PRIVACY

Privacy Policy

Last updated 27 September 2026Version 2026-09-27

This Privacy Policy explains how GETRYK, the business in Israel that operates Thumb (“GETRYK”, “we”, “us”), handles personal data when you visit thumb.run, join the early-access list, use your account, dashboard, API keys and Phone, or write to us. It takes effect on 27 September 2026. Words with capitals, like Phone and Agent, mean what our Terms of Service define them to mean.

Thumb gives AI agents real Android phones. A phone signed in to your apps is personal, so we keep as little as we can, and this page says exactly what that is.

THE SHORT VERSION

We keep your email, account details, hashed keys and sessions, and a 30-day record of what ran on your Phone, including the app opened or the domain name of a link, but never typed text, screenshots or full links.
Screens, typed text and full links pass through Thumb in memory only. What's on your Phone stays on the Phone until it is factory reset.
We use activity metadata to prevent abuse. We don't watch your screen, and we access Phones only for maintenance, security and legal reasons, or when you ask.
Our service providers are OVH (France), and Resend, Google and Namecheap (United States). We don't sell data or use it for advertising.
You can see, correct or delete your data: delete your account in the dashboard, or write to hello@thumb.run. A few records stay for a while after that, such as what you agreed to (section 9).

This summary helps you find your way. The full policy is below.

1. Who is responsible for your data

GETRYK is the controller of the personal data this policy describes. For anything about your data, write to hello@thumb.run. For personal data that your Agent handles on your Phone, you are the controller and we act for you (section 15).

2. What we collect, why, and for how long

What	Why	How long
Your email address, account status (pending, active or suspended), and when you signed up and were approved	To run your account and contact you about it	Until your account is deleted. An account waiting for approval is kept until you or we delete it.
Your company or project, your confirmation that you're 18 or older and use Thumb for business or professional purposes, and each version of our Terms, Acceptable Use Policy and this policy that you accepted, when, and a fingerprint (SHA-256) of their exact text	To know who we work with, and to be able to show what you agreed to	While your account exists, and for 7 years after it is deleted, so that we can show what was agreed if a legal claim arises. After deletion we keep only your email address, your company or project, your confirmations, and which versions you accepted and when.
Your early-access entry: email, the use case you wrote (optional), when you joined, and your consent to early-access emails	To decide who gets access, and to contact you about it	Until you ask us to remove it, or you delete your account
API keys: a SHA-256 hash, the first few characters, the name you gave the key, and when it was created, last used and revoked	To check keys without keeping them, and to show them in the dashboard	Until your account is deleted, including keys you revoked
Sign-in links: a hash of each link, and the address it was sent to	To send you a one-time sign-in link	Usable for 15 minutes; deleted within about an hour after it expires
Sign-in sessions, stored as hashes	To keep you signed in	30 days, or until you sign out or your account is suspended
Your Phone and your requests for one: which Phone is assigned to you and when, its model, Android version, status (including whether we have made it temporarily unavailable, and our note of why) and the number of its SIM card, if it has one; when you asked for a Phone; a record of which account had which Phone and number, and when; and a record of each time we accessed the Phone and why	To provide your Phone and keep it running and safe, and to answer abuse reports, legal claims and lawful requests about it	The current assignment until the Phone is returned, and your requests until your account is deleted. The record of which account had which Phone and number, and when, for 7 years after the Phone is returned, to answer abuse reports, legal claims and lawful requests; the record of our access, for 7 years. A note of why a Phone was made temporarily unavailable stays until we lift it, which can be after the Phone is returned if it is under a legal hold.
The activity record: for each tool call on your Phone, the tool, whether it worked, whether you or your Agent ran it, which API key was used, how long it took and when. For opening an app, the app's package name (like `com.example.app`); for opening a link, the link's full domain name only (like `mail.example.com`, or an IP address), never its path, query or anything typed.	To show your recent activity, investigate problems, and detect and prevent abuse	30 days (a daily cleanup deletes older records)
Installed apps: the package names of third-party apps installed on your Phone, and when each was first and last seen	To detect and prevent abuse, such as apps made for spam or surveillance	While the Phone is assigned to you; deleted when it is returned. If the Phone reports the list again before its factory reset, that copy is deleted once the reset Phone reports its own list.
A sending log: for each sign-in link we send, a one-way hash of the address (ignoring any +tag, and dots in Gmail addresses), the kind of email and the time. Anyone who already knows an address could match it, so we treat it as personal data.	To enforce sending limits, so that sign-in email can't be used to flood an inbox	About 48 hours
Abuse reports about your use of Thumb, from people, carriers or other services, and our investigation record: what was reported, the activity metadata we checked and kept, and what we decided	To investigate and stop abuse, and to establish or defend legal claims	Until the matter is closed, and after that only as long as a legal claim about it could still be brought
Emails you send to hello@thumb.run or abuse@thumb.run, and our replies	To answer you and handle reports	As long as we need them to handle the matter (section 8)
Visit counts, only if you allow them on the home page: the page, the site you came from, and a visitor hash made from your IP address, your browser's details, a secret value and the date. It changes every day and can't be turned back into your IP address without the secret.	To learn how people find Thumb	Visitor hashes 90 days. Daily totals (page, referring site and number of visits) contain no personal data.
Your IP address	To apply rate limits and block abuse	Held in memory only, until the service restarts, which it does with every update. Never written to our database or logs.

