Privacy

What we store about you

When you sign up, we get your email and display name from Clerk, our auth provider. When you chat with your private agent or paste writing samples, we store that content in our database.

All of your content (your entities, your conversations, any writing samples, any visitor email captured by your twin) is encrypted at rest with a key derived from a per-user data encryption key (“DEK”). Your DEK is itself encrypted with a master key that only our servers hold. No Mnemis operator can read your content without triggering a logged server action.

Entity names, embeddings, and search indexes are not encrypted — we need them in plaintext to power search. Think of names as titles and the rest as the body.

Your public twin

Your twin page (mnemis.app/twin/[you]) is public by default — that’s the whole point of the product. The twin can only answer from entities you’ve explicitly marked as public. Private entities never reach it, even if it would “help” the answer.

Every page carries an “AI representation of [Name]” disclosure. That is non-negotiable — we don’t remove it for paying customers, and we don’t have a setting to turn it off.

If a visitor leaves their email

When a visitor asks your twin something it can’t answer, the twin may offer them a field to leave their email. If they do, we store that email encrypted with your DEK and show it to you in your twin activity feed. You can turn this off in settings.

We do not email visitors ourselves, profile them, or share their email with anyone else — it exists solely so you can reply if you want to. Visitor emails are deliberately excluded from your JSON export because the visitor didn’t consent to re-export downstream.

Who we share data with

We use these third parties to run Mnemis:

• Clerk — authentication. Has your email and name.
• Neon — Postgres database. Holds your encrypted content.
• Vercel — hosting and CDN.
• Stripe — payments. Gets your billing details when you subscribe.
• OpenAI — embeddings (text-embedding-3-small). Receives entity content to embed; does not train on our traffic.
• Anthropic — your private agent model (Claude Haiku 4.5). Receives your messages and retrieved context.
• Google — your public twin model (Gemini 2.5 Flash). Receives only the visitor’s message plus context from entities you marked public.
• Upstash — rate-limiting counters (no content).

We do not sell your data. We do not run tracking ads.

Your rights

You can download everything you’ve put in as a JSON file at any time from Settings → Your data. You can hard-delete your account from Settings → Danger zone. Delete is immediate and irreversible; your username stays reserved so nobody else can impersonate you.

Cookies

We use cookies only to keep you logged in (via Clerk), to remember your twin’s visitors across messages (a random UUID, nothing identifying), and to remember when a visitor has already left their email. No analytics, no ads, no third-party trackers.

Changes

If this page changes materially, we’ll email active subscribers before the change takes effect.