AICoven Privacy Policy

Last updated: November 2026

This policy says what AICoven collects, where it is kept, who else handles it, and what you can do about it. It covers the AICoven apps for iPhone, iPad, and Mac, and the website at aicoven.ai.

1. Who We Are

AICoven is operated by Andreea Elena Papillon, based in the United Kingdom. We are the controller of the personal data described here and comply with the UK GDPR and the Data Protection Act 2018.

Email: hello@aicoven.ai

2. Data We Collect

Category	What it is	Why we hold it
Account	Email, name, and any profile details you add (organisation, role, bio, picture); your sign-in identifier	To sign you in and show who you are
AI accounts	The keys and sign-ins for the AI providers you connect, encrypted	So your agents can run on your own accounts
Messages and memory	Your messages, agents' answers, and what a coven remembers	To provide the service
Covens, agents, and threads	Coven names, agent names and instructions, thread titles	To organise your work
Connected apps	For each app you connect: your sign-in to it, encrypted; your account name and ID there; and what you allowed each coven to open	So agents can work where your files and messages are (section 6)
Tasks	For work gathered from your apps: a title, a link, where it came from, who asked, and when	To show you what is waiting on you
Assets and files	Files you or your agents make or attach, with their names and sizes	To keep and share your work
Voice	A recording you make with hold-to-talk, for up to 24 hours, and its transcript	To turn speech into a message
Devices	A device ID and push token for each device you sign in on	To send notifications
Usage	Per request: the model used, token counts, cost, timing, and whether it succeeded	Budgets, limits, and diagnosis
Subscription	Apple's transaction and product identifiers, your plan, and its renewal state	To give you what you paid for
Website forms	What you type into the contact, waitlist, and roadmap forms	To reply to you

We do not sell or rent personal data, and we do not use your content to train AI models.

3. How Your Content Is Protected

All traffic between your devices and our servers uses TLS (HTTPS).

Encrypted at rest. The text of your messages, agents' answers, the content of a coven's memory, the working context of a thread, asset files, your AI account keys, and your sign-ins to connected apps are stored encrypted.

Your key. Message and memory content is encrypted with a key created on your device and kept in iCloud Keychain. The app sends that key with each request so our servers can read what the request needs, in memory, while they handle it. Our servers also hold a copy of your key, itself encrypted, in these cases:

while a turn is running or waiting for your answer, so it can finish;
for up to 30 minutes when you open a shared coven;
inside a key you create for another app (section 10). That key carries an encrypted copy of yours, which only our servers can open.

Keys our servers hold. Some content has to be readable when your devices are off, so it uses a key our servers keep, encrypted under a master key:

a repeating job, for up to 30 days at a time, until you renew or revoke it;
answers to questions asked from Slack, as section 7 describes;
an asset you choose to make readable by our servers;
your AI account keys and your sign-ins to connected apps.

A shared coven has its own key, which is stored once for each member, encrypted with that member's key.

Stored readable. These are not encrypted in our database beyond the encryption our hosting provider applies to its disks:

the titles of threads (a thread's title is taken from its first message), tasks, memories, and assets, and file names;
coven names, agent names, and agent instructions;
memory tags;
files attached to a chat, and voice recordings until they are deleted;
voice transcripts;
a repeating job's title and prompt. A prompt an agent sets up can include recent text from the conversation it was set up in. A job with no key also stores what its runs write, and the app marks it "Not encrypted";
an agent's working list of goals and steps for a thread;
task details gathered from connected apps (section 2);
usage records.

When an agent uses a tool on your Mac, the request and its result are held in our database, readable, for a few minutes while they are delivered.

4. Where Your Data Is and Who Handles It

Our servers and database are in the United States, on Google Cloud. These companies handle personal data for us:

Company	What it does for us	What it receives
Google Cloud	Hosts our servers, database, and file storage	Everything in section 2, encrypted or readable as section 3 describes
Google Firebase	Sign-in, delivery of push notifications, and app analytics and crash reports	Your email and sign-in identifier; notification contents (section 12); the measurements in section 13
Apple	Subscriptions and delivery of notifications to your devices	Purchase records; notification contents
Resend	Sends our emails	Your email address and name, and the content of each email
Slack	Our own internal workspace, where we are told of subscription events	Your email, plan, price, and App Store country when a subscription starts or changes
DuckDuckGo	Web search for agents	The search an agent runs. It comes from our servers, not your device
Google Analytics	Website statistics, only if you accept the banner	Pages viewed, with your IP address shortened

The website's roadmap page reads a public Trello board from our servers; nothing about you is sent to Trello.

The AI providers and apps you connect are chosen by you and are covered in sections 5 and 6.

