Legal

Privacy Policy

Last updated: 27 August 2026

Ponder is a reflection app. You answer a few short questions each morning and evening, and every week an AI writes you a letter about what it notices. That only works if you trust us with what you write, so this policy sets out exactly what we collect, who processes it and what you can do about it.

01Who we are

Ponder is built and operated by Thomas Gommeren, based in Belgium, acting as an individual. He is the data controller for all personal data described in this policy.

Contact: privacy@ponder.be

02What we collect

On this website, if you join the waitlist:

Email address, together with a note that it came from the landing page.
Anonymous usage statistics: page views and a signup event. This is measured without cookies and without storing anything on your device — see our Cookie Policy.

In the app, once you have an account:

Account data: your name, email address and password. The password is hashed by our authentication provider; we never see it.
Your intake answers: what you want to work on, how your day is structured, and any free text you add.
Your daily check-ins: the answers you give each morning and evening — such as how you slept, how you feel, your energy and focus, and anything you write in your own words.
Your letters: the reflections our AI writes for you, plus a short running summary it keeps so later letters can refer back to earlier ones.
A notification token, if you allow reminders. This identifies your device to the push service, not you personally.
Product analytics: which screens you open and which actions you take. In the app this is linked to your account ID and email address so we can tell one person's journey from another's.

03A note on sensitive information

Your check-ins are about your wellbeing — sleep, mood, energy. Ponder is a reflection tool, not a medical device, and we do not use your answers to diagnose anything or to draw conclusions about your health. You decide what you write. We would ask you not to put information about diagnoses, medication or other health conditions in the free-text fields, because those fields are not designed to hold that kind of data.

04Why we process it, and on what basis

To give you the service you signed up for — your account, your check-ins and the letters written from them. Basis: performance of our contract with you.
To send you reminders, if you turned them on. Basis: your consent, which you can withdraw in your device settings at any time.
To email you about your waitlist place. Basis: your consent, given when you submit the form.
To understand how Ponder is used and make it better. Basis: our legitimate interest in improving the product.
To keep the service secure and to comply with the law. Basis: legitimate interest and legal obligation.

05Who else processes your data

We do not sell your data and we do not share it for advertising. We do rely on a small number of providers to run Ponder, each acting on our instructions:

Supabase — database and sign-in, hosted in the European Union. This is where your account, check-ins and letters live.
Vercel — hosting for this website and for our backend.
Anthropic — the AI that writes your letters and your personalised questions. To do that, the content of your check-ins is sent to Anthropic's API in the United States. Anthropic acts as our processor and does not use this content to train its models.
PostHog — product analytics, on their European infrastructure.
Expo — delivery of push notifications, in the United States. Only the notification token and the message itself pass through it.

We may also disclose data where the law requires it. Where a provider is outside the European Economic Area — Anthropic and Expo above — that transfer relies on the European Commission's standard contractual clauses.

06Automated processing

Your letters are written by an AI model from the answers you give. It produces reflections and suggests new questions; it makes no decision that has legal effects for you or that significantly affects you. Nothing in Ponder is decided about you automatically in that sense.

07How long we keep it

Your account and everything in it — until you delete it. Deleting your account in the app removes your profile, check-ins, letters, questions and notification tokens.
Your waitlist email — until you get access, or until you ask us to remove it, whichever comes first.
Usage statistics — retained by PostHog under their standard retention period.

08Your rights

Under the GDPR you have the right to:

Ask what we hold about you and get a copy of it.
Have inaccurate data corrected.
Have your data deleted.
Restrict or object to how we process it.
Receive your data in a portable format.
Withdraw any consent you gave, without affecting what came before.

Two of these you can exercise yourself, immediately, without asking us. In the app, open Settings: Download My Data gives you everything we hold in one file, and Delete Account erases it. For anything else, write to privacy@ponder.be.

If you think we are handling your data wrongly, you can lodge a complaint with the Belgian supervisory authority: Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels — contact@apd-gba.be.

09Security

Traffic to and from Ponder is encrypted. Your data is separated per user at the database level, so one account cannot read another's. On your phone, your sign-in session is held in the operating system's secure storage. No system is perfect, but we take this seriously.

10Children

Ponder is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will remove it.

11Changes

We will update this policy as Ponder changes. The date at the top always reflects the current version, and we will tell you in the app before any change that materially affects you.

12Contact

Questions about this policy, or about your data: privacy@ponder.be.