Privacy Policy

The short version

• We collect what you give us (your account details, profile and personalization information, messages, and memories you approve) plus limited technical information needed to run and secure the service.
• To generate AI responses, your messages and relevant context are sent to our AI model provider.
• When the assistant searches the web, the search query is sent to our search provider. When it reads a webpage, our servers fetch that page.
• If you share a chat, anyone with its link can read that copy of the chat until you stop sharing it.
• We don't sell your personal information, and we don't use advertising or analytics trackers.
• You can review and delete your saved memories and conversations yourself. To delete your account and its data, contact us.

Information we collect

Account and sign-in information

• Email address and password. Your password is sent securely to our authentication provider, which stores it in hashed form. We don't store your password ourselves.
• Session information. When you sign in, our authentication provider creates a session and keeps related records, which can include your IP address, browser or device information (user agent), and sign-in times. This is used to keep you signed in and to protect your account.

Age and agreement confirmations

Before you can use AI May Byte, we ask you to confirm that you're 18 or older, that you understand the assistant is artificial intelligence and can make mistakes, that you agree to our Terms of Service and Acceptable Use Policy, and that you acknowledge this Privacy Policy and our AI Disclaimer. We store a record of these confirmations with your account, including which version of our policies you accepted and when. We don't ask for your date of birth.

Profile and personalization information

Everything in this section is optional unless noted, and you choose what to share:

• display name (required; initially based on the part of your email address before the "@")
• preferred name and pronouns
• an avatar image link, if you add one
• your chosen character theme
• a custom name for your AI assistant, if you choose one
• "About you" details: a short description of yourself, occupation, industry, company, interests, goals, and preferred communication style

AI May Byte uses this information to personalize the assistant's responses.

Conversations

• Your messages and the assistant's replies, along with when they were sent.
• Projects you create (names and alternative names) and which project a conversation belongs to.
• Chat settings, such as a name you give a chat and whether it's pinned, archived, or shared (and when).
• Technical details about each response, such as which AI model was used, how many tokens it used, how long it took, which of your saved memories were provided to the AI model, and the web sources used.

Please avoid sharing sensitive information such as passwords, government ID numbers, financial account numbers, or health details in conversations unless you're comfortable with it being stored and processed as described here.

Memories

AI May Byte can remember things across conversations, but only with your approval:

• Memory proposals. After you send a message, an automated AI step reviews the latest exchange (and a few earlier messages) and may propose something worth remembering, such as a preference you stated. Before this step, text that looks like a password, API key, or similar secret is automatically redacted, and proposals that look like secrets are discarded.
• Your review. Proposals wait on your Memories page until you approve or reject them. Only approved proposals become memories.
• Saved memories and their history. We keep your memories and a history of changes to them (for example, when a memory was created, updated, or replaced).
• Rejected proposals are kept so that the same thing isn't suggested again. They aren't shown in the app and aren't used in conversations.

Web search and webpages

• Search queries. When the assistant decides a web search would help answer you, it writes a search query, which may be based on what you asked.
• URLs. If you ask the assistant to read a webpage, or it chooses to read one of its search results, the page address is processed by our servers.
• Sources. The titles and links of web sources the assistant used are saved with its reply so you can see them later.

Usage and technical information

• Service logs. Our servers keep operational logs to run, debug, and protect the service. These record things like which feature or tool was used, whether it succeeded, how long it took, and counts (such as the number of memories or sources used). For web tools, logs include the website domain and a shortened version of the search query (up to 120 characters). Logs are designed not to include your messages, passwords, or access tokens.
• Hosting and network information. Like most websites, our hosting provider processes technical information such as IP address, browser type, the pages requested, and request times to deliver and secure the service.
• No analytics or advertising trackers. AI May Byte doesn't currently use third-party analytics, advertising, or social media tracking tools.

