Privacy

What it stores

• Your account: the email address you signed up with, your name, and your password stored only as a hash. Nobody, including us, can read your password.
• Your conversations with Alice, so the thread is there when you come back.
• Files you attach, in two pieces. The readable text she extracted stays with the thread. The original file is kept privately in the database, in the same room as the conversation, so you can download that same file later. If the original could not be stored, she does not invent one. A download then says the original is not kept.
• Memories, which are short facts Alice keeps about you. She saves one when you ask her to. Anything she proposes on her own waits for you to approve it before it becomes active, and you can delete any memory at any time.
• Connector tokens, encrypted with AES-256-GCM before they touch the database. The key lives in the server environment, never in the database beside them.
• Data from the services you connect, held so Alice can answer your questions about it. Today that is JobTread, Chief 21, and if you connect it, Gmail, Calendar and Contacts. Gmail stays read-only unless you separately approve the send permission.

Files you attach

When you attach a file, the chip says the original is kept privately in this room when it can be stored. If it cannot, it says so. Alice does not invent a missing original, and a download is offered only when the original was actually kept.

The original is the exact file you uploaded, not a reconstruction. Removing it from the composer before you send deletes that original. On a sent message you can delete the original too. That does not erase the extracted text already in the thread. If the delete fails, the original stays and you can try again.

Older uploads, from before originals were kept, have no file to download. Alice will not make a substitute.

Your two rooms stay separate

Personal and work are sealed from each other by the database itself, not by a prompt. Your personal memories and personal mail are never visible from the work room. In a work room, your own mailbox is yours alone; other members of the same organisation cannot read it. A retained file can be downloaded only from the room it was uploaded in.

Google data

The normal Google connection asks for read-only Gmail, Calendar and Contacts access. If you choose to send through Gmail, Alice shows a separate reconnect step for Gmail send permission. Every message still requires a visible review and a separate approval; changing the draft or files invalidates that review. She never changes your calendar or edits your contacts.

Alice's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. That data is used only to provide features you asked for. It is not sold, not transferred to anyone else except as needed to run the service or where the law requires it, and not used for advertising.

What it never does

Your data is never sold. It is never used to train any AI model, ours or anyone else's. It is not shared with other users and it is not used for advertising or profiling.

Alice answers using AI models run by Google, OpenAI and Anthropic. To answer a question she sends the relevant part of the conversation to one of them under an API agreement that does not permit training on it. Nothing is sent unless you ask her something.

How to stop it

• Disconnect a service in Settings. The stored token is deleted and the data pulled from it is removed from the room.
• You can also revoke Google access directly at myaccount.google.com/permissions.
• Delete any memory or conversation from inside Alice whenever you want.
• Remove a file you have not sent yet, or delete the original on a sent message. The extracted text stays in the thread. If the delete fails, the original stays so you can try again.
• To have your whole account and everything in it deleted, email info@try4anile.com. It will be done within seven days and it cannot be undone.

Where it lives

Alice runs on Railway in the United States. Everything travels over HTTPS. Data is kept while your account exists and is deleted when you ask for it to be. There are backups, so a deletion can take a few days to work its way out of those. Original files are stored in the database with their room ownership. Deleting an original removes its live bytes; database backups follow the backup retention period.

Changes

If this page changes in a way that matters, everyone using Alice will be told directly. There are few enough of you that this is a message, not a banner.