Last updated: 21 October 2026
This policy covers the Ultrathink website, web app, browser extension and desktop app, and the iPhone app once it is released. In short: we keep what you choose to save, we use it to run Ultrathink for you, and we never sell it or use it for advertising.
What we collect
What you save
Ultrathink keeps what you choose to capture: links and page titles, text you select, your notes, screenshots, images, files, voice recordings and anything else you save. When you save a page, we also keep details about it such as its author, date and description.
The browser extension only reads a page when you save from it. It does not record your browsing history.
Your account
To run your account we keep your name, your email address, the device keys you create to connect the extension and apps, and your plan.
We also record when you last used Ultrathink, and whether you have saved from the browser extension, the desktop app or the API. We use this to count how many people use Ultrathink and which apps they use. Our administrators can also see it on your account in our admin tools. When device keys and API keys were last used is recorded too.
To protect sign-in from abuse, we keep a scrambled (hashed) form of your IP address to limit repeated attempts.
The desktop app’s agent sessions
If you switch on agent sessions in the desktop app, it reads which AI tools are running on your computer, the titles and folders of your Claude Code and Codex sessions, your AI browser tabs, and the account email and plan those tools show. It sends these to Ultrathink with your computer’s name and platform, so you can see your sessions in one place. To recognise new tools, it sends their program names and website addresses to Anthropic, whose AI may search the web for them, and keeps what it learns about each tool (not about you) in a list shared across Ultrathink. Nothing is read while the feature is off.
Visits to this website
We count visits to the public pages of tryultrathink.com with a small analytics script. For each visit it records:
- the page address, without anything after the question mark
- the page title, the website that sent you there and any campaign tags in the link
- your browser, device type, screen size, language and time zone
- clicks on links and buttons, how far down the page you scroll and how long you stay
Your IP address is used only to group the pages of one visit under an id that changes every day. The IP address itself is not stored. The script sets no cookies for visitors. One cookie, ut_internal, is set only on our own team’s browsers so our visits are left out of the numbers. If your browser sends a Do Not Track signal, the script records nothing.
The analytics service is run for us by Fifty Five and Five Ltd on Google Cloud. The web app, the extension and the apps do not use this script.
Using the web app
The web app uses Google reCAPTCHA to check that sign-ins and requests come from a real person.
It also uses Google Analytics for Firebase to count how the app is used, but only if you accept the cookie notice. Analytics sets cookies in your browser and keeps an id for it there. If you decline, Analytics does not run. You can change your choice at any time in Settings > Account > Privacy; turning it off removes the Analytics cookies and id from that browser. Your choice applies to the browser you made it in.
How we use it
- To store your entries and keep them in step across your devices
- To search your entries and show related ones
- To run the AI features you use, described below
- To send the emails you ask for, such as password resets, and to show the task reminders you switch on
- To see which pages of the website people find useful
AI features
The AI features are part of Pro, including a Pro trial, and run on Ultrathink’s own accounts with two providers. On the free plan nothing is sent to either for AI processing.
Anthropic (Claude) does the AI text and image work. When AI processing is on, Ultrathink sends an entry’s title, address, notes, selected text, screenshots, images and files (such as PDFs) to Anthropic to write its summary, title, topics and people, and to find related entries. For a saved link, Ultrathink’s own server fetches the page and sends its text to Anthropic. For long notes and ideas, the AI may search the web, so words from the note can be used in search queries that Anthropic runs. Audio is first turned into text by OpenAI (below), and the text then goes to Anthropic to be summarised.
You can switch AI processing off in Settings. That stops the automatic pass on each entry. Features you use on purpose, such as Ask, AI search and text correction, still send what they need to Anthropic.
OpenAI does three things: it turns your voice recordings into text, it builds the search index behind search by meaning and similar entries by meaning, and it runs talking to Ultrathink. If you have search by meaning or similar entries by meaning switched on, Ultrathink sends the text of your entries, with their summaries, topics and people, to OpenAI to build that index, even when AI processing is off. With similar entries by meaning on, short extracts of an entry and its closest matches also go to Anthropic to say why they are alike. With search by meaning on, your question goes to OpenAI to find the matching entries, and those entries go to Anthropic to write the answer. Switch both off to stop this.
When you talk to Ultrathink, your voice is sent to OpenAI as you speak, along with the text of the entries Ultrathink looks up or changes for you during the conversation and your name, so OpenAI can understand you, answer and speak. Ultrathink does not keep recordings of the conversation, and asks OpenAI not to store them either. Nothing goes to OpenAI for voice unless you start a conversation.
Neither Anthropic nor OpenAI uses data sent through its API to train its models.
To run the daily AI allowance and keep an eye on what the AI costs, Ultrathink keeps a record of each AI call: the account, the job (such as a summary or a search), the AI model, how many tokens it used and its estimated cost. The record never holds what was sent or what came back. Each one is deleted after 90 days.
Questions you type into the search on our help pages are sent to Anthropic to write the answer. That search has a daily allowance too. For a visitor who is not signed in, it is counted against a keyed hash of their IP address that changes every day, so the IP address itself is never stored.
Who else handles your data
| Service | What for |
|---|---|
| Google Cloud and Firebase | Sign in, storing your entries and files, running Ultrathink, app analytics and reCAPTCHA |
| Anthropic | The AI features described above: summaries, filing, AI search, Ask, text correction and the help pages’ search |
| OpenAI | Turning voice recordings into text, the search index behind search by meaning, and talking to Ultrathink |
| Stripe | Payments. We never see or store your card number. |
| Fifty Five and Five Ltd | The website analytics described above |
We do not sell your data or share it for advertising.
Organisations
If you join an organisation in Ultrathink, entries you share with it can be seen by its members. Private entries stay visible only to you and to Ultrathink’s administrators, who can access them to run and support the service. You can change an entry from shared to private at any time.
How long we keep it
Files you upload, such as screenshots, recordings and documents, are stored at a long, unguessable web address. Anyone who has that address can open the file, and the address does not expire, so take care where you paste it.
Your entries stay until you delete them. A deleted entry waits in Recently deleted for 30 days, with its comments and files, so you can bring it back. Then it goes for good, with the files you uploaded with it, such as screenshots and recordings, unless another of your entries still uses them, and the copies we keep of any entries you merged into it. When you delete your account, your entries, including those in Recently deleted, and your files, settings and account details are deleted with it.
Your rights
You can see, change and delete your entries in the app at any time, and delete your whole account from Settings. To ask for a copy of your data, or to use any of your rights under UK and EU data protection law, such as objecting to how we use your data, email me@cmw.email. You can also complain to your local data protection authority; in the UK that is the Information Commissioner’s Office.
Browser extension permissions
| Permission | Why the extension needs it |
|---|---|
| activeTab | To read the address and title of the page you are saving |
| tabs | To save all your open tabs at once |
| tabGroups | To keep tab group names when you save tabs |
| scripting | To read the content you save from pages such as ChatGPT and Outlook |
| storage | To keep your extension settings and device key in your browser |
| Access to all sites | So you can save from any website. It reads a page only when you save it. |
| nativeMessaging (optional, asked for separately) | To let the Ultrathink desktop app on your computer read your open tabs, if you switch this on |
Children
Ultrathink is not meant for anyone under 16, and we do not knowingly collect their data.
Changes to this policy
When we make an important change we will tell you by email or in the app, and update the date at the top of this page.
Contact
For privacy questions, email me@cmw.email.