Privacy Policy

Privacy Policy

Last updated: July 2026

Drift is an idea-capture and writing app operated by Let's Drift. This policy explains what data we collect, how we use it, who we share it with, and the control you have over it. We keep this short and honest, because that is how we would want it explained to us.

What we collect

When you use Drift, we collect and store the following:

  • Account information: your email address and password (stored hashed). If you sign in with Apple or Google instead, we receive the basic profile details those services return, such as your name and email.
  • Your captures and ideas: the text or voice notes you capture, the cleaned-up version, the headline, the type, the area it belongs to, any to-dos, dates, and notes attached to it.
  • Your writing: documents you write in Drift, including saved version history.
  • Areas: the areas you create to organize your ideas, and their names and descriptions.
  • Images: any images you attach, stored in compressed form.
  • Sharing: when you share an area or idea, we store who you shared it with and their access level.
  • Subscription information: your plan (Free or Pro), subscription status, and billing period dates. We never see or store your card number (see Payments and billing below).
  • Notifications: your device push token or web push subscription, plus your preferred reminder time and timezone, so we can send the daily nudge and other alerts you opt into.
  • Support: messages you send through the in-app help so we can answer you.
  • Usage data: aggregated request counts for cost monitoring. This is not used for profiling or advertising.

Voice capture

Drift never stores your raw audio. In the Apple app, speech recognition runs on your device using Apple's built-in engine, and only the resulting text leaves your phone. On the web, audio is streamed to Deepgram purely to produce a transcript and is discarded once the text is returned. Either way, we keep the words, not the recording.

How we use your data

Your data is used to:

  • Provide the capture, organization, and writing features you use in the app.
  • Clean up your captures, give them a headline, sort them into the right area, and pull out to-dos and dates.
  • Send the daily reminder and any other notifications you turn on.
  • Answer your questions through in-app support.
  • Manage your subscription and apply the limits of your plan.
  • Monitor costs and keep the service running.

We do not sell your data. We do not use your ideas or writing to train any models. Our processing provider, Anthropic, does not use its API inputs or outputs to train its models and deletes the data within 30 days. See Anthropic's data policy for details.

Payments and billing

Drift Pro is processed by Stripe, acting as merchant of record. You enter your payment details directly with Stripe. Drift never sees or stores your full card number. We receive only what we need to run your subscription: your plan, its status, and the billing period. Stripe's handling of your payment data is covered by Stripe's own privacy policy.

Sharing and collaboration

If you share a space or a single idea with another person, the content you share becomes visible to the people you invite, at the access level you choose. You can change or revoke that access at any time from within the app.

Third-party services

Drift relies on the following third-party services, each only for the purpose listed:

  • Supabase: hosts our database, authentication, and file storage. Your account, ideas, writing, areas, and images are stored here.
  • Anthropic (Claude): receives your capture and writing text to clean it up, structure it, and power in-app support. Anthropic processes data per request and does not train on it.
  • Deepgram: receives audio on the web only, to produce a transcript in transit. It does not store the audio.
  • Stripe: processes Drift Pro payments as merchant of record.
  • Apple: provides Sign in with Apple, and delivers push notifications to the Apple app through the Apple Push Notification service.
  • Google: used only for OAuth sign-in if you choose it. We receive your name, email, and profile picture.
  • Resend: sends transactional emails such as account confirmation and password reset. It processes your email address to deliver them.
  • Vercel: hosts and serves the app. It may collect standard server logs, such as IP address and request metadata, as part of hosting.

Data storage and security

Your data is stored in Supabase's cloud infrastructure and encrypted in transit using TLS. Access is protected by your account credentials, and row-level security policies mean each account can only reach its own data.

Data retention

We keep your data for as long as your account is active. When you delete an item, or your whole account, it is permanently removed from our live database, and copies age out of routine backups on a rolling basis. Support messages and billing records may be kept for as long as needed to meet legal and accounting obligations.

Cookies and local storage

Drift uses a session token (drift-auth) stored in your browser's localStorage to keep you signed in. We do not use tracking cookies or third-party advertising analytics.

Your rights

You have the right to:

  • Access your data: everything you have created is visible in the app.
  • Delete your data: you can delete your account and all its content from the Account page at any time. This permanently removes your ideas, writing, areas, images, and settings.
  • Export your data: you can request an export of your data from the Account page, or by emailing us.
  • Rectify your data: you can edit your ideas, writing, and areas within the app.

GDPR

If you are in the European Economic Area, you have additional rights under the GDPR. We process your data to provide the service you asked for (contract), to run features you opt into such as notifications (consent), and to keep the service secure and sustainable (legitimate interest). You can withdraw consent or ask us to access, correct, or erase your data at any time by using the app or emailing us. You also have the right to lodge a complaint with your local data protection authority.

Children's privacy

Drift is not intended for anyone under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with their data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. If we make a significant change, we will notify you through the app or by email. Continued use of Drift after a change means you accept the updated policy.

Contact

Questions or requests? Reach out at hello@letsdrift.app.