Privacy

Your memory and your keys are yours. Friend reads them to help you, and we never sell them. This page explains, in plain words, what we hold and why.

What we hold

• Your account: your email and sign-in details, and which plan you are on.
• What you tell Friend: your chats, the memories you save, and documents you upload for Friend to read.
• Your connections: the keys and tokens you connect, stored encrypted (see below).
• Basic usage: the minimum we need to run the service, keep it secure, and fix faults.

How your keys are stored

A key or token you connect is encrypted before it is stored, and is only ever decrypted on our server for the exact moment Friend uses it to act for you. It is never shown back to you on screen, never placed into a message the model writes, and never logged in the clear. This is what we mean when we say Friend can use a secret that no one, us included, can read back.

Who we share it with

We do not sell your data. We share it only with the providers that make Friend work, and only as much as each needs:

• Stripe handles payments; your card details go to Stripe, not to us.
• Supabase stores your account and your Friend’s memory and documents.
• Our AI provider processes the text of a turn so Friend can reply; your stored keys are never sent to it.
• A service you connect receives only the requests Friend makes on your behalf, within the access you gave.

Money your site takes in

If your Friend runs a site that sells things or takes donations, that money goes straight into your own account, in your name. It never passes through us.

Your choices

You can view and delete your memories, remove documents, and disconnect any key from inside the app at any time. You can ask us for a copy of your data, or to delete your account and what we hold, by writing to us. We keep what we need only for as long as we need it.

Where your data lives

Ecodia is Australian. Some of our providers process data outside Australia; we use reputable providers and only the access each one needs.

Contact

Privacy questions or requests go to code@ecodia.au and a real person answers.