Privacy Policy

Privacy Policy

Last updated: 8 September 2026

Drift is an idea-capture and writing app operated by Sjoerd Wess, trading as Drift, a Dutch sole proprietorship. This policy explains what data we collect, how we use it, who we share it with, and the control you have over it. We keep this short and honest, because that is how we would want it explained to us.

What we collect

When you use Drift, we collect and store the following:

  • Account information: your email address and password (stored hashed). If you sign in with Apple or Google instead, we receive the basic profile details those services return, such as your name and email.
  • Your captures and ideas: the text or voice notes you capture, the cleaned-up version, the headline, the type, the area it belongs to, any to-dos, dates, and notes attached to it.
  • Your writing: documents you write in Drift, including saved version history.
  • Areas: the areas you create to organize your ideas, and their names and descriptions.
  • Images: any images you attach, stored in compressed form.
  • Sharing: when you share an area or idea, we store who you shared it with and their access level.
  • Subscription information: your plan (Free or Pro), subscription status, and billing period dates. We never see or store your card number (see Payments and billing below).
  • Notifications: your device push token or web push subscription, plus your preferred reminder time and timezone, so we can send the daily nudge and other alerts you opt into.
  • Support: messages you send through the in-app help so we can answer you.
  • Usage data: aggregated request counts for cost monitoring. This is not used for profiling or advertising.

Voice capture

Drift never stores your raw audio. In the Apple app, speech recognition runs on your device using Apple's built-in engine, and only the resulting text leaves your phone. On the web, audio is streamed to Deepgram purely to produce a transcript and is discarded once the text is returned. Either way, we keep the words, not the recording.

How we use your data

Your data is used to:

  • Provide the capture, organization, and writing features you use in the app.
  • Clean up your captures, give them a headline, sort them into the right area, and pull out to-dos and dates.
  • Send the daily reminder and any other notifications you turn on.
  • Answer your questions through in-app support.
  • Manage your subscription and apply the limits of your plan.
  • Monitor costs and keep the service running.

We do not sell your data. We do not use your ideas or writing to train any models. Our processing provider, Anthropic, does not use its API inputs or outputs to train its models and deletes the data within 30 days. See Anthropic's data policy for details.

Payments and billing

Web subscription payments are processed through Stripe; in-app purchases on Apple devices are handled by Apple. You provide payment details to the relevant payment provider. Drift never sees or stores your full card number. We receive only what we need to run your subscription: your plan, its status, and the billing period. The relevant provider's privacy policy also applies to its processing of your payment data.

Sharing and collaboration

If you share a space or a single idea with another person, the content you share becomes visible to the people you invite, at the access level you choose. You can change or revoke that access at any time from within the app.

Third-party services

Drift relies on the following third-party services, each only for the purpose listed:

  • Supabase: hosts our database, authentication, and file storage. Your account, ideas, writing, areas, and images are stored here.
  • Anthropic (Claude): receives your capture and writing text to clean it up, structure it, and power in-app support. Anthropic processes data per request and does not train on it.
  • Deepgram: receives audio on the web only, to produce a transcript in transit. It does not store the audio.
  • Stripe: processes web subscription payments.
  • Apple: handles Apple in-app purchases, provides Sign in with Apple, and delivers push notifications to the Apple app through the Apple Push Notification service.
  • Google: provides optional website analytics, described below, and account sign-in if you choose it.
  • Resend: sends transactional emails such as account confirmation and password reset. It processes your email address to deliver them.
  • Vercel: hosts and serves the app. It may collect standard server logs, such as IP address and request metadata, as part of hosting.

Data storage and security

Your data is stored in Supabase's cloud infrastructure and encrypted in transit using TLS. Access is protected by your account credentials, and row-level security policies mean each account can only reach its own data.

Data retention

We keep your data for as long as your account is active. When you delete an item, or your whole account, it is permanently removed from our live database, and copies age out of routine backups on a rolling basis. Support messages and billing records may be kept for as long as needed to meet legal and accounting obligations.

Cookies and local storage

The web app uses sign-in cookies to maintain your session. Local storage remembers preferences such as theme, language and layout, and may cache app data on your device. You can remove this storage through your browser settings; doing so may sign you out or reset your preferences.

If you allow referral storage in Cookie settings, the website stores a first-party cookie called drift_ref for up to 30 days. It remembers the referral code so a qualifying registration can be attributed to the person who shared the link. It is not needed to browse the website. Choose Reject optional in Cookie settings to withdraw consent and delete this cookie. Your category preferences, versioned choice and timestamp are stored in drift_cookie_preferences, drift_cookie_choice and drift_cookie_choice_at for up to 180 days. Withdrawal stops future browser attribution; it does not reverse rewards already recorded.

The landing-page app previews are served directly by Drift. They do not load a third-party video player. Hosting providers may still process request logs as described above.

With your Analytics consent, Google Analytics measures visits to public marketing pages, using browser identifiers, page paths and device/network information. We configure its _ga and _ga_* cookies for up to 400 days; your browser may shorten this. With Marketing consent, Meta Pixel receives public website page visits and browser/device information for advertising measurement and audiences, and may associate these visits with your Meta account. Its _fbp and _fbc cookies generally last up to 90 days. We do not enable automatic advanced matching or send your private Drift ideas, forms or account details as events. Google Tag Manager loads these integrations only after an optional tracking choice is allowed. Google Ads is not installed.

The legal basis for these optional services is your consent. Reject optional or change individual choices in Cookie settings in the footer at any time. Withdrawal stops future tracking and removes the accessible tracking cookies set by this website; it does not undo processing that already occurred or remove cookies on other providers’ domains. Google and Meta may process information outside the EEA. See Google’s privacy policy, Meta’s privacy policy and Meta’s cookie policy for their retention, international transfers and privacy controls. Google account sign-in is separate from these choices.

Your rights

You have the right to:

  • Access your data: everything you have created is visible in the app.
  • Delete your data: you can delete your account and all its content from the Account page at any time. This permanently removes your ideas, writing, areas, images, and settings.
  • Export your data: you can request an export of your data from the Account page, or by emailing us.
  • Rectify your data: you can edit your ideas, writing, and areas within the app.

GDPR

If you are in the European Economic Area, you have additional rights under the GDPR. We process your data to provide the service you asked for (contract), to run features you opt into such as notifications (consent), and to keep the service secure and sustainable (legitimate interest). You can withdraw consent or ask us to access, correct, or erase your data at any time by using the app or emailing us. You may also request restriction of processing, object to processing based on legitimate interests, and request portability where applicable. You have the right to lodge a complaint with your local data protection authority, including the Dutch Autoriteit Persoonsgegevens. We respond within the applicable statutory period, normally one month; if a permitted extension is needed, we explain why.

Children's privacy

Drift is not intended for anyone under the age of 18. We do not knowingly collect data from children. If you believe a child has provided us with their data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. If we make a significant change, we will notify you through the app or by email. Where a change requires new consent, we will ask for it separately.

Business details

Sjoerd Wess, trading as Drift. Eenmanszaak (sole proprietorship).
Izaak Enschedeweg 42-C, 2031 CS Haarlem, Netherlands.
KVK: 70163561. VAT ID: NL002310732B91.
Contact details.

Contact

Questions or requests? Reach out at info@letsdrift.app.