The activity record never contains typed text, full links, coordinates, screenshots or what's on your screen.

3. What passes through but isn't stored

To do its job, Thumb carries these between your Agent (or you) and your Phone. They pass through our systems in memory only, and are never written to our database, to disk or to logs:

screenshots and live-view frames (the dashboard's live view keeps the latest frame in memory for about a second, so that several requests can share one capture);
text typed on the Phone, including passwords you type yourself when you take control;
the full links the Phone opens (only the domain name goes into the activity record), the list of on-screen elements, the list of installed apps and the device details your Agent asks for, and other tool results.

Reading the on-screen elements briefly writes a file on the Phone itself, which is deleted as soon as it has been read (if the reading is interrupted, at the next reading or the factory reset). Your Agent's model provider receives whatever your Agent reads from the Phone, under your agreement with that provider.

4. What's on your phone

The apps you or your Agent install, and the accounts you sign in to with their data, live on the Phone itself, as on any phone. Thumb doesn't copy them off the Phone. The Phones are in our physical custody, in Israel.

After a Phone is returned (by you, because your account was deleted, or because your access ended), we factory reset it by hand before anyone else can use it, and Thumb won't assign it to anyone until it is recorded as reset. A reset erases the apps, accounts and data on the Phone, but no method can guarantee that every trace is gone. While an account is suspended, its Phone stays assigned with its contents. We may delay a reset where the law requires it, under a legal hold, or while we investigate serious abuse (Terms, section 13).

5. Why we're allowed to use it

To provide Thumb under our contract with you: your account, sign-in and sessions, API keys, your Phone, carrying screens and actions between your Agent and your Phone, the emails about your account, and the record of what you accepted.
Our legitimate interests in keeping Thumb, our customers, our network and our numbers safe, preventing abuse, fixing problems and being able to establish or defend legal claims: the activity record, the installed-apps list, alerts about unusual activity, blocked links, rate limits, the sending log, abuse reports and our investigation records, the record of which account had which Phone and number and of our access to Phones, the record of what you accepted once your account is deleted, backups and logs. We keep this to metadata and don't watch your screen for it; section 11 says when we may access a Phone. You can object (section 13).
Your consent: early-access emails, and visit counts on the home page. You can withdraw it at any time.
Legal obligations: answering lawful requests from authorities, and keeping the records the law requires.

