Privacy Policy
Draft version • Designed under CA SB 243, NY GBL Art. 47, and WA MHMDA
1. Private by Design
Acyri is built around the fundamental principle that your thoughts and conversations are private. We do not sell your personal data, do not use your conversations to train foundation AI models, and do not display third-party advertisements.
2. Real-Time Audio: Zero Storage
When you call your companion, audio streams directly over encrypted WebSockets via short-lived ephemeral tokens. We do not record, store, or archive your voice audio files. Speech audio is processed in volatile memory and immediately discarded.
3. Application-Layer Envelope Encryption
All message text and personal memories are protected with application-layer envelope encryption (AES-256-GCM) with individual keys managed by Google Cloud KMS. Plaintext messages are never stored unencrypted in database records.
4. Consumer Health Data & Consent
Under state consumer health data laws, personal health-related disclosures are treated with elevated protection and require affirmative consent. Sensitive memories remain in a pending state until you explicitly confirm you want them remembered.
5. 1-Tap Export and Permanent Deletion
You maintain total ownership of your data. You may download a full machine-readable JSON archive at any time or trigger an account hard delete, which shreds your encryption keys and deletes all records across databases and backups within 30 days.