Privacy

What we store

Your account: your email address, an optional name, and a salted scrypt hash of your password. We never store the password itself.

Your projects: the cards your agent submits (titles, text, topic tags and source references such as commit ids), the project events and questions that come with them, and narration audio made from card text. Secret-shaped strings are removed twice before anything is saved, but removal is best effort, so do not submit secrets.

How you read: the reactions you give cards, your progress and mastery per topic, and your topic preferences.

If you turn on notifications: your browser's push subscription, which is an address and keys.

Operations: counts of sign-up and setup steps, and short-lived rate-limit counters that include the IP address of the requester.

Cookies

We set one sign-in cookie. There are no advertising or analytics trackers.

Who handles it for us

Neon runs our Postgres database, on AWS in Singapore.

Vercel hosts the app and keeps standard request logs.

Sentry receives error reports from the app. Request bodies, cookies and secret-shaped text are scrubbed before they are sent.

Better Stack checks that our public pages respond. It receives no account data.

Oracle Cloud Infrastructure, in Mumbai, holds database backups and narration media files.

Resend delivers email such as password resets and invitations, when email is enabled.

We do not sell your data and we do not use it for advertising. We run no AI model on our servers, so we do not train one on your content. The agent you connect is your own tool, under its own terms.

Who can read your projects

Projects are private by default. People you invite by email can read a project they were invited to.

An unlisted project can be read by anyone with the link, without signing in, and search engines are asked not to index it. Public visibility is switched off during the beta.

How long we keep it

We keep your data until you ask us to delete it. Database backups are kept for 30 days, then held for up to 7 more days as superseded versions, so deleted data can remain in a backup for up to about 37 days. Sentry and Vercel keep their own logs under their own retention.

Deleting your data

Email us and we will delete your account and everything in the projects you own from our live database within 30 days. We cannot remove copies already in backups before they expire, or logs held by Sentry or Vercel.

Changes

Catchup is a beta, so things change, and so may this page. The date at the top is the last edit.

Contact

Questions, or a deletion request: a contact address has not been set up yet