ForeThought Privacy Policy

Your documents, what you type, what the AI assistant generates, its short- and long-term memory, and the local search index are all stored on your device only. ForeThought has no account system and no sign-in. We do not collect usage data, analytics, or crash reports. There is no cloud AI: inference runs entirely on your machine.

Apart from these five, the application makes no network connection at all, exactly as disclosed in the in-app terms you accept before first use.

1. Opt-in web search. Off by default. Asks your permission every single time.

2. Update check. Asks our release server whether a newer version exists, downloads one only if you choose to, no account, no licence key. Switchable off entirely in Settings.

3. AI model download. If you choose to download a language model, the bytes come from Hugging Face, a third party we do not control. Only when you start it.

4. Mail account access. If you set up a mail account, ForeThought connects directly to your mail provider's own IMAP and SMTP servers, the way any mail application does, plus an autoconfiguration lookup that carries only your email address or its domain, never your password.

5. Mailbox migration. If you choose to migrate mail from a previous provider into a new account, ForeThought additionally connects, read-only, to that previous provider's IMAP servers, and writes the copied messages into the new account (JMAP, over HTTPS, for a FalconMail destination). The previous account is never modified or deleted, only read.

Licensing is not one of these exceptions: your licence and its activation are verified entirely offline and never contact any server, using our own hybrid Ed25519 + ML-DSA-65 signature scheme.

Because ForeThought is sold with a licence tied to your organisation, when you purchase or activate a licence we hold, on our own systems, the minimum needed to issue and support it: your organisation's name, a contact email, and the licence's commercial registration reference. This is the one place ForeThought-related personal data exists off your device. We do not sell it, and we do not use it for anything except issuing, renewing, and supporting your licence.

Where processing is not necessary to provide the product or service you requested, we rely on your explicit, opt-in consent. Under Law No. 13 of 2016, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of data we are not otherwise required to keep, and withdraw consent at any time, which for ForeThought simply means turning off the relevant feature in Settings, or not using it. To exercise any of these, contact info@louis-innovations.com.

The AI assistant's local cache is encrypted at rest. Licence signatures use a hybrid classical/post-quantum scheme (Ed25519 + ML-DSA-65) so a licence cannot be forged even by a future quantum computer, and the signing key that could forge one is never present in the shipped application. The application's own network access is default-deny, limited to exactly the five disclosed cases above, and independently verified by an automated build gate before every release.

ForeThought is developed and sold from Qatar, and Qatar's PDPPL is the controlling law for the personal data described above. For users outside Qatar, we apply the same practices, data minimisation, purpose limitation, and no undisclosed processing, regardless of jurisdiction.

ForeThought is a productivity application for businesses and professionals and is not directed at children. We do not knowingly collect personal data from children.

If we change what data ForeThought's five network exceptions cover, we update both this policy and the in-app terms, the same way we would for any other material change to what the product does.

This policy is governed by the laws of the State of Qatar.