App privacy

The short version

• Your memory is stored sealed, with keys your phone holds.
• We keep a small amount of account and connection information unsealed, so the service can run.
• To read your mail, we send its text to an AI model run for us on Microsoft Azure. We never train on it and never sell it.
• Delete your account and the keys are destroyed, so your memory can never be opened again.

What you give us, and why

• Your account: your sign-in details and plan, handled by Clerk, so you can sign in and pay. Clerk never sees your memory or your keys.
• The mail, calendars, chats and notes you connect (Google, Microsoft, Notion): to build your memory of people, plans and promises. Newsletters, promotions and automatic messages are skipped. When you connect an account, we read back up to 90 days of mail and your calendar from the recent past to 90 days ahead, then keep up every 15 minutes.
• Recordings and notes on your phone: speech is turned into text on the phone, and the audio never leaves it. The text is sealed on the phone before it is sent. A recording’s transcript stays on that phone until you delete it; what your memory read from it can be read again in the web app, like any other source.
• What an AI assistant saves: when you let an AI add to your memory, what it saves is sealed to the drawer you chose, with the AI named as its source.

What is sealed, and what is not

Everything in your memory (the messages it read, and the people, facts, plans and promises found in them) is stored sealed with your drawers’ keys. Your access log is sealed to your own account key. Exports are sealed to you too.

To run the service, we keep this unsealed:

• your account and plan, and which memory container holds your memory;
• for each connected account: a masked address (like a***@gmail.com) and a fingerprint of it, never the full address; its drawer and sorting rules; sync status and counts; and the sign-in token for it, itself sealed with our key vault;
• which messages have already been read (their ids, deleted after 90 days), and masked senders that were skipped (kept 30 days) so you can review them;
• the AIs you connected, what each may do, and until when; and your phones, so approvals reach them;
• usage counts for billing and limits, and a Private request’s question while it waits for your answer;
• service logs that carry ids and counts, never the content of your memory.

The AI models that read for you

To turn a message into people, plans and promises, its text is sent through our own gateway to AI models we run on Microsoft Azure:

• Anthropic’s Claude Haiku, in Azure AI Foundry, reads each new item. It isn’t offered in Australia yet, so this text is processed in Microsoft’s data centres outside Australia (Sweden is the home region today).
• A Microsoft decision model, in Australia East, answers yes-or-no questions such as whether a message is automatic.
• An Azure OpenAI embedding model, in Australia East, turns text into numbers so your memory can be searched.

We never use your memory to train AI models. When you ask your own AI assistant a question, what it reads from your memory is handled under that assistant’s own terms.

The AI connector

When you connect an AI assistant, the connector keeps the assistant’s registration, your choice of drawers and mode, and its sign-in tokens (stored as one-way fingerprints, or sealed). It passes questions and answers through without storing or logging them. Access lasts 30 days at most, and you can take it back any time under AI access.

Where it is kept, and who helps us

• Your sealed memory, and the services that open it, run on Microsoft Azure in Australia East (Sydney).
• AI reading runs on Microsoft Azure as described above.
• Clerk handles sign-in and billing, with payments by Stripe. Both are based in the United States.
• Approval alerts travel through Apple’s and Google’s push services, and carry no content.

Your choices

• Choose which accounts to connect and which drawer each belongs in, and disconnect them any time.
• Choose which AIs may read or add, and revoke them in one tap.
• Correct or forget a fact, a person or a memory, or start over.
• Export your whole memory, free, at any time, sealed to you.
• Delete your account. Once your phone approves it, your mail connections are removed and your keys are destroyed, so nobody can open your memory again, including us.

To ask about your information, email us at hello@secondmemory.io. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Children

SecondMemory is for people aged 16 and over.

Changes

If we change this notice, we will update the date at the top. If a change affects how we use information you have already given us, we will tell you first.