Privacy Policy

Distill, including Thoughtcast, is a product of Tamensah Labs (“we”, “us”), which is responsible for the personal data described here. Contact us at our email (shown with JavaScript on). This policy applies to mydistill.app, the Distill app, and the public Thoughtcast pages.

• Account: your name, email address and password (stored only as a secure hash), and when you signed up.
• What you bring: links, transcripts and text you paste or upload, recordings you make with Talk it through, and audio you choose to keep or upload.
• What Distill makes, and what you do with it: outputs, your edits, ratings, Keep/Later/Dismiss choices, your stated views, and your writing preferences.
• Thoughtcast profile: your username, display name, photo, bio and links. Photos are re-encoded when you upload them, which removes location and camera details.
• Listener activity on thoughtcasts: views, listens, listening time, finishes and shares, counted using a random ID stored in the visitor's browser. We don't record listeners' names, emails or IP addresses with these counts. Per-browser records are deleted after two days; only daily totals are kept.
• Waitlist and contact: your email address if you join the waitlist, and whatever you include when you contact us or report a thoughtcast (a contact address is optional).
• Technical data: our hosting and security providers process IP addresses, device and browser details, and request logs to deliver Distill and protect it from abuse. Error reports are sent without the content of your sources or outputs.

• To provide Distill: transcribe, generate outputs, keep your library, and publish what you choose to publish.
• To run your account: sign-in, password resets, and service messages.
• To show you your thoughtcasts' activity.
• To keep Distill safe: investigate reports, prevent abuse and spam, and enforce our Terms of Use.
• To improve Distill, using aggregate measures of how features are used and the ratings you give outputs.
• To meet legal obligations.

We process your data to provide the service you asked for (our agreement with you), for our legitimate interests in keeping Distill secure and improving it, with your consent where we ask for it (for example, when you publish), and where the law requires it. Where we rely on consent, you can withdraw it at any time, for example by unpublishing.

To make transcripts and outputs, we send the relevant content to AI service providers, who process it on our behalf. Under their terms for business customers, they don't use that content to train their models, and they keep it only for limited periods for safety and abuse monitoring.

People at Tamensah Labs don't read your private sources or outputs, except to investigate a report or suspected abuse, to help you when you ask us to, or where the law requires it.

Your library is private. Content becomes public only when you choose:

• Thoughtcasts you publish: the audio, title, description, artwork, the notes you choose, and the transcript if you show it.
• Your profile: your username, display name, photo, bio and links, once you have published a thoughtcast.
• Share links you create for a single output.

Public content can be seen by anyone with the link, may appear in search engines and link previews, and can be copied by others. When you unpublish or delete it, it's removed from Distill at once, but we can't recall copies made elsewhere.

We don't sell your personal data or share it for advertising. We share it only with:

• Service providers who run parts of Distill for us under contract: hosting, security and file storage (Cloudflare); our database (Convex); AI generation (Anthropic) and speech-to-text (OpenAI); fetching transcripts for video links (a transcript service); email delivery (Resend); and error monitoring (Sentry). They may use your data only to provide their service to us.
• The authorities, when the law requires it, or to protect people from serious harm.
• A successor, if Tamensah Labs or Distill is reorganised, merged or sold, in which case this policy continues to apply to your data.

We use one essential cookie to keep you signed in. In your browser's local storage we keep your appearance choice (light, dark or system) and, on thoughtcast pages, the random listener ID described above. We don't use advertising, analytics or cross-site tracking cookies.

• Your sources, outputs and kept audio stay until you delete them. Deleting a source deletes its outputs, its kept audio, and anything published from it.
• When you delete your account (Settings › Account › Delete account), you're signed out everywhere and your account, library, recordings, thoughtcasts and profile are deleted straight away; anything you published stops working at once. Copies in our providers' backups are removed as those backups expire, within 30 days.
• Listener activity totals stay with the thoughtcast and are deleted with it.
• We keep reports, records of enforcement action, and any payment records, as long as needed to keep Distill safe and to meet legal obligations.

We protect your data with encryption in transit, access controls, private storage for files you haven't published, and time-limited links for audio and uploads. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.

You can ask to access, correct, export or delete your personal data, or object to or restrict how we use it. Much of this you can do in Distill yourself: edit your profile, export outputs, unpublish, delete sources, and delete your account. For anything else, email our email (shown with JavaScript on) from your account's address, and we'll respond within 30 days.

If you're not satisfied, you can complain to Ghana's Data Protection Commission, or to the data protection authority where you live.

Our service providers may process your data outside Ghana, including in the United States and the European Union. We use providers that protect personal data to recognised standards and contractually require them to keep it secure.

Distill isn't for children under 16. If you believe a child under 16 has given us personal data, contact us and we'll delete it.

We'll update the date at the top when this policy changes, and tell you in Distill or by email before significant changes apply.

Questions or requests about your data: our email (shown with JavaScript on), or see Contact.