What we keep
Your account. You sign in with Apple or Google, through Clerk. We receive your name, email address and photo. If you use Apple's Hide My Email, we only see the relay address.
- What you make and say: chats, memories, agents and their instructions, files you add or an agent makes, docs, sheets, decks, notes, tasks, events, routines and sites.
- Your settings, the devices signed in to your account, and counters that enforce your plan's limits.
- An activity log of what your agents did: the tools they used, approvals and cost. It never holds the words of your chats.
- Feedback you send from the app, with the logs and the screenshot you choose to attach.
- For a site you publish, how many times each link was clicked each day. No visitor is identified.
Private chats are the exception. Nothing in one goes to memory or the activity log, and the whole chat is removed after a day.
Who helps us run it
Each service gets only what its job needs.
- Clerk handles sign-in and the sessions that go with it.
- Convex is our database and backend. It stores your data in the European Union.
- OpenRouter and OpenAI run the language models. When an agent writes a reply, your message and the context it needs go to the provider, which sends the reply back. OpenAI also carries live voice calls. OpenRouter transcribes voice notes and turns text into the search index for your memory and documents. These providers may process data outside the European Union, and each has its own terms for what it does with what it receives.
- TypeSafe, reached through OpenRouter, makes small yes or no decisions for the agents where we have turned it on: which tools a message needs, whether a reply says it did something that no tool did, which face an agent shows, whether a fact is worth remembering, which of your lists, calendars or tags a new item belongs in, whether a note is worth waking you for in quiet hours, whether a form post on your site is spam, whether outside text tries to instruct the agent, and whether a check-in has anything to say. It reads only what that decision needs (the message, reply, fact, note, form post or outside text in question, the names of your lists, calendars and tags, and for a check-in what is due) and sends back numbers, never words. Private chats never reach it. TypeSafe does not train on what it reads, and it does not offer a zero retention option, so it is not used for anything else.
- Polar is the merchant of record for payments. It takes your payment details and sends receipts. We never see your card number.
- E2B runs your private cloud computer, if your plan includes one and you use it. What is on it is discarded when you delete your account.
- Vercel hosts this site and the web app, and passes the sites you publish through to our backend.
- Expo's push service delivers notifications, through Apple's notification service. The apps also ask Expo whether an update is ready.
- Cloudflare serves the desktop installers and update files. It sees your address when you download, and nothing from your account.
- Sentry receives crash and error reports from the apps and the web app, so we can fix what broke. A report says what failed, where in the app, and on which kind of device and system. Before it leaves your device, the words you wrote, email addresses, keys and tokens are taken out, and it carries no account ID. Sentry keeps the reports in the European Union. There are no analytics, session recordings or screenshots.
- If you ask an agent for the weather, prayer times or a currency rate, the place or currency you asked about goes to Open-Meteo, Aladhan or ExchangeRate-API.
- If you give an agent an email address at mail.erphele.com, the mail sent to it passes through Cloudflare or Resend, our email delivery providers. The agent reads that mail as text from outside, never as instructions.
Accounts you connect
If you connect Google, Erphele reads Gmail, Calendar or Drive for the services you chose. It can only read: nothing it has can send, change or delete. Disconnect in Settings and the access ends at once. You can also remove Erphele at myaccount.google.com/permissions.
On iPhone you can let Erphele read your Apple Calendar and sync Apple Reminders. iOS asks you first, and you can turn either off there.
The microphone, camera, photos and location are used only after you allow them on your device and start something that needs them. A live call streams audio to OpenAI for as long as it lasts.
What we do not do
We do not sell your data. We do not show ads, and neither this site nor the apps use ad trackers or third-party analytics. We do not use your content to train models. We do not read your chats, unless you send one to us as feedback.
This site
This site sets no cookies and has no analytics. It remembers your language on your device. Our host keeps standard server logs, such as your IP address and the page you asked for.
The web app at app.erphele.com asks you to sign in, and Clerk sets the cookies that keep you signed in.
Your choices
- Download everything. Settings, Data and privacy, Download my data as a zip gives you your chats, memories, agents, routines and files in one file.
- Delete old chats. In the same place, pick a number of days and older messages are removed. Pinned messages and memories stay.
- Delete your account. Settings, Delete account ends your plan, disconnects Google, discards your cloud computer and erases your agents, chats, memory, routines, docs and sites. It cannot be undone. The erasing starts at once and finishes in the background.
Questions or requests this page does not cover: write to hi@erphele.com.
Changes
If this page changes in a way that matters, the app tells you before it takes effect.