collect data from children.
11. Changes to This Policy
We will notify users of material changes via email or in-app notification. The "Last updated" date will reflect the most recent revision.
12. Contact
Fifty Five and Five Ltd
Email: privacy@fiftyfiveandfive.com
For support: support@fiftyfiveandfive.com