Your intentions are stored encrypted at rest. Only the live app, briefly in memory, ever sees them as plaintext — long enough to compose your morning email.
Your email address is encrypted at rest too. I look you up by a one-way keyed hash, so a database leak alone wouldn't expose who's using First Thing.
Email itself isn't end-to-end private — no email-based product can be. I use Resend to receive and send mail. They handle messages in transit and retain logs for delivery and debugging per their own policy.
I don't read your intentions. I don't share them. I don't train AI on them. I don't use them for anything beyond sending you your morning email.
If you unsubscribe (any "Unsubscribe" link in my emails), your row stops being processed. If you want everything deleted entirely, reply to any First Thing email with the word DELETE in the body and I'll remove your data immediately — you'll get a confirmation email back.