Secure AI

Privacy Policy

What Secure AI collects, and what it does not.

Effective October 10, 2026

This policy explains what personal data Secure AI ("we", "us", or "our") collects when you use secureai.one, our apps and our API (together, the "Services"), what we do with it, and the choices you have. Your rights are in Section 5.

In short: AI companies never learn who you are, and we remove private details from your messages before they are sent. Nothing you write is used to train AI. We never sell your data or use your conversations for ads. What you save is stored encrypted, and you can delete it at any time.

1. Collection of Personal Data

We collect the following categories of personal data:

Personal data you provide to us directly

Identity and Contact Data

When you sign in with Google, Apple or Microsoft, we receive your name and email address. When you sign in with a link sent to your email, we receive only your email address, which we use to send you that link. We also create an internal ID for your account. You can use the Services as a guest without giving us either.

Payment Information

If you buy a subscription, your card details go to our payment processor, Stripe, or to Apple or Google if you pay through their stores. We never see or store your card number. We keep your plan, its status, and a reference to your payment account.

Inputs and Outputs

The messages, files and images you send ("Inputs") go to an AI provider, which writes a response ("Outputs"). If you include personal data in an Input, we receive it, and it may appear in the Output.

Inputs reach AI providers through our servers, under our own account with them. Your name, email address and account ID are never attached, so the provider cannot link the conversation to you.

We also remove private details from the text of a message before it is sent. Names, email addresses, phone numbers, card numbers, bank account numbers, national ID numbers, postal codes and street addresses are swapped for stand-ins, and your real details are put back in the Output you read. The list that matches each stand-in to the real detail is sent back to your device and not stored on our servers. This detection is not perfect. It does not cover employers, job titles or cities, and it cannot catch details that point to you without naming you. Please leave out anything you would not want an AI provider to see.

For photos, the location, device and time stored inside the file are removed on your device before upload. Faces you mark (or, on iPhone, faces the app finds for you) are covered over in the image before it is sent. The words in a photo are read on your device, and the private details found in them are covered over in the image too. To find names, which only our name model can, those words (never the picture) are sent to our servers, or to our secure enclave where it is in use, and are not stored. The picture itself is then sent to the AI provider with those details covered.

You are responsible for having the right to share anything you send.

Feedback

If you rate a response, we count the rating, the reason you pick, and the kind of response. This count is not linked to your account and contains nothing from your conversation.

After rating a response as bad, you can choose to send us that question and answer. We only receive it if you press the button to send it. Your private details stay swapped out, it is not linked to your account, and it is deleted after 30 days. This is never offered for Ultra's sealed messages.

Communication Information

If you contact us, we keep your name, contact details and what you wrote to us.

Personal data we receive automatically from your use of the Services

When you use the Services, we automatically receive some technical data, including:

Device and Connection Information: Your device type, operating system, browser, IP address (including approximate location derived from your IP), mobile network, time zone, and device or online identifiers.
Usage Information: Dates and times of access, pages viewed, features used, links clicked, and information about how you use the Services.
Log and Troubleshooting Information: Log files and error reports collected when our Services encounter issues, including the time of the error, the feature in use, and application state at the time.
Cookies and Similar Technologies: We and our service providers use cookies and similar technologies to manage the Services, recognize you, personalize your experience, and analyze usage. You can block or delete cookies in your browser settings, or email us to ask about your options.

2. Uses of Personal Data

We use your personal data for the following purposes:

To provide, maintain, and improve the Services offered to you under our Terms of Service;
To send you service updates and communications relevant to your account;
To create and administer your Secure AI account;
To process payments for paid subscriptions;
To prevent and investigate fraud, abuse, and violations of our Terms of Service, unauthorized access to our systems, and to meet legal obligations;
To investigate and resolve disputes and security issues;
To debug and repair errors that impair existing functionality;
To improve the Services and conduct internal analytics; and
To enforce our Terms of Service and applicable agreements.

We do not use your Inputs or Outputs to train AI models. We do not sell your personal data. We do not use your conversations for advertising.

3. Health and Fitness Data

The Health section of our mobile apps can read health and fitness data, with your permission, from Apple Health on iOS and Health Connect on Android. You can withdraw access at any time in your device settings without losing your account.

