privacy policy

1. information we collect

when you use mAIself, we collect:

• account information: email address and authentication data provided through our identity provider (Clerk).
• conversation data: messages you send and responses generated by AI models.
• memories: information mAIself learns about you during conversations to personalise your experience.
• usage data: interaction patterns, model preferences, and feature usage for service improvement.
• subscription data: paid plans are bought as in-app purchases through Apple (App Store). Apple processes the payment and we receive confirmation of your plan. we do not store your card details.
• connected services: if you connect an app such as Gmail or Google Calendar, Composio manages the sign-in and holds the access tokens. mAIself stores the connected-account reference, privacy settings, and limited normalised metadata needed to power integrations.

2. how we use your data

your data is used to:

• provide and maintain the mAIself service.
• personalise your experience through learned memories and preferences.
• confirm your plan and manage your subscription.
• improve service quality, reliability, and safety.
• communicate important service updates.

3. third-party AI models

mAIself routes your messages to third-party AI model providers to generate responses. these include models from providers such as OpenAI and Anthropic served through Microsoft Azure and, where enabled, AWS Bedrock. the set of models and providers changes over time. your conversation data is sent to these providers as necessary to deliver the service. each provider has their own data processing policies. we select providers that offer enterprise-grade data handling and do not use your data to train their models. some features, such as web search, can process data outside the uk and only run when you have given consent.

4. data storage and security

your data is stored securely using industry-standard encryption. conversation data and memories are stored in our database infrastructure on Microsoft Azure in the uk (uk south region). we implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, or destruction.

for Composio managed accounts, mAIself does not store raw access or refresh tokens. Composio handles credential storage and token refresh; mAIself uses connected-account IDs to execute tools. reading from a connected app does not need a confirmation each time, but actions that change something, such as sending an email, ask you to confirm first. if you disconnect an app, mAIself asks Composio to delete the connected account and stops using it.

5. your rights

you have the right to:

• access: view all memories and data mAIself has stored about you via the memory section.
• delete: remove individual memories or request deletion of your account and mAIself app data from account settings.
• export: request a copy of your conversation history and stored data.
• rectify: correct inaccurate memories through the memory management interface.
• withdraw consent: delete your account and all mAIself-controlled app data at any time.

6. cookies and tracking

mAIself uses essential cookies required for authentication and service functionality, including a secure, http-only refresh cookie (__Host-maiself_refresh) that keeps you signed in. on our website we store one setting in your browser, maiself-theme, to remember light or dark mode. it is set only when you pick a theme and is removed when you choose system.

for product analytics we use PostHog (EU), from our servers. it records metadata only, such as which model was used and how long a response took, not your messages or memories. we use Azure Application Insights to monitor performance and errors, and Sentry on our website to report errors and sample performance data. we do not use advertising trackers or sell your data to third parties.

7. data retention

we retain your mAIself app data for as long as your account is active. when you use self-serve account deletion in account settings, mAIself deletes conversations, messages, memories, profile data, knowledge graph, goals, tasks, scheduled workflows, drafts, shared items, uploaded files, connected-service references and approvals, notifications, device tokens, and Friends data tied to your account.

if you have a paid plan, it is an App Store subscription managed by Apple. deleting your account does not cancel it, so cancel it in your Apple account settings. Apple may retain purchase and payment records under its own policies.

some records expire on their own. short-lived stream data is kept for 24 hours, spend receipts for 30 days and monitoring logs for 30 days. production database backups allow a point-in-time restore for 7 days, so deleted data can remain in those backups until they expire.

mAIself asks Composio to delete managed connected accounts where supported and deletes mAIself's local connected-account references, privacy settings, tool approvals, execution logs, and cached integration data. Composio and the external services you connected may retain their own logs under their policies.

mAIself anonymises existing security audit rows by replacing your user identifier with a deletion pseudonym, clearing IP address and detail fields, and keeping only timestamp, action, resource, and severity. mAIself also keeps one final non-identifying account deletion audit event. previously processed AI, analytics, observability, and infrastructure telemetry remains subject to the relevant provider retention policies; mAIself does not sell that data or use it for model training.

8. children's privacy

mAIself is not intended for use by individuals under the age of 16. we do not knowingly collect data from children. if you believe a child has provided us with personal data, please contact us for removal.

9. changes to this policy

we may update this privacy policy from time to time. we will notify you of significant changes through the service or via email.

10. contact

for privacy-related inquiries, contact our data protection team at privacy@maiself.io.