IdeaPark Privacy Policy

IdeaPark is built and published by CG Software Studio, the brand operated by CG Software Services LLC. You can reach us at support@cgsoftwarestudio.com.

We collect the following categories of information:

• Account information: your email address; if you sign up with a password, it is stored only as a securely hashed (scrypt) credential and never in plaintext; if you use Sign in with Apple, the Apple user identifier and a token we keep solely to disconnect your Apple sign-in when you delete your account; an optional display name; and your plan.
• Your ideas and content: idea titles, the raw idea text you capture, any addenda you add, AI-generated summaries, the idea type, the “sensitive” flag, and your chosen reveal and snooze times.
• Your optional Idea Lens profile, if you fill it in: current role, skills, tools and tech, weekly time available, budget range, industries, network advantages, risk tolerance, goals, an avoid-list, preferred idea types, and energy constraints — used to personalize your reports.
• Research outputs generated for you: reports, scorecards, cited sources, PRD artifacts, unlock events, and resurfacing reminders.
• Subscription information, if you subscribe: a RevenueCat customer identifier, your plan and status, and your usage credits. Payments are handled by Apple's App Store — we never receive your payment-card details.
• Sessions: only a hashed session token and its expiry (sessions last up to 30 days) are stored, never the token itself.
• A privacy-safe audit log of event names and record identifiers used to operate and secure the service — it never contains your idea text, passwords, or session tokens.

• We do not use third-party analytics, advertising, or tracking SDKs.
• Your idea text is sent to AI providers only when AI processing is enabled. Sensitive Mode and the “disable AI processing” setting keep an idea on our servers without sending it to any AI provider until you choose to.
• We do not use your ideas to train AI models, and we never sell your data.

Information is used only to operate, maintain, and improve IdeaPark, to respond to support requests, and to meet legal and security obligations. We do not sell your personal information.

We rely on the following third-party services, which may process limited information to provide their functionality:

• Supabase — Hosts the Postgres database that stores your account and content. Access is protected by per-account Row-Level Security, so a row is only ever readable or writable by its owner. (privacy details)
• Anthropic (Claude) — Provides the AI models that research and score your ideas. When AI processing is enabled, your idea text is sent to Anthropic for processing. Anthropic does not use data submitted through its API to train its models. (privacy details)
• Google (Gemini) — An alternative AI provider used for processing and automatic failover. When it is the active provider and AI processing is enabled, your idea text is sent to Google for processing. (privacy details)
• Tavily — Optional web-search provider used for deep exploration to gather sourced evidence for a report. Search queries derived from your idea may be sent to Tavily when deep research runs. (privacy details)
• RevenueCat — Manages subscription entitlements for IdeaPark Builder. It processes a customer identifier and your subscription status; it does not receive your payment-card details. (privacy details)
• Apple — Provides optional Sign in with Apple and processes in-app subscription payments through the App Store. Your use of these features is also subject to Apple's Privacy Policy. (privacy details)
• Vercel — Hosts the IdeaPark API that your app connects to. Requests are processed on Vercel's infrastructure to deliver the service. (privacy details)

IdeaPark does not use third-party analytics or crash reporting.

IdeaPark can send calm reminders to resurface an idea when you asked to be reminded. These do not carry your idea text to any push service, and you can turn notifications off in your device settings at any time.

Your account and content are kept while your account exists. You can delete individual ideas at any time, and deleting your account removes all associated data. Content stored only on your device is removed when you delete the app.

You can delete your account from the app at any time under Settings → Delete account. Deletion is confirmed with your password (or, for Sign in with Apple, your active session) and permanently removes your account and every associated idea, report, and session on our servers, and disconnects Sign in with Apple. You can export all of your ideas as Markdown beforehand from Settings → Export my ideas. You can also email support@cgsoftwarestudio.com from the address on your account and we will delete your account data.

Depending on where you live, you may have additional rights — such as access, correction, or deletion — under laws like the GDPR or CCPA. Contact us to exercise them.

IdeaPark is not directed to children under 13, and CG Software Services LLC does not knowingly collect personal information from children under 13.

Data travels over encrypted HTTPS/TLS connections, passwords are stored only as scrypt hashes, sessions use rotated bearer tokens of which only a hash is stored, and server-side Row-Level Security ensures each account can access only its own data. No method of transmission or storage is completely secure, but we work to protect your information.

We may update this policy from time to time. Material changes will be reflected by updating the effective date above and posting the revised policy on this page.

Questions about this policy or a privacy request? Email support@cgsoftwarestudio.com. See also our privacy overview.