Privacy Policy

Draft · Last updated November 8, 2026

What we collect

• Account data: your email address, display name, a salted password hash (never the password itself), plan and preferences. If you sign in with Google, we receive your verified email address from Google.
• Your content: conversations, uploaded files, projects, artifacts, schedules and share links you create.
• Usage and cost records: which models were called, token counts and cost, used to show you transparent costs and enforce plan limits.
• Billing: handled by Stripe. We store your Stripe customer and subscription IDs, not your card number.

How we use it

Only to provide and secure the service: running your requests, showing progress and cost, enforcing limits, billing, sending account emails (such as password reset), and preventing abuse. We do not sell your data and do not use it for advertising. We do not train models on your content.

Memory

Memory is on by default, except for people whose device indicates they are in the European Economic Area, the UK or Switzerland: there it stays off until you choose to turn it on (consent), and you can withdraw that consent at any time. After each message, a low-cost AI model checks whether you shared lasting background or preferences about yourself or your work (for example your industry, product, target market or preferred style) and saves short notes, which are then added to future answers in your account only. It is instructed not to save sensitive information (such as health, religion, political views, precise address, ID or account numbers, passwords) unless you explicitly ask it to remember. You can view, edit, delete or clear these notes, or turn memory off, at any time in Settings → Memory; turning it off stops both saving and using memories. Voice calls also send your audio directly to OpenAI to produce spoken replies; the voice you hear is AI-generated.

Who receives it

• AI model providers (for example Anthropic, OpenAI, xAI, Google, DeepSeek) receive the prompts, context and files needed for each request, through their commercial APIs, under their own data policies.
• Web search: when an answer needs current information, a short search query derived from your message is sent to Tavily (our web search provider). Search results are used only to write that answer and are not stored; we keep only the titles and links shown to you as sources.
• Infrastructure: hosting (Render) and database (Neon), in the United States.
• Payments: Dodo Payments, our reseller and Merchant of Record (or Stripe, if the checkout page says so); we never see your full card number. Email: Resend. Sign-in: Google, if you choose it.
• Authorities, where required by law.

Legal bases (EEA, UK and Switzerland)

• Contract: running your requests, your account, projects, files, reminders and billing.
• Consent: memory (for people in these regions it stays off until you turn it on) and optional browser notifications. You can withdraw consent at any time; this does not affect processing before withdrawal.
• Legitimate interests: keeping the service secure, preventing abuse (for example fake invite accounts) and fixing errors.
• Legal obligation: tax and accounting records kept by our payment reseller.

International transfers

We and our providers process data in the United States. Where the law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework, as offered by each provider.

Cookies

We use one essential cookie to keep you signed in, plus a short-lived cookie during Google sign-in. No advertising or third-party tracking cookies.

Retention

We keep your data while your account is active. When you delete your account, your account and content are removed from our active database right away; they may remain in backups for a limited period. Specifically: chats, projects, files, memories and reminders — until you delete them or your account; usage and billing records — as long as needed for billing and as required by law; raw web search results — not stored (only titles and links shown as sources); call audio — not stored by us (only the text transcript, saved to your chat).

Your choices and rights

• Download a copy of your data: Settings → Privacy → Export my data.
• Delete your account and data: Settings → Privacy → Delete account.
• Depending on where you live (for example the EU/UK under GDPR, or California under CCPA), you may have further rights to access, correct, restrict or object to processing. Contact us to use them.

Security

Connections are encrypted (HTTPS), passwords are hashed with PBKDF2, and API keys are kept in server-side environment variables, never in the browser.

Children

The service is not intended for anyone under 18.

Contact

the contact address shown in the app