Privacy

Draft, pending legal review

What we store

Everything you capture: the words you typed or spoke, any files or photos you added, and the original wording alongside whatever title we generated from it. Plus your email address, your Life Context profile if you write one, and a record of the times you corrected our filing.

What leaves our servers

To decide where something goes, we send it to a hosted AI model provider, along with your Life Context profile. Voice captures are sent to a transcription provider. Both are disclosed as subprocessors. Audio is transcribed and then discarded; we do not keep the recording.

Locked notes, and the limits of the claim

A note you lock is encrypted in your browser with a passphrase we never receive. We store the ciphertext and cannot read it. That means it is never searched, never tagged automatically, and never seen by the AI, because there is nothing readable for any of those to work on.

Two things we can still see on a locked note: its tags and its dates. Those stay in plain text so filtering keeps working. That is a deliberate trade and we would rather state it here than have you discover it.

The rest of your account is encrypted in transit and at rest. That is the protection a service owes you and we hold to it. It is not the same as end-to-end: we hold those keys, because sorting, searching and tagging need something readable to work on. Locked notes are where we give that up on purpose, and there we cannot read a word.

Your data is yours

You can export everything at any time, including after you stop paying. You can delete your account, and deletion is real: your items, notes, tags, Life Context, corrections, and attachments are removed within 30 days, not hidden.

What we do not do

No ads. No selling data. No sponsored tasks. No re-engagement email designed to pull you back in.