What we store and what we don't

Your email address and password credential, held by the authentication service. One workspace record containing a single JSON document: your focal points, captures, actions, projects, records and reviews, plus a version number and a last-updated timestamp.

Your sidebar preference is stored in your own browser, not on the server.

Only you. Access is enforced by row-level security in the database, keyed to your authenticated user id — not merely hidden in the interface. Server code that reads your workspace acts as you, with the same restriction applied.

Your workspace is not used to train models. No AI process reads your life data on its own schedule. There is no sharing, no team access, no public boards, and no advertising identifiers.

Capture has a Draft with AI button, and only when the workspace has been configured with a Poe key. It does not exist otherwise. When you press it for one item, that item's text, the names of your focal points and open projects, and today's date are sent to Poe to suggest how to sort it. Nothing else leaves — no other captures, no tasks, no reviews.

The answer is a draft. It prefills a form you can change or throw away; the record is only created when you press Create, Reference, or Archive yourself. Every ask, and what you did with it, is listed under Audit. It never runs on a schedule, never runs on more than one item, and never writes to your workspace.

My Data downloads your whole workspace document as JSON at any time. It is the same document the app reads — not a summary or an export subset.

The same page restores a downloaded file. The file is checked first and you see what it would replace before anything is written; a malformed file is refused outright rather than partly imported.

You can erase every record while keeping your sign-in, or delete the account entirely. Both ask you to type a confirmation, both are immediate, and neither can be undone by us — there is no retained copy to restore from once you have chosen to delete.

If what is stored or who can read it ever changes, this page changes with it, and the change is described in the same plain language.