Last updated November 10, 2026
Den is run by Den Incorporated. It keeps your thoughts and shares them with the people you pick. This is what we collect, who handles it, how long we keep it, and what you can do about it.
Your phone number or email, your name and handle, and your time zone.
What you save: your words, the exact words before any clean-up, files, every earlier version of a thought, and who each thought is for.
Who you're connected with, and when a thought reached someone.
If you turn on Face ID or a passkey, the public key your device makes for it. Your face and the private key never leave your device.
In the app, the photos you choose to add, and on an iPhone the address Apple gives your phone for notifications. If you connect Gmail or X, your address there and the keys to act for you.
Thoughts you report and people you block, so we can act on the report and keep them hidden from you.
On the website we record pages, clicks and session replays. A replay rebuilds the screen during a visit as you saw it: the words on the page, yours and other people's that were shown to you, what you typed and what you tapped. Our team watches replays to see where sign-up or the site is broken or confusing.
Off-the-record thoughts and sign-in codes aren't drawn in a replay at all. Replays are kept for 30 days. PostHog handles them for us and sets a cookie to tell one visit from the next.
The app isn't replayed, but we do count what happens in it.
Our web server logs each request for 7 days to keep the site running: your IP address, your browser, the page and the time.
When Claude, ChatGPT or another assistant calls Den, we keep a log of each call for 30 days to fix problems: which tool, how long it took, and any error, with what it sent but without phone numbers, emails, keys or off-the-record words. Your assistant can also send us a bug report, which includes recent calls.
The people you share them with, and anyone signed in if you make a thought public. Off-the-record thoughts are yours alone. Any assistant you connect can read and write what you can.
Our team can reach stored data when running or fixing the service.
Amazon Web Services stores your data and sends email. Twilio sends and receives texts and calls. Apple delivers notifications. PostHog handles analytics and replays.
ElevenLabs, OpenAI and OpenRouter (which may use Google's Gemini or Anthropic's Claude) transcribe voice notes and calls, read photos, and work out things like dates from what you say.
We don't sell your information or use it for advertising.
If you connect Gmail, we can only send email as you, when you ask. We can't read your mail. If you connect X, we post or send messages when you ask.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Your account and what you save are kept until you delete them, or ask us to.
Replays and the log of assistant calls are kept for 30 days, and web server logs for 7.
We back up the database so nothing is lost if a server fails. A copy of something you deleted can stay in a backup after it's gone from Den.
Mark a thought off the record, change who it's for, or delete it. A deleted thought goes to the trash where you can restore it, and deleting it for good removes every version.
Delete your whole account in the app, or write to us and we'll do it. Write to us for a copy of your data too.
Reply STOP to any text to stop them.
Den isn't for anyone under 13.
If this changes, the date above will too. Questions: invites@denhere.com