Privacy Policy

Fractal AI is a personal AI companion. To do what it does, it stores the conversations and content you give it, derives a personality and behavioral model from them, and uses that model to generate responses, plans, and insights tailored to you. We do not sell your data and we do not use it to train shared models.

• Account info — email address, password hash, display name.
• Content you upload — chat history exports (ChatGPT, Claude, WhatsApp), documents, journal entries, notes, goals, plans, decisions, and any text you send to Fracty.
• Derived data — personality profiles, behavioral patterns, axis scores, embeddings, and other AI-generated representations of the content you upload.
• Usage data — page views, feature interactions, timestamps of activity. Used to improve the product and to power the in-app activity model.
• Push notification tokens — when you install the mobile app and grant notification permission, we store the device token so we can send you reminders and daily insights.
• Device info — operating system, app version, and basic crash diagnostics from the mobile app.

• To extract a personality profile and behavioral patterns unique to you, which Fracty uses to respond, plan, and nudge in your voice.
• To power the chat, the goal/plan engine, the journal, the simulation feature, and the daily insight emails and push notifications.
• To send you transactional messages — reminders, plan updates, and notifications you've opted into.
• To improve the product. We look at aggregate usage to find bugs and bottlenecks; we do not read individual users' private content for product analytics.

We use a small number of trusted infrastructure providers to run Fractal AI. These providers process data on our behalf and only as needed to deliver their service.

• Anthropic — your messages and the relevant context (personality profile, recent activity, retrieved memories) are sent to Anthropic's Claude API to generate responses. Anthropic does not use API content to train their models.
• Supabase — primary database and authentication. All your stored content lives here.
• Vercel — hosts the web app and runs our serverless functions.
• Google Firebase Cloud Messaging (FCM) — delivers push notifications to Android devices.
• Resend — delivers transactional and digest emails.
• Telegram — only if you connect a Telegram account, we use the Telegram Bot API to send and receive messages.
• PostHog — product analytics (which screens are visited, which buttons are clicked). It never receives what you type or the content of your conversations, journal, or profile — input values are not captured, and content surfaces are explicitly excluded from collection.
• Google Ads — advertising measurement on our public marketing pages. It tells us that an ad we paid for led to a signup, so we know which advertising works. It records the page visit and the fact that an account was created — never your name, your email, or anything inside your account. It does not run on the signed-in app.

We advertise Fractal, so our public pages carry Google’s conversion-measurement tag. That is the full extent of it, and it is worth being precise about what it does and does not mean:

• We do not show ads inside Fractal. There is no advertising in the app, on any screen, ever.
• We never send your content to an advertiser. Not your conversations, journal, notes, uploads, profile, or map.
• What Google does receive is that a browser visited a public page and, if you sign up, that a signup happened — the same measurement every advertised website performs. Google may set cookies on those public pages under its own privacy policy.
• You can opt out with any ad blocker or tracking protection; the tag failing to load has no effect on the product.

• We do not sell your data to anyone.
• We do not use your private content to train shared or public AI models.
• We do not show advertising inside Fractal, and we never share the contents of your account with advertisers. See Advertising above for what our marketing pages do measure.

Your data is retained for as long as your account is active — and you hold the exit door. From Profile → Your data you can download everything Fractal AI stores about you as a single file, or permanently erase your account and every piece of associated data. Deletion is immediate and self-serve: it removes your database records, derived models, and uploaded files, and invalidates every active session — no email, no support ticket, no 30-day wait.

Fractal uses a small number of cookies and similar browser storage: a session cookie that keeps you signed in, a cookie remembering that you dismissed the cookie notice, and analytics cookies set by PostHog (on every page) and by Google Analytics / Google Ads (on the public marketing pages only). Analytics cookies tell us which pages are visited and which buttons are used; they never carry your conversations, notes, or uploads. You can clear or block cookies in your browser at any time; blocking analytics cookies has no effect on the product.

All data is transmitted over TLS. Authentication uses industry-standard token-based sessions stored in HTTP-only cookies on the web and in the secure keystore on mobile. Database access is restricted to our backend services and protected by row-level security.

Fractal AI is intended for users aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will remove the account and associated data.

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page, and significant changes will be communicated via email or in-app notification.

Fractal AI is built and operated by Waggle Dance LLP. See our Terms of Service for the agreement that governs your use of the service.

You do not need to contact anyone to exercise the rights described above — export and permanent deletion are both self-serve from Profile → Your data.