Privacy
A baseline text for a private installation. A commercial launch needs operator details and legal review.
What is sent
Questions and answers go to the model provider and the content-checking service when cloud AI is on, after detected identifiers are removed. Those services may keep and process data under their terms. Demo mode sends nothing to a provider.
Children
Activity sharing is off by default. When on, a child sees a notice, and a change requires signing in again. We collect an alias and an age group, not a date of birth.
Adults
An adult profile shares no activity with the account manager. History is kept only if turned on.
Retention
Activity events up to 7 days, reports up to 30 days, saved conversations up to 30 days, filtering decisions without content up to 30 days, audit log up to 180 days, encrypted backups up to 30 days. Content is encrypted on the server and the operator holds the key.
Deletion and export
You can delete history, a profile or an account, and export data. Deleting an account removes the workspace files from the active service.
What we do not do
The system does not monitor other apps, the screen, location or the microphone, and sends parents no automatic alerts about conversation content.