Privacy

Last updated 2026-05-19

Plain English version: we don't want your data. The app is built to use the minimum identifier needed to enforce a daily quota. Your chats live in your browser, not on our servers. We don't run analytics on prompt content.

What lives on your device

  • Conversations and messages (IndexedDB)
  • RAG documents you upload (IndexedDB)
  • Personas, settings, and your selected mode (IndexedDB + localStorage)
  • A random device UUID generated on first visit (localStorage)

Clearing your browser data clears all of the above. We don't have a server- side copy.

What we store on our servers

  • Daily prompt count. Keyed by your device UUID (anonymous tier) or your account ID (signed in). If no device UUID is present, the fallback key is a salted, one-way hash of your IP — never the raw address. Resets at 00:00 UTC. Stored in Upstash KV.
  • Spend telemetry. Aggregated cost totals for the infrastructure we run. No per-user attribution.
  • Account identity(only if you sign up): managed by Clerk. Email + OAuth provider (Google / Apple) per your choice. Clerk's privacy policy applies in addition to ours.

We do NOT store: chat content, prompt text, message metadata beyond the daily counter, IP address (after request handling), or any analytics on what you talk to the model about.

Third parties that see your prompts

Generating a response or an image requires sending your prompt through our infrastructure, which is composed of several third-party services. These requests are made from our servers, so each service receives the prompt content and our server's address — not your IP or any identifier that ties the request back to you. These services have their own privacy policies, which apply independently of ours. We list categories of processors below; specific provider names are available on request via the contact channel on the About page.

  • Chat inference — your chat prompts are processed by an upstream AI inference service to generate responses.
  • Image generation — your image prompts are processed by an upstream image-generation service.
  • Web search — when the assistant decides to look something up on the web, your search query is sent to a third-party search provider.
  • Venue / event lookup — when the assistant calls a local recommendation tool, your venue or event query is sent to one or more third-party location and event services. They see the query (e.g. "Mexican restaurants near Echo Park"), not your full chat.
  • Authentication (signed-in users only) — a third-party identity provider handles sign-up, sign-in, and session management. Sees your auth identity, not your chats.

Deleting your data

  • Anonymous users:clear your browser's storage for this site. Your device UUID + all local conversations go with it. The server-side daily counter expires at end-of-day UTC regardless.
  • Signed-in users: delete your account from your profile page; this removes the identity record. Your local conversations are still on your device until you also clear browser storage.

Exporting your data

Go to Settings → Data → Export all data. You'll get a JSON file with every conversation, message, persona, and RAG document stored locally.

Contact

Questions or requests: hello@foogpt.app.

Also see: About · Terms