6. Who receives personal data

Recipient	What they do	What they handle	Where
OVH SAS	Hosts the server that runs thumb.run and api.thumb.run	Everything Thumb stores, including backups, and the traffic that passes through	France (EU)
Resend	Sends Thumb's email	Recipient addresses and email content: sign-in links, account and Phone updates, receipts for the terms you accepted, and our internal notifications, which can include your email address, your use case and activity alerts. Resend keeps them for about 30 days.	United States
Google (Gmail)	Provides our email inbox	Emails you send to hello@thumb.run or abuse@thumb.run, and our internal notifications about sign-ups, Phone requests, new apps on Phones and unusual activity, which can include your email address, your use case and your Phone's id	United States
Namecheap	Runs our domain's DNS and forwards our email addresses	Emails you send to hello@thumb.run or abuse@thumb.run, on their way to our inbox	United States

Personal data may also go to:

your Agent's model provider, which you choose, and which receives whatever your Agent reads from your Phone;
a mobile carrier, once cellular service is on your Phone: it handles the Phone's calls, SMS and mobile data, and keeps records about the SIM and number, under its own terms and the law;
authorities, when the law requires it, or to prevent imminent harm (Terms, section 12);
carriers and services affected by abuse, to protect Thumb, our network or our numbers from serious abuse: account details and activity metadata only, never a Phone's contents (Terms, section 12);
professional advisers, such as lawyers and accountants, under confidentiality, when needed;
a successor, if the Thumb business is sold, merged or transferred, who must keep protecting your data as this policy says.

We don't sell or rent personal data, don't share it for advertising, and don't use your Phone's content to train AI models.

7. International transfers

GETRYK is in Israel, and so are the Phones. Our server is in France. Resend, Google and Namecheap are in the United States. The European Commission recognises Israel as providing adequate protection for personal data. When personal data goes to these providers in the United States, we rely on the safeguards they offer for such transfers, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework (Resend uses both).

8. Backups, emails and logs

Backups. We back up the database once a day, on the same server. Each backup is deleted automatically at the first daily cleanup after it is 7 days old, so no backup is kept longer than about 8 days, except a copy kept under a legal hold (below). Copies we make by hand during maintenance are deleted when the work is done.
Emails at Resend are kept for about 30 days.
Our inbox. Our notifications, and emails you exchange with us, stay in our inbox until we delete them. When you ask us to delete your data, we delete the ones about you, unless we need them to handle a legal claim or an abuse report.
Logs. Our systems log events such as which tool ran on which Phone, whether it worked and how long it took, and errors by type. Logs never contain typed text, full links, screenshots or your email address, and our web server keeps no access logs. The log of what ran on the Phones is kept for up to 30 days; our server's other logs are overwritten as they fill up, and cleared whenever we update Thumb.
Legal holds. Where the law requires it, to establish or defend legal claims, or while we investigate abuse, we may keep specific data for longer, together with a copy of a backup that contains it; we delete these when the reason ends.

9. When you delete your account

Delete your account in the dashboard. This immediately deletes your account, API keys, sessions, sign-in links, Phone requests, early-access entry and the sending-log entries for your address, and returns your Phone, which also deletes its installed-apps list. If your account is suspended, or a Phone on your account is under an abuse review or a legal hold, the dashboard can't delete it: write to hello@thumb.run, and we delete your account when that ends (section 8). Some things remain for a while:

your activity records, without any link to your account, until they are 30 days old;
a record of the terms you accepted (your email address, your company or project, your confirmations, and which versions you accepted and when), for 7 years;
the record of which Phone and number your account had, and when, for 7 years after the Phone was returned, and of our access to it, for 7 years;
abuse reports about your use of Thumb and our investigation records, until the matter is closed and a legal claim about it can no longer be brought;
backups, until they are deleted (within about 8 days), unless a copy is kept under a legal hold (section 8);
logs, until they are overwritten or cleared (the log of what ran on the Phones, up to 30 days);
copies of emails at Resend (about 30 days) and in our inbox (until we delete them: write to hello@thumb.run and we will);
what's on your Phone, until it is factory reset;
visitor hashes, which aren't linked to your account, until they are 90 days old;
rate-limit entries in memory, until the service restarts;
emails already in your own inbox.

10. Monitoring for safety

We use the activity record and the installed-apps list to detect and prevent abuse. We may be alerted automatically about unusual activity, such as a new app on a Phone or an unusual number of actions, and a person then reviews it. We don't watch your screen, typed text or full links to detect abuse; section 11 says when we may access a Phone.
We block links to certain domains; your Agent gets a message instead, and nothing happens on the Phone.
Rate limits and blocked links apply automatically. Making a Phone temporarily unavailable (every call to it is refused, and we put it in airplane mode with Wi-Fi off), suspending an account or ending access is decided by a person. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

11. Our access to phones

The Phones are in our physical custody. Thumb's live view and screenshots show your Phone's screen only to your account. We don't watch your screen. We access a Phone, and may see what is on it, only for maintenance and repair, to investigate or respond to a security incident or suspected abuse, to comply with the law, or to help you when you ask. We limit that access to what the purpose needs, and we keep a record of when and why (Terms, section 10).

