Privacy policy.

Summary

This policy covers all of aiyourway.io: the public pages, the contact form, aggregate site analytics and the signed-in product, including your account, conversations, goals, reflections and memories. AI Your Way is the data controller and is operated from the United Kingdom. Contact hello@aiyourway.io.

What we collect

The email address and password you use to create an account, and any optional name, timezone or preferences.

What you write or say in the product: your messages, reflection answers, goals, and any history you choose to paste in from another assistant. This is stored privately under your account with row level security, and is sent to named processors to produce a reply.

Memories are only stored after you explicitly confirm them. You can correct or retract any memory, and deletion genuinely deletes.

Any message you send through the contact form.

Aggregate, anonymous usage counts (see cookies and analytics). We do not use third-party advertising trackers.

Why we use it

To run your account and the service; to email you about your account and any product news you asked for, which you can stop at any time; and to keep the service secure and improve it.

Our lawful bases are your consent for marketing emails and for storing memories, our contract with you for running the service, and our legitimate interests in keeping it secure.

Speech and language processing

Your text goes through Lovable infrastructure and the Lovable AI Gateway to a Google Gemini model to build a response. Speech-to-text goes through the AI Gateway to an OpenAI transcription model. Text-to-speech is served by ElevenLabs when configured, with an OpenAI voice fallback via the AI Gateway. AI Your Way does not use your content to train shared models. Provider handling follows their applicable terms and policies. Under current workspace defaults, Lovable may retain AI Gateway request and response data for up to 90 days for operational purposes. Providers apply their own operational retention independently.

Local, database, and third-party state

Two different things can hold your content. Our database: your account, conversations, reflections, goals, confirmed memories, pasted history and contact details are stored here under row level security and are covered by your export and deletion rights. Third-party operational retention: processors such as Lovable, Google, OpenAI and ElevenLabs may temporarily retain the requests we send them for their own operational purposes. We do not claim instant self-service export or deletion, and we do not claim that provider data is never logged.

Sharing

We do not sell your data and we do not share it with third parties for their own use. We use a small number of processors strictly to run the service: our hosting and backend provider (Lovable infrastructure and Lovable AI Gateway), our model providers (Google Gemini, OpenAI and ElevenLabs, all via the paths above), and our email provider. They are bound to protect your data and act on our instructions. We may disclose data if the law requires it.

Keeping and deleting

We keep waitlist data until you unsubscribe or ask us to delete it. Users can request export or deletion of their data at any time. These requests are handled manually, and we confirm the timing when we act on the request. We do not publish a fixed deletion SLA and we do not offer instant self-service deletion today.

Your rights

Under UK data-protection law you have rights of access, correction, deletion, portability, objection and restriction, and you can withdraw consent at any time. Email hello@aiyourway.io to exercise them. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies and analytics

We do not use tracking or advertising cookies. We measure aggregate, anonymous usage such as page views and key actions using first-party, cookieless analytics stored on our own systems, and it does not identify you. We may use strictly necessary storage to make the site work.

International transfers

Where a processor is outside the UK, we rely on appropriate safeguards such as UK-approved standard contractual clauses.

Children

The service is not directed at, and may not be used by, anyone under 18.

Changes

We will update this policy as the product develops and change the date above.