What she reads, and what she keeps.

Only what you connect or turn on. Each one is its own switch, and each can be turned off again.

• Your email and calendar, from the accounts you connect.
• Your messages with her, by text or in the app, and your iMessages on a Mac where you allow it.
• Services you connect, such as GitHub, Notion or Slack, through a sign in on that service or a key you paste.
• Meetings, if you turn on notes. A recorder from Recall.ai joins the call or records it on your Mac, and the transcript comes to her.
• The text of the window in front of you on your Mac, if you turn screen reading on. Password fields and private windows are never read, and it pauses from the menu bar at once.

What she needs to be useful later: your conversation with her, what she remembers about you, what she did and why, and the transcripts and notes from meetings. Mail and calendar are read for the task in front of her and kept no longer than that task needs.

Screen text is kept for 14 days unless you choose a shorter time. Everything she remembers is a card in the app that says where it came from, and you can delete any one of them.

Every password, sign in and key you give her is sealed at rest with AES-256-GCM, bound to your account, so a copy moved anywhere else does not open. A session working for you on her computer never holds your real key; it holds a stand-in that is worthless anywhere else.

Anything that changes something on a connected service, sends in your name or spends money waits on a setting only you control.

To think, she sends the text a task needs to the AI models we use, from Anthropic and Google, under business terms that do not let them train on it. Recall.ai handles meeting recordings when you turn notes on. Text messages travel through the carrier that delivers them.

Nobody else. We do not sell your data, rent it, share it for advertising, or use it to train any model.

Delete one memory, one connection, or everything. Delete everything in Settings removes your memory, history, artifacts and every stored sign in, and it is real deletion, not a flag. Disconnecting a service removes its key or token from us at once.

If you would rather ask, write to [email protected] and we will delete your account and tell you when it is done.

Write to [email protected]. A person reads it. If this page changes in a way that matters, we will tell you before it applies.