Privacy policy
Last updated: October 6, 2026. This policy covers the AMBITIONS connector (the AMBITIONS practice) at https://mcp.buildambition.com, operated by TINKERTOWN LLC, 2028 E Ben White Blvd Ste 240-3218, Austin, TX 78741 ("we").
The short version
- AMBITIONS stores what you or your AI choose to save: ambitions, logs, rituals, your Chief Aim. Nothing else.
- We never read your chat history or AI memory. Your AI sends only the specific item it is saving, after you ask or agree.
- We don't sell or share your data, show ads, or use it to train AI models.
- AMBITIONS makes no AI calls of its own and generates no audio, images or video.
- You can delete everything at any time: tell your AI "delete my AMBITIONS data", or email us.
What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address, sign-in provider, an internal user id | Sign-in, linking your AI apps to the same account |
| Ambitions and Chief Aim | Titles, why, obstacles, numeric targets (e.g. income goals), "ladders up" links | The core service |
| Logs | Actions, numbers, wins, temporary defeats, off-track notes, leak-check answers (shadow or distraction) | MOMENTUM, alignment and leak insights |
| Reflections | Morning Map and Evening Set answers, dreams and Golden Threads, limiting beliefs and truer lines, "I am" statements, three feeling words | The practice and your weekly review |
| Visualization requests | Length, bedtime or daytime, which ambition | Building the script brief your AI writes |
| Connection data | Which AI app is connected (OAuth client), hashed tokens, timestamps | Security and keeping you signed in |
| Technical logs | IP address, request time, errors (kept briefly by our host) | Security, abuse prevention, debugging |
We do not collect voice recordings. If you use your AI app's voice mode, that audio is handled by the AI app under its own policy, not by AMBITIONS. Future voice features (for example "Future You" tracks in your own voice) will live on buildambition.com with separate, explicit consent.
Consumer health data (Washington and similar laws)
Some reflections, like feeling words, limiting beliefs and dreams, could count as "consumer health data" under Washington's My Health My Data Act (and similar laws in Nevada and Connecticut). We collect them only to provide the practice you asked for, only with your consent, and we never sell them. You can see, export or delete them at any time, and withdraw consent by deleting your data. AMBITIONS is not a medical or mental-health service and does not infer health conditions.
Who processes it
Hosting and storage: Vercel (including Vercel Blob for your saved data), US East. Email sign-in codes: Resend. They act as our service providers under contract. Your AI app (Claude, ChatGPT, Gemini, Grok, Perplexity, or others) receives tool results when it calls AMBITIONS; its own privacy policy covers what it does with them.
How long we keep it
Until you delete it or close your account. "Delete my data" removes your records immediately from the live database. Backups roll off within 30 days. Sign-in tokens expire on their own (access 1 hour, refresh 30 days).
Your rights
Access, correct, export, delete, and withdraw consent. Email hello@tinkertown.co. We'll answer within 30 days (45 where the law allows). We won't treat you differently for using these rights.
Children
AMBITIONS is not for children under 13.
Security
TLS everywhere, hashed tokens, per-user data separation, least-privilege access. Report issues to hello@tinkertown.co.
Contact
TINKERTOWN LLC, 2028 E Ben White Blvd Ste 240-3218, Austin, TX 78741. hello@tinkertown.co.