Privacy policy

Listening without an account

You can listen to the whole reading without signing in, and nothing about you is collected when you do. The app keeps your place in each book, any moments you keep, and your settings on your own device (in the browser's local storage); none of that leaves your device. Talking with the companion requires signing in, so nothing under "Talking" below applies until you do.

Your account

When you sign in we collect your email address, which is the only thing that identifies you. We use it to send the sign-in link or code, to tell you about your plan (renewals, receipts, changes that matter), and to answer you when you write to us. We don't send marketing email. If you give your address on our website to hear what's new, we keep it for that one email a month at most, with an unsubscribe link in each, and for nothing else. Sign-in is handled by Supabase, and the email is delivered by Resend; neither uses your address for anything else.

With an account, the app mirrors to it what it kept on your device — your place in each book, your kept moments and notes, the threads drawn through them, and your conversation sessions (when, how long, what kind) — so they come back on another device. If you first arrived by a link that names where it was posted (a launch page or a podcast, say), the app keeps that name for ninety days on your device and, when you sign in, records it once with your account so we can tell which places bring listeners; it is the name of a link, not anything about you. The app also keeps a few milestones on your device — the day you first pressed play, first opened the line, first kept a moment, and the days you opened the app — and mirrors those to your account too, so we can see whether the app is working for people; not what you heard, said, or kept. This is stored with Supabase, in the United States, in a database where only you, signed in, can read or write your rows.

Talking

When you open the line, your voice is sent live to ElevenLabs, whose service turns it into text, generates the companion's reply, and speaks it. The passage you were hearing and, when you ask, other passages and your kept moments are sent with it so the companion knows what you're talking about. ElevenLabs processes this to provide the conversation and keeps a record of conversations under our account for a period set by their retention settings, which we keep as short as their service allows; we can review a conversation there to diagnose a problem. We don't use your conversations to train any model. ElevenLabs' handling of what it receives is governed by its own terms and privacy policy.

When the app draws a thread through your kept moments, the text of those moments and the passages they point to is sent to Anthropic's model service to write the thread. Anthropic processes it to return the answer and does not use it to train.

Paying

Payments are handled by Stripe. When you buy a plan, Stripe collects your card details on its own pages and tells us only that you paid, what you bought, and an identifier for you as a Stripe customer, so the app can show your plan. We never see or store your card number. Stripe's own privacy policy governs what Stripe keeps.

What we don't do

We don't sell or rent your information. We don't show advertising and we don't share your information with advertisers or data brokers. We don't track you across other sites or apps. We don't use analytics that identify you; the app keeps a short diagnostic log on your device (the "drive log") that you can see and that is sent nowhere unless you send it to us yourself.

Who else sees it

The services above — Vercel (hosting), Supabase (accounts and data), ElevenLabs (the voice and conversation), Anthropic (threads), Stripe (payments), Resend (email), Cloudflare (delivery of the recordings) — each receive the part of your information needed for their part of the app, under their own terms, and act on our instructions. We may disclose information if the law requires it, or to protect someone from harm. If the app changes hands, your information goes with it under this policy, and you will be told.

Where it lives, how long

Our providers store data in the United States. If you use the app from elsewhere, your information is transferred there. We keep account data while you have an account. Delete a kept moment and it's removed from your device and marked deleted in your account, so it doesn't come back on another device; the record is removed within ninety days. Ask us to delete your account — by writing to hello@outofthecloud.app — and we remove your account, your kept moments, your progress and your sessions within thirty days; conversation records at ElevenLabs expire under their retention setting; Stripe keeps payment records as financial-record law requires.

Your rights

Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it, by writing to hello@outofthecloud.app. We'll answer within thirty days. If you're in the European Economic Area, the United Kingdom or California, the law gives you these rights by name and the right to complain to a regulator; the rest of this policy is the same for you as for everyone else, because we don't do anything with your information that would need an exception.

Children

The app is not directed at children under 13 (or under 16 where local law sets that age) and we don't knowingly collect information from them. If you believe a child has created an account, write to hello@outofthecloud.app and we'll remove it.

Changes

If this policy changes in a way that matters, we'll say so in the app or by email before it takes effect. The date at the top is the current version.

Contact

hello@outofthecloud.app. Valor Design Collaborative, LLC.