Thumble privacy policy

Local controller use

Your phone sends controller inputs and messages to the Mac you pair with over an encrypted local connection. Local pairing, the standard controller and local profiles do not require a Thumble account. Controller inputs and game-chat text are not sent to our cloud service for local play.

Profiles, calibration, setup progress, device identifiers, demo usage and verified purchase information are stored on your devices so the app can restore your setup and remaining allowance. The receiver stores local profiles and pairing information. Removing app data can remove local settings; some purchase and demo records use system-protected storage.

Camera and dictation

Camera access is used to scan a pairing code. Thumble does not upload camera images to its servers and does not request access to your photo library.

Microphone and speech-recognition access are optional. Dictation uses your operating system’s speech service. On-device recognition is used where supported. If you enable online recognition on a device or language that requires it, audio may be processed by Apple or your Android speech provider under that provider’s privacy terms. Thumble does not record or retain audio on its servers. You can edit a transcript before sending it to your paired Mac.

Purchases and demo access

Apple or Google handles payment, billing details and store purchase history. Thumble does not receive your card details. To verify Pro, the app sends the store’s purchase proof and generated phone/receiver identifiers to our verification service on Cloudflare. The service checks the purchase with the store and returns a signed access grant.

The purchase verifier does not log purchase proofs or authentication secrets, and local game-chat text is not sent to that service. The purchase verifier does not maintain a customer purchase database; it processes verification requests and returns the result. The store retains its own transaction records under its policies.

Optional cloud accounts and controller delivery

If you choose Cloud Controllers, Apple or Google sign-in supplies an account identifier and the name, email address and profile information you authorize. Authentication is handled using Better Auth; account records, sessions and controller data are stored in Cloudflare D1. Authentication sessions may include an IP address and browser/device information for security.

The service stores your saved controller profiles and revisions, registered-device names and identifiers, agent permissions, and delivery status so an authorized agent can send a specific layout to your phone. Only agents you connect and authorize should receive access to your cloud library. Review the permissions before authorizing an agent. Content you give an external AI service is also subject to that service’s privacy terms.

Cloud profiles and account records are retained while needed to provide your account and library, until deleted or until a deletion request is processed. Signing out removes saved credentials and the cloud-profile cache from that phone; signing out alone does not delete your account. To request access to or deletion of your cloud account and stored profiles, email [email protected] from the account address. We may need to verify ownership before acting. Some records may be retained where required for security, legal obligations or provider backups.

Website updates and support

If you join the launch list, we collect your email, consent and signup time, form source, country reported by Cloudflare, browser user agent and a hashed IP address for abuse prevention and consent records. Signup records are stored in Cloudflare D1 and retained until the launch campaign is complete or you request deletion. You can unsubscribe from launch messages or request removal at any time.

If you contact support, we receive the information you send and use it to respond. Please do not send passwords, purchase proofs, authentication tokens or private controller content unless necessary for support.

Hosting, sharing and your choices

Cloudflare provides hosting, databases and network protection and may process technical request data under its policies. Apple and Google provide store purchases and optional sign-in or speech services. We use information for app functionality, customer support and security. We do not sell personal data, use it for targeted advertising, or track you across other companies’ apps and websites.

You can revoke camera, microphone, speech and local-network permissions in system settings, disconnect an agent, sign out of cloud services, delete local profiles, or contact us about stored information. Privacy requests: [email protected]. Product support: [email protected].

We will update this page when our practices change. The date above identifies the latest revision.