Privacy Policy

Fractal AI is a personal AI companion. To do what it does, it stores the conversations and content you give it, derives a personality and behavioral model from them, and uses that model to generate responses, plans, and insights tailored to you. Some of that work is done by three outside AI services — Anthropic, OpenAI and Deepgram — and the app asks your permission before anything is sent to them. We do not sell your data and we do not use it to train shared models.

• Account info — email address, password hash, display name.
• Content you upload — chat history exports (ChatGPT, Claude, WhatsApp), documents, journal entries, notes, goals, plans, decisions, and any text you send to Fracty.
• Voice — two different things, handled differently. In voice mode, the audio you speak is streamed to a speech-to-text provider while the conversation is live; we keep the transcript as part of that conversation and do not store the audio. A voice memo you record in your journal is different: that recording is a file you are saving, so it is stored with the entry and stays there until you delete it. Either way the microphone is only active while you are recording or in a voice conversation, never in the background.
• Connected accounts — only if you connect them: events from Google Calendar or Apple Calendar, and pages you choose to import from Notion.
• Derived data — personality profiles, behavioral patterns, axis scores, embeddings, and other AI-generated representations of the content you upload.
• Usage data — page views, feature interactions, timestamps of activity. Used to improve the product and to power the in-app activity model.
• Push notification tokens — when you install the mobile app and grant notification permission, we store the device token so we can send you reminders and daily insights.
• Device info — operating system, app version, and basic crash diagnostics from the mobile app.

• Directly from you — what you type, upload, record, or answer in the app and on the website.
• From accounts you connect — calendars and Notion, read with the permission you grant when connecting them, and only until you disconnect.
• Automatically — usage events, device type, app version and crash reports, recorded as you use the app.
• By analysis — patterns, profiles and embeddings that Fractal derives from the content above.

• To extract a personality profile and behavioral patterns unique to you, which Fracty uses to respond, plan, and nudge in your voice.
• To power the chat, the goal/plan engine, the journal, the simulation feature, and the daily insight emails and push notifications.
• To send you transactional messages — reminders, plan updates, and notifications you've opted into.
• To improve the product. We look at aggregate usage to find bugs and bottlenecks; we do not read individual users' private content for product analytics.

Fractal sends some of your personal data to the three AI services below. These are the only AI services that receive it. The app asks for your permission before anything is sent: a screen names each service and what it receives, and nothing is shared until you tap “I agree”. You can review that screen at any time under Profile → AI & your data, and you can stop all sharing by deleting your account (see Retention and deletion).

• Used only to run Fractal's features for you — including the overnight Night Shift analysis — and for nothing else.
• Never sold, never used for advertising.
• Each provider handles it under data-protection terms at least as protective as our privacy policy.

We also use a small number of infrastructure providers to run Fractal AI. They process data on our behalf, only as needed to deliver their service, under data-protection terms at least as protective as this policy.

• Supabase — primary database and authentication. All your stored content lives here.
• Vercel — hosts the web app and runs our serverless functions.
• Expo, Apple Push Notification service and Google Firebase Cloud Messaging — deliver push notifications to your device. They receive the notification text and your device token.
• Resend — delivers transactional and digest emails.
• Telegram — only if you connect a Telegram account, we use the Telegram Bot API to send and receive messages.
• PostHog — product analytics (which screens are visited, which buttons are clicked). It never receives what you type or the content of your conversations, journal, or profile — input values are not captured, and content surfaces are explicitly excluded from collection.
• Google Ads — advertising measurement on our public marketing pages. It tells us that an ad we paid for led to a signup, so we know which advertising works. It records the page visit and the fact that an account was created — never your name, your email, or anything inside your account. It does not run on the signed-in app.

We advertise Fractal, so our public pages carry Google’s conversion-measurement tag. That is the full extent of it, and it is worth being precise about what it does and does not mean:

• We do not show ads inside Fractal. There is no advertising in the app, on any screen, ever.
• We never send your content to an advertiser. Not your conversations, journal, notes, uploads, profile, or map.
• What Google does receive is that a browser visited a public page and, if you sign up, that a signup happened — the same measurement every advertised website performs. Google may set cookies on those public pages under its own privacy policy.
• You can opt out by choosing Decline in the cookie notice (the Google tag then sends nothing), or with any ad blocker or tracking protection; the tag failing to load has no effect on the product.

• We do not sell your data to anyone.
• We do not use your private content to train shared or public AI models.
• We do not show advertising inside Fractal, and we never share the contents of your account with advertisers. See Advertising above for what our marketing pages do measure.

Your data is retained for as long as your account is active — and you hold the exit door. From Profile → Your data you can download everything Fractal AI stores about you as a single file, or permanently erase your account and every piece of associated data. Deletion is immediate and self-serve: it removes your database records, derived models, and uploaded files, and invalidates every active session — no email, no support ticket, no 30-day wait.

Fractal uses a small number of cookies and similar browser storage: a session cookie that keeps you signed in, a cookie remembering your answer to the cookie notice, and analytics cookies set by PostHog (on every page) and by Google Analytics / Google Ads (on the public marketing pages only), plus our own anonymous visitor id (a random code in a first-party cookie, so we can count how many people reach each step rather than how many page loads). Analytics cookies tell us which pages are visited and which buttons are used; they never carry your conversations, notes, or uploads. Before you sign in, on the landing, onboarding and signup pages only, PostHog may also record a replay of the session (where you tap and scroll) so we can see where people get stuck; every typed field and your own answers are hidden in it, and nothing is ever recorded inside the app once you are signed in. The cookie notice offers Got it or Decline: Decline turns off PostHog and the Google tag in that browser, deletes our visitor id and stops us storing one, and is remembered for a year. You can also clear or block cookies in your browser at any time; blocking analytics cookies has no effect on the product.

All data is transmitted over TLS. Authentication uses industry-standard token-based sessions stored in HTTP-only cookies on the web and in the secure keystore on mobile. Database access is restricted to our backend services and protected by row-level security.

Fractal AI is intended for users aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will remove the account and associated data.

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page, and significant changes will be communicated via email or in-app notification.

Fractal AI is built and operated by Waggle Dance LLP. See our Terms of Service for the agreement that governs your use of the service.

You do not need to contact anyone to exercise the rights described above — export and permanent deletion are both self-serve from Profile → Your data.