Privacy, in plain English

No lawyer fog. What we collect, what we don't, who can see it, how to delete it.

What we collect

When you sign up

• Your email address — to let you log in and keep your conversations attached to you.
• Your display name, if you tell Amili what to call you.

When you chat

• The messages you send and Amili's replies, stored per-user in a Cloudflare D1 database.
• Memories automatically extracted from your messages — facts like "Paul lives in Amsterdam" or "Paul is learning Spanish." Extracted by local regex patterns on our server, stored per-user. These are what make Amili remember you across sessions.
• Conversation titles and timestamps, so your sidebar works.

Technical data

• A session token in your browser's localStorage so you stay signed in. 7-day expiry.
• Aggregate, anonymous analytics via Plausible — page views, which features are used, no cookies, no cross-site tracking, no personally identifiable data.
• Standard server logs — request IPs, timestamps, user agents — kept 30 days for security and debugging, then deleted.

What we do NOT collect

• We do not collect your contacts, calendar, files, browsing history, or anything off-platform.
• We do not use third-party cookies or browser fingerprinting.
• We do not run ad networks. There are no ads on Amili, paid tier or free.
• We do not sell, rent, trade, or share your personal data with advertisers, brokers, or affiliates. Ever.

How your data is protected

• In transit — TLS 1.3 between your browser and our servers. Certificates managed by Cloudflare.
• At rest — Cloudflare D1's underlying storage is encrypted. Tokens are hashed, not stored in plaintext.
• Access control — only the Amili founder has admin access to the backend. There are no third-party staff.
• Honest disclosure — this is not end-to-end encryption. Our server reads your messages in plaintext to pass them to the AI model and extract memories. If you need strict end-to-end encryption for a specific use case, Amili is probably not the right tool for that conversation.

Who can see your conversations

• You. Always.
• Anthropic (our AI provider), only at the moment your message is processed. Anthropic's commercial terms specify that API inputs and outputs are not used to train their models. We rely on this contractual guarantee.
• No one else. Not partners, not advertisers, not "trusted third parties." If a government or court compels disclosure via valid legal process, we would respond to the minimum required by law and notify you unless legally prohibited.

How long we keep your data

• Conversations and memories — kept as long as your account exists. Delete individual messages, conversations, or memories from the chat sidebar anytime. Delete your whole account and everything goes with it.
• Backups — Cloudflare's platform-level backups may retain deleted data for up to 30 days before being purged. After 30 days, it's unrecoverable.
• Access logs — 30 days.
• Analytics — Plausible aggregates only; no individual session is retained.

Your rights

Wherever you are, you can:

• Access — see everything Amili remembers about you in the chat sidebar.
• Export — download your conversations and memories as JSON.
• Delete — one-click on any memory, conversation, or your entire account.
• Correct — edit any memory inline or ask Amili to "forget that I live in X" and it will remove the matching memory.

If you're in the EU, UK, or another GDPR-style jurisdiction: these are also your statutory rights under Articles 15–22. We comply.

If you're in California: Amili does not sell personal information, so the CCPA "do not sell" right does not apply. All other CCPA rights (access, delete, non-discrimination) are honored.

Children

Amili is not intended for children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has signed up, email the address below and we will delete the account.

Changes to this policy

Material changes will be announced via an in-app notice and, if you have an account, an email. You can always see the current version at this URL. The last update date is shown below.

Contact

Questions, requests, concerns, or just hello — email [email protected]. Real human reads it.

Last updated: 2026-04-15.