5. AI Providers

AICoven does not supply AI models. Each agent runs on an AI account you connected: a cloud provider such as OpenAI, Anthropic, Google, or Mistral, a cloud your organisation uses, or an agent or server you host yourself.

When an agent works, we send that provider what the work needs. That can include your messages, the coven's memory, content the agent read from a connected app, the contents of files and the output of commands on your Mac if you allowed that, and a voice recording to be transcribed. The provider handles it under its own terms and privacy policy, which you agreed to with them.

An agent you host yourself may still send your content to a cloud service. Hosting it does not keep the content on your hardware.

6. Connected Apps

You can connect GitHub, Linear, Notion, Slack, Figma, and Google Workspace (Drive, Docs, Sheets, and Slides). For developers, Firebase and Google Search Console can also be connected, read-only.

What applies to all of them

We store your sign-in to the app, encrypted, and your account name and ID there.
Each coven uses an app only if you turn it on for that coven, and only for the files, pages, channels, repositories, or teams you choose. A coven starts as read only. You can change it to Read and make changes.
With Read and make changes, an agent can act in the app in your name. In Linear and Notion it makes changes without asking you each time. In Slack, a message in your name is sent only after you approve its exact text.
What an agent reads from an app is sent to the AI provider that agent uses (section 5). It is not stored as a copy of the file or message, but the thread's encrypted working context and summary can carry facts from it.
Work waiting on you (an assigned issue, a review request, a comment that mentions you) is listed in Tasks with a title, a link, where it came from, and who asked. These details are stored readable. The text of the issue, comment, or message is not stored.
We never use data from a connected app to train AI models, never sell it, and never share it except as this policy describes.

Google Workspace

AICoven asks Google only for access to the files you pick or create with it, plus your email address to tell your accounts apart.
A file's content is used to show it to you, to answer your requests through the AI provider you chose, and to make the changes you ask for.
If you save a Google Doc to a coven's memory, we keep an encrypted copy of its text there and update it when the Doc changes. In a shared coven, every member can read it.
AICoven's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Notion. As for Google Docs, a page you save to a coven's memory is kept there as an encrypted copy.

Sending work out. When you send an asset to Notion, Google Docs, Google Slides, or Slack, a copy is created there under your account. That copy is then governed by that app, and removing it there does not remove the asset from AICoven.

Disconnecting. Disconnecting an app deletes your sign-in to it from our servers and stops every coven using it. Disconnecting Slack also revokes the sign-in at Slack. For the other apps, also remove AICoven in that app's own settings if you want its access revoked there. Deleting your AICoven account revokes all of them.

7. Slack

If you connect Slack, AICoven works in your Slack workspace in two ways: as you, with your Slack sign-in, and as the AICoven app.

What AICoven reads

Messages in the channels you choose for each coven, and your direct messages only if you turn them on for that coven. An agent reads them only to answer a request in that coven.
Messages from the past week that mention you in those channels, shown to you in Tasks and On me so you can mark each one Mine or Not mine.
Questions you send to the AICoven app: an @AICoven mention in a channel you set to answer, or a direct message to the app.
A message you share with Send to AICoven.
Your Slack user ID and name, and your workspace's ID and name, to tell your accounts apart.

What AICoven stores

Your Slack sign-in tokens, encrypted.
The channels you chose for each coven.
Questions you ask from Slack and the agent's answers, encrypted, as an AICoven conversation. So that AICoven can answer while the app is closed, these are encrypted with a separate key for that coven, which AICoven keeps on its servers (itself encrypted) while Answer from Slack is on. It expires 30 days after you last opened the app, and turning Answer from Slack off or disconnecting Slack revokes it.
A message an agent drafts to send as you: its text, encrypted, until you approve or decline it, or for 24 hours. The text is then cleared.
For a task made from Slack: its title, a link to the message, the channel's ID and name, who sent it, and when. Task titles are stored unencrypted, as every task title in AICoven is. A mention's title names only who sent it and where, such as "Mention from @maya in #design"; a Send to AICoven title is the words you submitted.
Your Mine and Not mine answers, by the message's channel and timestamp, so a mention isn't offered again.
Slack's event IDs, for one day, so a request Slack retries isn't handled twice.

What AICoven doesn't store

Messages an agent reads or searches to answer a request are not stored as messages. They are kept, encrypted, only while that answer is being written, although a conversation's encrypted summary can carry facts from them, as it can from any connected app.
The text of a message behind a Slack task is read from Slack when you open the task, not stored.

What AICoven posts

As you: only the exact text you approved, once.
As the AICoven app: answers to questions you asked it; summaries, only in the channels you chose for summaries; and, if you turn it on, your task reminders as a direct message to you.

AI providers. When an agent reads Slack messages to answer you, their text is sent to the AI provider that agent uses, one you connected, under that provider's terms (section 5).