Billing information

Byte+ is $9.99 per month and is billed by Stripe. We receive Stripe's customer id, subscription id, price, status, and the current billing period. We don't receive or store your full card number. Stripe processes the card. We keep the subscription record while your account exists so we can tell which plan you're on, and we delete it when your account is deleted. You are charged only if you subscribe.

Voice

You can hold or tap the microphone to record up to 60 seconds. The recording is sent to our servers and then to OpenAI, which turns it into text. We use that text the same way as a typed message: it goes through the normal chat, and the transcript is saved with the conversation. We do not save the recording itself in our database, and we do not keep a copy of the audio file after the transcription request finishes.

Spoken replies are off until you turn them on. The switch is stored in this browser only. When it is on, we send the assistant's written reply to OpenAI to generate speech in the Verse or Sage voice you selected. That choice is stored in this browser only. That voice is not a recording of a real person. We do not save the spoken audio. You can stop playback, and you can keep typing if recording, transcription, or playback fails.

For each transcription and spoken reply we store a usage record: the time, whether it was transcription or speech, an audio length or character count, and an estimated cost. The record does not include the recording, the transcript, or the words that were spoken. It is deleted with your account.

OpenAI may keep voice requests in abuse-monitoring logs for up to 30 days, as described below. Your browser asks for microphone permission. If you refuse it, typing still works. A device's own dictation keyboard, if you use one, is handled by your device rather than by this voice feature.

Live conversation is a third way to talk, separate from typing and from voice notes. It stays off until you press Start live conversation. It ends when you press End live conversation, leave the page, or reach two minutes. The page does not turn the microphone on by itself. While it is on, your microphone audio and the assistant's spoken replies go through a live connection to OpenAI so you can talk and interrupt each other. We do not save that audio. We save the written transcript in the conversation, the same way as other messages. A usage record stores the time, that it was a live session, the reserved two-minute length, and an estimated cost. It does not include the audio or the words. The reserved cost is for the full two minutes even if you end sooner. Live conversation uses the Verse or Sage voice you selected, with instructions to speak in a relaxed conversational way. It uses the same personality, approved memories, and conversation as typed chat. It does not search the web. Typed chat still can.

How we use information

We use information to:

• provide AI May Byte: generate AI responses, keep your conversation history, personalize your assistant, and remember things you've approved
• run web searches and read webpages when the assistant needs current information, and show you the sources
• keep your account signed in and secure, and prevent abuse, fraud, and misuse
• keep a record of your age confirmation and your agreement to our policies
• troubleshoot problems, monitor performance and costs, and improve the service
• process Byte+ subscriptions and payments through Stripe when you subscribe
• communicate with you about your account, security, and important changes
• comply with legal obligations and enforce our Terms of Service

We don't use your information for targeted advertising, and we don't sell it.

How AI processing works

To generate a response, we send our AI model provider:

• your new message and recent messages from the same conversation
• for a long conversation, a short summary of earlier messages in that same conversation. The summary is stored with the conversation, deleted when you delete the conversation, and is not added to your saved memories
• personalization information from your profile (such as your name, pronouns, your chosen character and any custom name you've given your assistant, and About-you details)
• memories that seem relevant to the conversation
• the date and time, and instructions that shape the assistant's personality and behavior
• web search results or webpage text, when the assistant uses its web tools
• text extracted from a PDF, TXT, or Markdown file you attach to a conversation, so the assistant can answer questions about it
• a short microphone recording, when you use voice input, so it can be transcribed
• live microphone audio and the assistant's spoken audio, only while you have started a live conversation, so you can talk and interrupt each other. The written transcript is saved with the conversation. The audio is not
• the assistant's written reply, when spoken replies are turned on, so it can be read aloud in an AI voice

The memory proposal step described above also sends the latest exchange and a few earlier messages (with secret-like text redacted) to the AI model provider.

Our AI model provider is OpenAI. AI May Byte does not train its own AI models on your content, and we send requests to OpenAI with the setting that asks it not to store them for later retrieval. Under OpenAI's API data policy, data sent through its API is not used to train OpenAI's models, and OpenAI may keep requests and responses in abuse-monitoring logs for up to 30 days, or longer if required by law or to protect against harm.