12. Security

API keys, sessions and sign-in links are stored only as hashes, never as the secrets themselves.
Connections to thumb.run and api.thumb.run use HTTPS, with strict security headers and no third-party scripts.
Every call is checked against your account right before it reaches your Phone.
Your Agent can use only Thumb's 13 fixed tools on your Phone. Thumb doesn't open any way into your Phone from the internet, and it gives no one, including you and your Agent, shell or file access to your Phone over the internet. Besides the tools, Thumb itself only checks which Phone it is connected to (its serial number, model and Android version), reads the list of installed apps (section 2), and, while a Phone is temporarily unavailable, puts it in airplane mode with Wi-Fi off and checks that it stays that way (section 10). Phones have Android's developer options turned on so that we can run and maintain them; our own access is limited as section 11 describes.
Phones have no screen lock, so that Thumb can operate them: anyone holding one could use what is signed in on it. They are in our physical custody, and we recommend signing in only to accounts dedicated to your Agent's work.
Rate limits protect sign-in and the APIs, and only GETRYK has administrative access to our server and database.

No system is perfectly secure, so we can't promise that your data will never be affected by a breach. Sign-in works through your email, so keep that email account secure. If a breach affects your personal data, we will tell you, and the authorities where the law requires, without undue delay. To report a security problem, email hello@thumb.run. More detail is in the security section of the docs.

13. Your rights

You can ask to see the personal data we hold about you and get a copy, to correct it, and to delete it. Israel's Protection of Privacy Law, 5741-1981, gives you these rights (sections 13 and 14), and so does the GDPR if it applies to you.
Where the GDPR applies, you can also object to our use of your data based on legitimate interests, ask us to restrict it, and receive the data you gave us in a portable form.
You can withdraw consent at any time: for visit counts, with Cookie preferences at the bottom of the home page; for early-access emails, by writing to us.
You can do much of this yourself in the dashboard: revoke keys and return your Phone while your account is active, or delete your account (section 9). For anything else, email hello@thumb.run from your account's address. We will answer within 30 days, and we may ask you to confirm that it is you.
You can complain to Israel's Privacy Protection Authority or, in the EU, to the data protection authority where you live or work. We would appreciate the chance to put things right first.

14. What you have to give us

No law requires you to give us personal data. We need your email address to sign you in or add you to the early-access list, and your company or project and your confirmations to let you use Thumb: without them we can't provide it. Your use case is optional, and visit counts are off unless you allow them.

15. Personal data your agent handles

When your Agent uses your Phone, it may see and handle other people's personal data, such as messages, contacts and whatever is on screen. For that data, you (or your own customer) are the controller, and GETRYK is your processor while it passes through Thumb. You are responsible for having a lawful basis and giving any notices the law requires. Section 14 of the Terms sets out our commitments.

16. Cookies and browser storage

Signing in sets one cookie that keeps you signed in. It is strictly necessary, can't be read by scripts, and expires after 30 days or when you sign out.
The home page remembers your visit-count choice in your browser's local storage until you clear it. Change it with Cookie preferences at the bottom of the home page.
The dashboard keeps a newly created API key only in the page's memory, never in browser storage.
No advertising cookies, trackers or third-party scripts.

17. Children

Thumb is only for people aged 18 or over. We don't knowingly collect personal data from anyone younger, and if we learn that we have, we delete it.

18. Changes to this policy

We update this policy as Thumb changes. The version and date at the top tell you which one applies. For a material change, we will email you at least 30 days before it takes effect and ask you to accept the new version in the dashboard, as section 22 of the Terms describes.

19. Contact

GETRYK, Israel.

Privacy questions and requests: hello@thumb.run
Reports of abuse: abuse@thumb.run

See also the Terms of Service, the Acceptable Use Policy and the docs.