Legal

Privacy Policy

Last updated: 5 July 2026

GraphAqal is built local-first on purpose. Your intellectual history is not our product, and this policy is written to be read, not to hide behind. If anything here is unclear, email support and we'll answer plainly.

The one-sentence version

Your conversation content is captured, processed, and stored entirely on your own device; the only things that reach our servers are what's needed to sign you in and confirm your subscription.

What stays on your device (and never leaves, by default)

• The text of your Claude and ChatGPT conversations, projects, and artifacts.
• The local database file that holds them.
• The mathematical embeddings and topic clusters computed from them — all generated by a model that runs on your machine, offline.

None of the above is transmitted to us in a form we can read. On our Free plan and during the free trial, none of it is transmitted at all. See "Multi-device sync" below for the one Pro-only exception, and exactly what that does and doesn't change.

Multi-device sync (Pro-only, end-to-end encrypted)

Pro subscribers can turn on sync so their history follows them across devices. Here's precisely what that means:

• Your conversations are encrypted on your device, using a key only you hold, before anything is sent anywhere.
• What reaches our database is unreadable ciphertext. We cannot decrypt it, view it, search it, or hand it over in readable form — technically, not just by policy.
• Adding a device is normally just a short one-time code — open the app on a device you're already using, choose "Add a device," and enter the code it shows on the new one. Your key transfers directly between your own devices; no phrase to remember, nothing sent to us in a readable form.
• As a backup, sync is also protected by a Recovery Code we generate on your device and never see. It's only needed if you ever have no existing device to add a new one from — you can view it again anytime from Settings, it isn't a one-time reveal. If it's ever lost at the same time as every device you've used it on, older synced data can't be recovered on a fresh device — the direct cost of a sync system we genuinely cannot read. In everyday use (keeping at least one device going), this never comes up.
• Sync is off by default and only runs for Pro accounts that turn it on. Free and trial accounts are single-device.

How the browser companion works

The GraphAqal browser extension reads only the conversations of the account you are already signed into, using your own existing browser session. It does not log into anything on your behalf, does not read other sites, and sends the data it captures only to the GraphAqal desktop app running locally on the same computer (over 127.0.0.1, authenticated with a one-time pairing token). It requests access to only claude.ai and chatgpt.com.

What our servers do hold

• Account: your email address and authentication identifiers, via our auth provider, so you can sign in across devices.
• Billing status: whether your subscription is active and its tier, via our payment reseller. We do not store your card details — the reseller does.
• If you're a Pro subscriber with sync turned on: encrypted, unreadable copies of your conversations (see "Multi-device sync" above). We hold the ciphertext, not the content.

Service providers (processors)

We rely on a small number of processors strictly for the functions above, and they process only account, billing, or support data — never your conversation content:

• Supabase — authentication, the account/billing-status database, and (Pro sync only) storage for your encrypted, unreadable conversation ciphertext.
• Paddle — our Merchant of Record; handles checkout, card processing, billing, and tax. Card details are held by Paddle, not us.
• Vercel — hosts this website and the support-form function.
• Resend — delivers the email from the support form to our inbox.

Cookies & your choices

Essential cookies keep this website working, and our payment provider (Paddle) sets cookies at checkout to process your payment securely. These are always on.

Optional cookies (analytics / marketing): we currently run none. If in future we use measurement or retargeting cookies (for example to show you relevant ads), they will load only after you choose “Accept all” in our cookie banner — never by default. You can change your mind any time by clearing your browser storage, which brings the banner back. We do not sell your personal data. The desktop app does not track your use of your own graph.

GDPR / UK GDPR (visitors in the EU / UK)

Data controller: the operator of GraphAqal (contact via support). We process the limited personal data described above on these lawful bases: performance of a contract (running your account and subscription), legitimate interests (securing the service and answering your support messages), and legal obligation (tax and accounting, handled by our Merchant of Record). Your conversation content is not sent to us, so we are not its processor.

You have the right to access, correct, export, or delete your personal data, to object to or restrict processing, and to withdraw consent — exercise any of these via support. You may also complain to your local data-protection authority.

Data retention

We keep account and billing-status data for as long as your account exists, then delete it on request or within a reasonable period after closure (billing records may be retained longer where tax law requires, by our Merchant of Record). Support messages are kept only as long as needed to help you. Your conversation data lives on your device and is deleted whenever you remove the local database or uninstall.

Your rights & control

Because your content lives on your device, you are in direct control of it — delete the local database and it's gone. For the limited account and billing data we hold, you may request access or deletion at any time via support. Deleting your account removes your profile and billing linkage from our systems.

Children

GraphAqal is not directed to anyone under 16, and we do not knowingly collect their data.

Changes

If this policy changes materially, we'll update the date above and, for account holders, note it in-app or by email.

Terms of Service · Refund Policy · Home