Privacy & Data Handling

Local sorting

Local sorting runs entirely on this iPhone after its model is downloaded. Your capture text, View names, and sorting instructions are not sent to us or an external AI service.

Cloud sorting

Cloud sorting sends the selected capture text and eligible View information through our systems and an external AI service so the sort can be completed.

What passes through our systems

• Cloud access credential used for authentication
• Selected sorting tier
• Capture ID and revision
• Capture text
• Eligible View IDs and names
• Positive and negative View sorting instructions
• Operation and duplicate-prevention identifiers
• App version, platform, and locale

What may be sent to an external AI service

• Capture text
• View names
• Positive and negative sorting instructions
• Prompt instructions required to perform the sort
• Opaque View identifiers needed to return the result

Unrelated captures, app backups, your cloud access code, and our provider credentials are not sent to the external AI service.

What we may collect and retain

• Pseudonymous account and access status
• Selected sorting tier
• Number of captures processed and Views considered
• Opaque operation, capture, and View identifiers used for reliability and result delivery
• Operation creation, start, completion, queue, and processing times
• Success, failure, cancellation, timeout, and partial-success counts
• Number of matched Views, without their names
• Retry and recovery counts
• Budget reserved and charged
• Input and output token counts when available
• Safe error category
• App version, platform, operating-system version, and locale
• Whether a result was applied, skipped, or rejected because a capture changed

What we do not retain after processing

• Capture text
• View names
• Positive or negative sorting instructions
• Raw prompts
• Raw external-AI responses
• Cloud access-code contents
• Provider credentials or authorization headers

Cloud infrastructure backups may temporarily contain data that was being processed when a backup was created. That data is removed as the backup expires or is replaced.

External AI services

We currently use DeepSeek Open Platform and Google Gemini API. Their retention, training, security, and international-processing rules differ, and their official policies govern their handling of submitted content. Review those policies before using cloud sorting.

We do not intentionally submit content to optional provider data-sharing programs.

Before you use cloud sorting

Do not submit content you do not want processed under these rules and the linked external-service policies. You can use Local instead.