Design goal: minimise data; prefer on‑device processing.
- Signals: by default we process and store only coherence deltas (aggregated states), not raw biometrics.
- Retention: configurable; default 30 days for logs; 7 days for analytics; you may set lower.
- Control: users can request deletion of logs associated with their keys.
- Third parties: no sale of data; subprocessors listed in the Service terms when applicable.
- Children: do not process children’s data without explicit approval and guardian consent.