The categories we read are: step count, sleep, resting heart rate, heart rate variability, cardio fitness (VO₂ max), and blood oxygen. We use them for one purpose: to calculate the daily health score, streaks, and badges shown to you inside the app.

We write one category back, and only on iOS: when you log a drink in the daily check-in, that amount is saved to Apple Health as water intake, so your own health record stays complete rather than having the figure stranded in our app. Nothing else is ever written to your health record.

Your raw health measurements stay on your device. They are read to compute your score and are not uploaded to our servers. What we store in your account is the resulting score, your streak counts, and any check-ins you choose to log (mood, water, journal entries).

Other people can see your score, but never your health data. If you use the friends feature, your name, photo, and current health score are visible to other users in the shared directory so you can compare progress. The underlying measurements — your steps, sleep, heart rate, and everything else read from Apple Health or Health Connect — are never shared with other users. You can stop sharing by not using the friends feature, or by making your profile private.

We never send health or fitness data to AI providers. It is not included in the context sent with your messages, and it is not used to generate responses.

We do not use health or fitness data for advertising or marketing, we do not sell it, we do not use it to train AI models, and we do not disclose it to third parties for their own purposes. It is not used for any purpose beyond the health features described here.

4. Recipients and Third-Party Data Sources

We disclose personal data to the following categories of third parties for the purposes described in this Policy:

The organization that bought your seat: If you use Secure AI on a Team plan (formerly called Business), the organization that pays for your seat administers it. Its administrators can see that your seat exists, the email address it was issued to, and whether it is in use, and they can remove it — which ends your access to the team workspace. They cannot read your conversations, notes, reminders, projects or memories. Content you place in a shared team workspace is visible to the other members of that team. Where an organization is the controller of personal data processed through its seats, our data processing addendum governs that processing.
Service providers and business partners: We share personal data with service providers and partners for purposes including hosting, data processing, payment processing, fraud prevention, and security. Each one is named, with the purpose it serves, on our sub-processors page.
AI providers: When you send a message, your Inputs are transmitted through our infrastructure to the AI provider that handles that feature, to generate a response. Your account identity — your account identifier, name, and email address — is not shared with AI providers, and the identifying details listed in Section 1 are replaced with stand-ins before the message is sent. Personal data that our detection does not cover is transmitted as written. Each provider processes message content under their own terms and privacy policies. We use a blend of AI providers and may add or change them; the current list is maintained on our sub-processors page.
Corporate events: If we are involved in a merger, acquisition, bankruptcy, or transfer of business assets, your personal data may be transferred as part of that transaction.
Legal and safety disclosures: We may share personal data with government authorities, law enforcement, or other third parties where we have a good-faith belief that disclosure is reasonably necessary to (i) comply with applicable law or legal process; (ii) prevent serious harm to any person or property; (iii) detect, prevent, or address fraud or other illegal activity; or (iv) enforce our terms or protect the rights, property, or safety of Secure AI, our users, or others.
With your consent: We will otherwise disclose personal data when you give us permission or direct us to do so.

5. Rights and Choices

Depending on where you live and the laws that apply, you may enjoy certain rights regarding your personal data.

To exercise your rights, you or an authorized agent may submit a request by contacting us at support@secureai.one. After receiving your request, we may verify your identity by requesting information sufficient to confirm who you are (e.g., email address or account details). We will respond within the period required by the data protection law that applies to you.

The following rights may be available to you depending on your jurisdiction:

Right to know: The right to know what personal data we process about you, including the categories of data, sources, purposes, and third parties involved.
Access and data portability: The right to request a copy of the personal data we hold about you, and in certain cases to receive it in a portable format.
Deletion: The right to request deletion of your personal data. You can delete individual conversations directly in the app; they will be removed from your conversation history immediately and deleted from our systems within 30 days. To delete your entire account and all associated data, go to Settings → Delete Account or contact us at support@secureai.one.
Correction: The right to request correction of inaccurate personal data we hold about you.
Objection: The right to object to processing of your personal data, including for direct marketing. You can opt out of marketing communications using the unsubscribe link in any such messages.
Restriction: The right to request that we restrict our processing of your personal data in certain circumstances.
Withdrawal of consent: Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
Automated decision-making: We do not engage in decision-making based solely on automated processing in a manner that produces legal effects or significantly affects you.

