Privacy policy
Last updated: 18 October 2026
Second Thoughts is an app that researches listed companies and helps you write down your reasoning before you decide. It is made by Justinas Sinkunas, an individual developer in the United Kingdom, who is the controller of your personal data. Contact: sinkunaslabs@gmail.com.
What we collect
- Your email address, to sign you in with a one-time code, plus your account ID and when you signed in.
- What you write in your journal: your decision, your reasons, what would prove you wrong, your plan if the price falls, your confidence, your review date, the outcome and any notes. No other user can read your journal; our database rules block them, and we test this. We only access stored data when needed to run or fix the service, or if the law requires it.
- Your watchlist and the companies you ask us to research.
- Problem reports you send about a claim or figure, including any note you add.
- Taps on the Pro button: which screen it was on and when, so we can tell whether a paid version is wanted.
- Technical logs kept by our sign-in provider, such as IP address and app version, for security.
On your phone, the app stores your sign-in session (in the phone's secure storage) and a note that you've seen the welcome screen.
We don't collect your location, contacts, photos or payment details. There are no ads, no analytics tools and no tracking across other apps or websites. We never sell your data.
How research works
Company research is done on our server using AI (Anthropic's Claude) and financial data services (SEC EDGAR, Financial Modeling Prep). These services receive only company names and tickers, and the text you type into company search. They never receive your email or your journal. Research briefs are shared by all users and contain nothing about you.
Who processes your data for us
- Supabase: database and sign-in. Your data is stored in the EU (Ireland).
- Google (Gmail): sends sign-in code emails. Gmail keeps a copy of each one (your address and the code) in our sent mail; we delete these copies at least once a month.
- Railway: runs our research server.
- Expo: delivers app updates. The app checks Expo's servers, which see your IP address, app version and a random ID the app creates when it's installed (it isn't linked to your account).
- Cloudflare: hosts this page.
Some of these providers may handle data outside the UK. Where they do, it is under safeguards UK law accepts, such as the UK International Data Transfer Addendum or the UK–US data bridge. Google Play, which you got the app from, handles your data under Google's own privacy policy.
Why we use it (legal basis)
To provide the app you signed up for (contract): your account, journal, watchlist and research requests. For our legitimate interests: keeping sign-in secure, fixing problems you report, and judging interest in a Pro version.
How long we keep it
Until you delete your account. Account → Delete my account removes your account, journal, notes, watchlist, problem reports and Pro taps straight away. The companies you asked us to research stay in our records with no link to you. Deleted data may remain in our database provider's internal backups for a short time until they are overwritten. Sign-in logs are deleted automatically after a short time. To delete your account without the app, see Delete your account.
Your rights
Under UK data protection law you can ask to see, correct, delete or take a copy of your data, and object to how we use it. Email sinkunaslabs@gmail.com from your account's address. We'll reply within one month. If you're unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk).
Age
Second Thoughts is for adults aged 18 and over.
Changes
If this policy changes, we'll update the date at the top, and tell you in the app when the change is significant.