What AICoven never does. It never uses Slack data to train or fine-tune AI models, never sells it or shares it with unrelated third parties, and never exports your workspace in bulk. AICoven's logs record IDs and statuses, never message text, user names, or channel names.

Disconnecting. Settings → Connected Apps → Slack → Disconnect revokes your Slack sign-in and deletes it, and your covens stop using Slack. Removing the AICoven app from your Slack workspace signs everyone in that workspace out of it. To delete anything else AICoven stored, see sections 15 and 16.

8. Shared Covens

In a shared coven, the other members can see your name and email address, the messages in its threads, the coven's memory, and its assets. A thread's summary can carry facts an agent read from one member's connected apps. Your own memory in Strix and your gathered tasks stay private to you.

When someone is removed from a shared coven, what they wrote there stays. If you delete your account, your messages in shared threads are deleted, and so is every coven you own, including a shared one other people use.

When you invite someone, we email the address you give with your name and the coven's name.

9. Agents on Your Mac

If you turn on Let agents work on this Mac, agents can read and write files in the folders you add, and run commands. A command runs with your own user account's permissions. What an agent reads or a command prints is sent through our servers to the AI provider that agent uses.

10. Keys for Other Apps

You can create a key that lets another app read one coven's memory, facts, and assets. You choose what else it may do, and when it expires. Anyone who holds the key has that access until it expires or you revoke it, so treat it like a password. We keep a record of each key (its name, what it may do, and when it expires), not the key itself.

11. Memory and Search

To find the right memory for a request, our own servers turn each memory's title and text into a numerical representation and store it beside the encrypted memory. No outside company does this. The representation is not the text, but it is derived from it.

12. Notifications

A notification about your own work (an approval, a finished or failed run, a repeating job) is encrypted so that only your device can read its details; Apple and Google see only a general line. A notification that someone wrote to you in a shared coven is not encrypted in this way: it shows the thread's title, the sender's name, and the start of the message.

Keep details out of notifications, in a coven's settings, replaces that coven's notifications with a general line.

13. Website, Cookies, and Analytics

Website. The site sets no cookies of its own. It stores two values in your browser: whether you accepted analytics, and which appearance you picked. Google Analytics loads only if you accept the banner, and then sets its own cookies.

A page opened from a share link carries no analytics.

Apps. The apps send Google Firebase usage and performance measurements (for example which screens are opened, counts and lengths, launch and hang times, the app version) and crash reports. They do not include your messages, memory, or other content, and are not tied to your account ID. There is no setting to turn this off.

Link previews. When you choose to show a preview of a web link, your device fetches the page directly, so that website sees your device's IP address.

14. Data Retention

Account, messages, memory, covens, and assets: kept until you delete them or your account.
Voice recordings and other temporary files: deleted within 24 hours.
A message drafted to send as you in Slack: until you answer, or 24 hours.
The step-by-step record of a turn: deleted 3 to 7 days after the turn ends.
A share link's copy of an asset: deleted a day after the link expires or you revoke it. A record that the link existed remains.
Invitations: expire after 14 days.
Server logs: kept for a limited period. They record IDs and statuses, not your content.
Subscription records: kept as long as law and audit require.

15. Deleting Your Account

You can delete your account in the app, under Settings. This revokes your connected apps and deletes your messages, memory, agents, threads, assets, AI account keys, repeating jobs, keys for other apps, devices, usage records, and the covens you own, then your sign-in and your entry in our email list.

We keep three things afterwards: a marker that the deleted sign-in existed, so it cannot be reused by mistake; Apple's transaction records for your purchases; and anything you sent through the website's waitlist form, until you ask us to remove it.

16. Your Rights (UK GDPR)

You have the right to:

Access your data
Correct inaccuracies
Request deletion
Receive a copy of your data
Object to or restrict processing
Withdraw consent you gave, such as for website analytics

To use any of these, email hello@aicoven.ai. You can also complain to the UK Information Commissioner's Office (ICO).

17. Why We Are Allowed to Use Your Data, and Transfers Abroad

To provide the service you signed up for (contract): your account, content, connected apps, devices, and subscription.
Our legitimate interests in running a safe and reliable service: usage records, crash reports and app measurements, logs, and being told of subscription events.
Your consent: website analytics, and emails about new releases, which you can stop at any time.
Legal obligation: subscription records.

Your data is stored in the United States and handled by the companies in section 4, some of which are outside the UK. Where data leaves the UK, we rely on the safeguards UK data protection law provides, such as the UK–US data bridge or the International Data Transfer Addendum.

18. Children's Privacy

AICoven is not intended for anyone under 16 years old. We do not knowingly collect data from children.

19. Changes to This Policy

We may update this policy when the service or the law changes. We will announce material changes in the app or by email.

20. Contact

Questions about privacy or data protection? Email hello@aicoven.ai.