Personia builds a private, evidence-backed model of who you are — a “Digital DNA.” It is local-first by design: your data lives on your device, not on our servers. This policy explains exactly what happens to it.
The short version
Your DNA — memories, traits, values, evidence — is stored on your device (Apple SwiftData). We have no server-side database of it in the live app.
There is no account and no login. We don’t know who you are.
We don’t run analytics, tracking SDKs, or advertising. We don’t sell or share your data.
The only text that ever leaves your device is what you choose to have analyzed — sent to an AI model to extract traits — and it’s never stored by us.
What stays on your device
Everything that defines your DNA lives locally: your captured notes, voice memos, and moments; the media files themselves; every extracted trait, claim, value, and the evidence snippets behind them; your confidence history; and your settings. Uninstalling the app deletes this data from your device.
What leaves your device — and where it goes
AI extraction (the one data flow). To turn a capture into evidence-backed traits, the text of that capture is sent to a large-language-model provider (OpenRouter, which routes to the model you select). There are two modes:
Bring Your Own Key (default). If you add your own API key, requests go directly from your device to OpenRouter using your key, which is stored only in your device Keychain. The request never passes through a Personia server.
Free trial (optional). If you tap “Try it free,” a limited number of analyses are sponsored by us. These requests pass through a thin Personia proxy that relays them to OpenRouter using our key. The proxy does not log or store the contents of your messages. To enforce the free limit fairly, it uses Apple’s DeviceCheck — an anonymous, per-device signal that contains no personal information and does not identify you.
OpenRouter and the underlying model provider process this text to generate a response. Their handling is governed by their own privacy terms. Personia sends only the capture text needed for extraction — never your full DNA.
Optional integrations (you turn these on)
If you connect them, Personia reads deliberately narrow, metadata-first signals — processed to create private memories on your device:
Gmail: subjects and senders only — never message bodies.
Calendar: event titles and times.
Photos: on-device scene labels only — no photos are uploaded.
These connections are off until you enable them, and you can revoke access at any time in iOS Settings.
Your control
You choose what it learns from. Nothing is captured without your action.
Correct it. Marking a trait “This isn’t me” re-weights the evidence — an honest record is kept rather than silently erased.
Export it. Your DNA exports as me-core.json, a portable file you own.
Delete it. Remove individual memories in-app, or uninstall to erase everything on the device.
Children
Personia is not directed at children under 13 and is rated for a general audience of teens and adults.
Changes
If this policy changes materially, we’ll update the date above and reflect it here before the change takes effect.