We will not discriminate against you for exercising any privacy rights you may have.

6. Data Transfers

Secure AI is based in the United States, and your personal data is processed on servers located in the US and in the countries where our service providers operate. If you are located outside the United States, your personal data will be transferred to and processed in the US or other countries whose data protection laws may differ from those in your country.

Where required by applicable law, we use appropriate safeguards — such as standard contractual clauses approved by relevant authorities — to protect personal data transferred internationally. If you have questions about how we safeguard international transfers, please contact us.

7. Data Retention and Security

We retain your personal data for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements.

When personal data is no longer required, we and our service providers will destroy, delete, erase, or anonymize it as permitted or required by applicable law.

Your chats, notes, reminders, projects, memories, documents, the supplier invoices you check and the money owed to you that the app tracks are stored encrypted with AES-256-GCM. A few small labels are not encrypted, such as dates, counts and whether a task is done. This protects your content if someone gets into our storage. It is not end-to-end encryption: we hold the key and share it with your signed-in devices, so we could technically decrypt what we store. We do not do this in practice, and access is restricted. Our security page explains exactly what is and is not covered.

On the Ultra and Team Ultra plans, messages are also sealed on your device before they are sent and can only be opened inside an isolated, locked-down server that we cannot access. We cannot read those messages on their way to the AI, and we hold no key that would let us.

Separately, we keep a record of each AI exchange to check the quality of the Services: the message and response as the AI provider saw them (with your private details still swapped out), the model used, and a one-way scrambled form of your account ID. These records are not filed under your account, are never used to train AI, and are deleted automatically after 90 days. Chats you start in incognito mode are not recorded.

Aggregated or De-Identified Information

We may process personal data in aggregated or de-identified form to analyze and improve the effectiveness of our Services. Where data is de-identified, we maintain and use it in de-identified form and will not attempt to re-identify it except as permitted by law.

Security

We implement appropriate technical and organizational security measures designed to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children

Our Services are not directed at children under the age of 13, and we do not knowingly collect personal data from children under 13. If you become aware that a child under 13 has provided personal data to us, please contact us at support@secureai.one and we will investigate and, if appropriate, delete the data.

9. Changes to Our Privacy Policy

We may update this policy from time to time. If we make an important change, we will post the new version at secureai.one/privacy-policy and update the date at the top of this page.

10. Legal Bases for Processing

Where data protection laws require a legal basis for processing personal data, we rely on the following:

Contract: Processing necessary to provide the Services to you, manage your account, and process payments.
Legitimate interests: Processing for fraud prevention, security, debugging, product improvement, and analytics, where our interests are not overridden by your rights and freedoms.
Legal obligation: Processing required to comply with applicable laws, respond to lawful government requests, and meet regulatory requirements.
Consent: Where we rely on your consent, such as for certain cookies or optional communications. You may withdraw consent at any time.
Vital interests: Processing necessary to protect the vital interests of any person in emergency circumstances.

11. Google and Microsoft Account Data

If you choose to connect Google Drive, Google Calendar, OneDrive or Outlook Calendar, Secure AI asks for the narrowest access that does the job:

Google Drive and OneDrive: only the file you pick, when you pick it. We cannot see or list the rest of your files.
Google Calendar and Outlook Calendar: read-only access to your events for the next seven days, read when you ask about your schedule. We never create, change or delete events.

This data is used only to answer the question you asked. Names, email addresses and other personal details in it are replaced with stand-ins before any AI model sees them. Your sign-in to Google or Microsoft stays in your browser and is never stored on our servers, and we keep no copy of your Drive, OneDrive or calendar. What you bring into a conversation is saved with that conversation, encrypted, like anything else you write, and is deleted when you delete it. We do not sell this data, use it for advertising, or use it to train AI models, ours or anyone else's. You can disconnect at any time from the Apps page, or remove Secure AI's access from your Google or Microsoft account settings.

Secure AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

12. Contact Us

Questions, complaints or requests about your personal data? Contact us:

Secure AI
Email: support@secureai.one

Depending on the laws that apply in your jurisdiction, you may also have the right to lodge a complaint with a local data protection supervisory authority.