Privacy Policy

The short version. Outthunder has no sign-up, so we never ask for your name, email address, phone number, postal address or payment details, and we do not have them. What we do hold is an anonymous device identifier and the analyses you run — and those analyses are stored on our server, not only on your phone.

1. What we collect

• An anonymous device identity. On first launch the app generates a random identifier and keeps it in your device's secure storage. We store it with the platform you are on (iOS, Android or Windows) and the date the identity was created. The app also sends its own version and your OS version with that first request. There is no account, and nothing links this identifier to you as a person unless you put identifying information into an analysis yourself.
• Sign-in tokens. Refresh tokens are stored on our server as hashes, so that a stolen database does not yield working credentials.
• What you ask for. The ticker, your entry price if you give one, your optional question (up to 200 characters) and any follow-up messages.
• What the analysis produced. The finished report, the intermediate research behind it, the resulting decision, and timestamps. We keep these so the app can show you your history, and so we can measure how accurate our own model is.
• Ordinary server logs, which can include IP addresses and request details, kept for security and debugging.

We do not use advertising identifiers, we do not run third-party analytics or advertising SDKs in the app, and we do not sell or rent anything we hold. This website is the one exception, and it is separate from the app: our public pages use Google Analytics to count visits and app downloads.

2. Where it is stored

Analyses are stored on our server in a managed PostgreSQL database, and reports are also written to the server's own storage. They are private to your device identity until you choose to share them.

3. Sharing — what becomes public

Nothing you run is public by default. If you press Share on a finished analysis, we publish it at a public web address. Anyone with that link can read it without signing in, and no part of it is password protected.

The published page shows the report itself. Your question, your entry price and your follow-up conversation are not published as separate fields. But please understand what that does and does not protect:

• The report is written by a model that was given your entry price and your question, so the text can restate or imply them — that you hold the stock, roughly where you bought it, or whatever your question revealed about your situation.
• The fact that you researched a particular security at a particular time is itself visible to anyone you give the link to.
• A shared page can be forwarded, copied, archived or indexed by a search engine once the link exists.

Treat sharing as publishing. If an analysis would embarrass you or reveal more about your finances than you want known, do not share it.

Share links are not permanent: one stops answering seven days after you create it, and pressing Share again starts a fresh seven days. Deleting the analysis takes the page down at once. Expiry limits how long a link keeps working — it cannot recall anything already read or copied while it was live.

There is currently no "unshare" button. Deleting the analysis removes the public page; it cannot recall what was already read or cached.

4. Who else sees your data

We do not sell your data, and we use no advertising processors. Running an analysis does, however, require sending your request to the providers that do the work. Your ticker, your entry price and your question form part of the prompt, and your question can also shape the web searches an analysis performs. The providers are:

• OpenRouter — routes our prompts to the language model that writes the analysis, and passes them on to whichever provider serves the model we have selected. The model currently in use is one of Google's.
• Anthropic — generates the daily market overview. This one is not personalised and contains no user input.
• Web search and market-data providers — receive the search queries an analysis makes. These are normally about the company, but a question you write can influence them.
• Our hosting and database provider — stores the data described above on our behalf.
• Google Analytics — measures visits to this website and clicks on the app download link. It runs on our public web pages only, never inside the app, and it sees nothing about your analyses: no ticker, no question, no device identity.

These providers operate under their own terms and privacy policies, and may process data outside your country. We may also disclose data where the law requires it.

Do not type anything into a question or follow-up that you would not want handled by these third parties — and in particular, do not enter other people's personal information.

5. Deleting your data

You can delete any analysis from the app, which removes it from our database and takes down its public page if it was shared. Prompts already sent to the providers above are subject to their retention, not ours.

To have the device identity itself and everything attached to it removed, write to us at outthunder@socialtalents.com.

6. Children

Outthunder is not intended for anyone under 18, and we do not knowingly collect data from children.

7. Security

Traffic is encrypted in transit, refresh tokens are stored hashed, and an analysis is readable only by the device identity that created it unless it has been shared. No service is perfectly secure, and Outthunder is beta software: please do not put anything in it that you could not bear to see exposed.

8. Changes and contact

We will update this page as the product changes, and the date at the top always reflects the current version. Questions, or a deletion request: outthunder@socialtalents.com.

SocialTalents Software Inc