Privacy Policy
Last updated: July 11, 2026
The short version: ThynkOT is built to know as little as possible. There is no field for a student's name — anywhere. Your session notes are encrypted on your device with a key only you hold, so we could not read them even if we wanted to. We never sell your data, and we never will.
Who we are
ThynkOT ("we," "us") is a caseload app for school-based occupational therapists, built by a practicing school OT. Contact: support@thynkot.com.
What we collect — and what we deliberately don't
- Your account: your email address and a password (stored as a cryptographic hash — we never see the password itself).
- Your caseload data: student codes you choose (never names — the app has no name field by design), goals, schedules, session logs, and settings. This is your professional working data; you control it.
- Session notes: encrypted on your device with a key derived from your password before they are ever sent to us. What sits on our servers is unreadable ciphertext. We cannot decrypt it. Neither can a district, and neither can anyone who compromised our database.
- Early-access signups: if you join the waitlist on our website, we keep your first name and email to contact you about ThynkOT.
- What we don't collect: no student names, no student records from district systems, no advertising trackers, no sale or sharing of your information with data brokers — ever.
Where your data lives
Application data is hosted with Supabase (database, US region) and Netlify (website hosting). Waitlist contacts are managed in our customer-communication system so we can email you about early access. These providers process data on our behalf and don't get to use it for their own purposes.
How we use your information
- To run the app: sync your caseload across your devices and compute your deadlines.
- To contact you about your account or early access (no spam; unsubscribe anytime).
- That's it. No advertising, no profiling, no selling.
Your controls
- Export & deletion: you can clear all of your data from inside the app at any time, and you can email us to permanently delete your account. Data export tools are part of the product.
- Your notes are yours alone: because notes are encrypted with your key, losing your password and recovery key means notes cannot be recovered — by design. The app walks you through creating a recovery key.
A note on student privacy
ThynkOT is intentionally a standalone professional tool: it does not connect to district systems, and no student names or district records enter it. You keep the code-to-name key wherever your district already stores student information. We designed it this way so the app holds the minimum possible information about children.
Changes
If this policy changes in a way that matters, we'll email account holders before it takes effect.
Questions? support@thynkot.com