Web search and reading webpages

• When the assistant searches the web, the search query is sent to our search provider, which returns results. The assistant is instructed not to include personal details in search queries, but queries may still reflect what you asked.
• When the assistant reads a webpage, our servers request the page directly from that website. The website sees a request from our servers, not from your device or IP address.
• For security, the assistant only reads public webpages. It refuses local, private, and internal network addresses.
• Websites and search results are third-party content. Their own privacy policies apply if you visit them.

Documents you attach

• You can attach a PDF, TXT, or Markdown file to a conversation. The file is read on our servers so we can extract its text. We store that text with your account and that conversation, along with the file name, type, size, and whether the text was shortened. We do not keep the original file.
• The extracted text is sent to our AI model provider with the conversation when the assistant answers a question about it. It is treated as reference material, not as instructions to the assistant.
• A file is limited to 3.5 MB. A conversation can hold up to 5 documents. Most accounts can add up to 20 documents per day. Text past a set length is shortened, and scanned PDFs that contain no selectable text are not read.
• A share link does not include attached documents.
• You can remove an attachment from the chat. Removing it deletes the extracted text. Deleting the conversation, or your account, deletes it too.

How information is shared

We share information only as needed to run AI May Byte, or as described here:

• Service providers that process information on our behalf, including:
  • hosting and content delivery
  • database and sign-in (authentication)
  • AI model processing
  • web search
  • email delivery, used to send account-related messages such as invitations, password recovery, sign-in and authentication emails, and other necessary service emails. Our email delivery provider receives the recipient's email address, the content of those account emails, and the message-delivery information needed to send them. It doesn't receive your conversations, memories, profile details, or AI prompts.
  • payment processing (once Byte+ launches)
• Legal and safety reasons. We may disclose information if we believe in good faith that it's required by law, legal process, or a valid government request, or that it's necessary to protect the rights, safety, or property of our users, the public, or us.
• Business transfers. If AI May Byte is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy or one at least as protective.
• With your consent. We may share information when you ask us to or agree to it.
• Chats you share. When you create a share link for a chat, anyone who has the link can read the chat's messages, the assistant's replies, the web sources shown with them, and the chat's name, as they were when you created or last updated the link. They don't need an account. Your name, email address, profile, memories, projects, and attached documents aren't shown. Anyone you send the link to can pass it on, so only share chats you're comfortable with others seeing. Shared pages ask search engines not to index them. You can stop sharing at any time from the chat's menu, and the link stops working right away. Deleting the chat also turns off its link.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising.

Cookies and browser storage

AI May Byte uses a small amount of browser storage, all of it needed for the app to work:

• Sign-in cookies. These keep you signed in. They're set by our authentication system, marked so that page scripts can't read them, and sent only over secure connections in production.
• Session storage. When you open your Profile, the app remembers which page you came from so the close button can take you back. This is cleared when you close the browser tab.
• Spoken replies switch. If you turn spoken replies on or off, that choice is saved in this browser's local storage. It isn't sent to our servers.

We don't use advertising cookies, analytics cookies, or cross-site tracking. Fonts are served from our own site, not loaded from a third-party font service.

