Privacy Policy

• Your account. Your email address and an identifier from the sign-in provider. Passwords and login mechanics are held by Clerk, not by mefinx.
• Your graph. Everything you record: people (names, contact details, birthdays, pronouns, social links, free-text notes), events, places, and the relationships between them.
• A change log. An append-only ledger of edits made to your graph, so a mistaken change — particularly one made by the assistant — can be found and corrected. It is a record of what happened, not an undo button: fixing a wrong change means making the correcting change, which is recorded too.
• Location, if you enable it. Your device’s coordinates are used to work out where you currently are and match it against places in your graph. Only the most recent fix is kept; there is no location history.
• Connected accounts. If you link Google, the access tokens needed to read your contacts and calendar.
• Your consent. The date you agreed to the Terms and this policy, and which version you agreed to.

There is no advertising, no analytics or tracking pixels, and no third-party cookies. Cookies are used only to keep you signed in.

Your data is not sold, rented, or shared for marketing — ever. It is processed by a small number of services required to make the app work:

• Cloudflare — hosting and the database your graph lives in.
• Clerk — authentication and account management.
• Anthropic, Google, and Mistral — the language models behind the chat. When you ask a question, that question and the parts of your graph needed to answer it are sent to whichever model you have selected. This includes information about other people you have recorded.
• Google — if you connect it, your contacts and calendar are read (read-only) to help build your graph. Google Maps is used to turn coordinates into place names.

These providers process data under their own terms. Otherwise, data is disclosed only when the law requires it.

Most of what mefinx holds is about other people, who did not sign up and cannot see what you have written. Two things follow from that.

First, you decide what goes in. Recording someone means their details — and your notes about them — are stored and sent to a language model provider when you ask questions that involve them. Please record accordingly.

Second, if someone contacts the operator asking what is held about them, the honest answer is that these records belong to individual users and are not searchable across accounts. Requests about a specific person’s data will be passed to the account holder responsible for it. If you receive such a request about someone in your graph, you are expected to honor it.

mefinx is a notebook for remembering people, and it should hold what helps you do that — how you met, who they know, what they are into, when their birthday is. It is not a vault, and it should not be treated as one.

Please keep the following out of it entirely:

• Credentials. Passwords, API keys, door codes, account numbers, security answers.
• Financial and government identifiers. Card or bank details, national insurance or social security numbers, passport or licence numbers.
• Medical details. Diagnoses, treatments, or anything a person told you in confidence about their health.
• Work secrets and anything under an NDA. Employer-confidential material, unreleased plans, proprietary information — yours or someone else’s.

The short version: do not put anything in here that would be worth stealing. This is a personal project rather than an audited platform, and the honest way to run one is to be clear about what it is fit to hold. See the Terms for where liability sits if something does go wrong.

If you install mefinx as an app, parts of your graph are stored on that device so it works offline and loads quickly. That cache is cleared when you sign out, and removed if you stop using the installed app.

In an ordinary browser tab nothing is kept: the app runs from memory for that session only, and closing the tab leaves nothing behind. On a shared or public computer, sign out when you are done either way.

• Edit or delete anything in your graph at any time.
• Disconnect Google, or decline the location permission, without losing the rest of the app.
• Download everything you have recorded, whenever you like — “Download my data” in Settings gives you a JSON file of every person, place, event, circle, and connection in your graph.
• Delete your account yourself — “Delete my account” at the bottom of Settings erases your entire graph, your change log, your stored API tokens, and your login. It is immediate and cannot be undone, so download your data first if you want a copy.