Privacy Policy

Version 2026-07-22 · Last updated [DATE]

This policy explains what Aime collects, why, and what you can do about it. The controller of your personal data is [LEGAL ENTITY NAME], [REGISTERED ADDRESS], contact [PRIVACY CONTACT EMAIL]. [APPOINT AND NAME A DPO / EU–UK REPRESENTATIVE IF ONE IS REQUIRED]

1. What we collect

• Account data — username, password (stored only as an Argon2 hash, never in readable form), optional name, email address, time zone and display preferences, and the date you accepted these terms.
• Your content — the conversations, notes, topics, events, files and images you put into Aime.
• Billing data — your subscription status, plan, and renewal dates. Card details are collected and held by Stripe; we never see or store them.
• Usage and security data — token usage and cost totals used to apply your plan's daily allowance, plus authentication events (sign-ins, failed attempts, password changes) with IP address, kept to detect abuse.
• Diagnostics — error records, and any feedback you choose to send.

2. Why we use it

• To provide the assistant and store your content (performance of our contract with you).
• To take payment and manage subscriptions (performance of our contract).
• To keep accounts secure, prevent abuse, and enforce usage limits (our legitimate interests).
• To fix faults and improve the service (our legitimate interests).
• To meet legal and accounting obligations (legal obligation).

3. AI processing

Answering you means sending the relevant parts of your conversation and stored notes to [AI MODEL PROVIDER(S)], who process them to generate a response and act as our processor under contract. [CONFIRM AND STATE YOUR PROVIDER'S TRAINING AND RETENTION TERMS — e.g. WHETHER YOUR API DATA IS EXCLUDED FROM MODEL TRAINING, AND FOR HOW LONG THEY RETAIN IT]

If you use web search, the search terms Aime derives from your request are sent to [SEARCH PROVIDER].

4. Encryption at rest

Your conversations and notes are encrypted on our servers under a key unique to your account. This protects your content if the storage media are compromised. It is not end-to-end encryption: the service can decrypt your content in order to run, so treat it as private-to-Aime rather than private-from-Aime, and please don't store secrets you would not want a hosted service to hold.

5. Who we share it with

We do not sell your personal data and do not use it for advertising. We share it only with the processors needed to run the service:

• [AI MODEL PROVIDER(S)] — generating responses.
• Stripe — payments and subscription management.
• [EMAIL PROVIDER] — verification codes and account email.
• [MESSAGING PROVIDER, IF ENABLED] — delivering messages you have asked Aime to send you.
• [HOSTING PROVIDER] — infrastructure.

We may also disclose data where legally required, or to protect our rights, users, or the security of the service.

6. International transfers

[LIST THE COUNTRIES DATA IS PROCESSED IN AND THE TRANSFER MECHANISM YOU RELY ON — e.g. STANDARD CONTRACTUAL CLAUSES]

7. How long we keep it

• Account data and your content: for as long as your account is active.
• After you delete your account: deactivated at once and permanently removed after 30 days.
• Authentication and security logs: [RETENTION PERIOD].
• Billing and tax records: as long as the law requires ([PERIOD]).

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or restrict processing, and to withdraw consent. In the app you can already correct your details, export everything as a .zip, and delete your account. For anything else, contact [PRIVACY CONTACT EMAIL]; we respond within [RESPONSE TIME].

If you are in the EEA or UK you may also complain to your local data protection authority. [ADD ANY US STATE-LAW DISCLOSURES THAT APPLY]

9. Cookies

We use a single cookie to keep you signed in, plus a cookie to remember a device you have marked as trusted. There are no advertising or third-party analytics cookies. [UPDATE IF YOU ADD ANALYTICS]

10. Children

Aime is not intended for children under [MINIMUM AGE], and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

11. Changes to this policy

If we make a material change we will notify you at the email on your account before it takes effect.

12. Contact

[PRIVACY CONTACT EMAIL]
[REGISTERED ADDRESS]