How long we keep information

• Account, profile, conversations, projects, memories, memory history, and memory proposals: kept until you delete them (where the app allows) or until your account is deleted. Archived chats are kept like any other chat until you delete them. A long conversation can also store a rolling summary of its earlier messages; that summary is deleted with the conversation and is not a saved memory.
• Deleted conversations: when you delete a chat, its messages are deleted from our database. Memories you approved from that chat stay until you delete them, and memory proposals from that chat that you haven't reviewed stay on your Memories page.
• Share links: a shared chat stays readable through its link until you stop sharing it, delete the chat, or your account is deleted.
• Age and agreement confirmations: kept with your account until your account is deleted.
• Deleted memories: when you delete a memory, it's removed, and its text is erased from its change history and from the proposal that created it. A record that a memory was deleted (without its content) remains until your account is deleted.
• Documents you attach: the extracted text, file name, type, and size are kept until you remove the attachment, delete the conversation, or your account is deleted. The original file is not stored.
• Voice usage records: kept until your account is deleted. They contain counts and an estimated cost, not the recording or the words.
• Voice audio: the recording and the spoken audio are not stored in our database. They are discarded after the OpenAI request that uses them. OpenAI may keep them in abuse-monitoring logs, as described above.
• Service logs: kept by our hosting and database providers for up to 30 days.
• Backups: automatic database backups aren't currently enabled for AI May Byte. If we enable them, we'll update this policy to say how long backups are kept.
• AI processing: OpenAI may keep requests and responses for up to 30 days, as described in How AI processing works.
• Other service providers: information processed by our search provider and other service providers is kept according to their own terms and privacy policies.

Your choices and controls

In the app, you can:

• view and edit your profile and About-you details, and clear optional fields
• approve or reject memory proposals
• view and delete saved memories on the Memories page
• rename, pin, archive, and delete conversations, and create or stop share links, from each chat's menu
• turn spoken replies on or off. The choice stays in this browser.
• start or end a live conversation. It does not start on its own, and it stops after two minutes if you leave it running.
• remove a document you attached to a chat. That deletes the extracted text.

Not yet available in the app:

• Deleting individual messages. You can delete a whole conversation, but not single messages within it. Deleting a memory doesn't delete the chat messages it came from, and deleting a chat doesn't delete memories you approved from it. Contact us at ashthedev0@gmail.com if you'd like individual messages deleted.
• Deleting your account. Contact us at ashthedev0@gmail.com from the email address on your account. When we delete your account, your profile, conversations, messages, attached documents, projects, memories, memory history, memory proposals, voice usage records, and agreement records are deleted from our database. Limited information may remain in service logs and with our service providers for the periods described above.
• Exporting your data. Contact us at ashthedev0@gmail.com to request a copy of your information.

Canceling Byte+ does not delete your account or data.

Security

We use reasonable safeguards to protect your information. For example:

• connections are encrypted using HTTPS
• database access rules keep each user's data separate from other users' data
• sign-in cookies can't be read by page scripts
• secret-looking text is filtered out of memory proposals
• The assistant's web access runs on our servers and blocks private and internal network addresses

No method of transmission or storage is completely secure, so we can't guarantee absolute security. If you believe your account has been compromised, contact us at ashthedev0@gmail.com.

Children's privacy

AI May Byte is only for adults 18 and older. It is not intended for anyone under 18, and we don't knowingly collect personal information from them. If you believe someone under 18 has created an account or given us personal information, contact us at ashthedev0@gmail.com and we'll delete it.

International processing

Our database is hosted in the United States (Northern California), and our application servers run in the United States (Washington, D.C. area). Our hosting provider's global network may handle your requests at a location closer to you, and our AI model, search, and email delivery providers may process information in the United States and other countries where they operate. These countries may have different data protection laws than where you live.

Your privacy rights

Depending on where you live and the laws that apply to you, you may have rights concerning your personal information. Where applicable, these may include the right to:

• request access to the personal information we hold about you
• request that we correct inaccurate personal information
• request that we delete your personal information
• request a copy of your personal information in a portable format
• object to or ask us to restrict certain processing
• exercise other rights provided by applicable law

To make a privacy request, email us at ashthedev0@gmail.com. We may need to take reasonable steps to verify your identity before fulfilling a request, such as asking you to write to us from the email address on your account. We won't treat you differently for making a privacy request.

You can also view, edit, and delete some of your information yourself in the app, as described in Your choices and controls.

Changes to this policy

We may update this Privacy Policy from time to time. We'll change the "Last updated" date above, and if we make significant changes we'll notify you by email or in the app before they take effect.

Contact us

AI May Byte, operated by Ash The Dev
Email: ashthedev0@gmail.com