Privacy

Alice doesn’t track you.

Not in the app, and not on this site. Here is what that means concretely, and every claim below links back to how we verify it.

How Alice protects you in the app

Your questions
Encrypted on your device before they leave, readable only inside the confidential hardware that answers them: no one in between, including us, can read them. Before every message, Alice checks that this hardware is genuine and up to date. Which exact software runs inside it cannot be verified yet, because the provider has not published its reference values, and the trust page tracks that limit. In Local mode, the installed app runs the model on your device. Downloads, Explorer and other network features still make network requests.
Your keys
Generated on your device, stored on your device. No server of ours ever sees a recovery phrase or a private key, and the AI has no path to them by construction.
Your email
An account is optional. When you create one, Alice keeps your address encrypted, so she can warn you before a paid plan runs out and, a few times a year, tell you what Alice can now do. Nothing else: no marketing, no partners. The encryption protects the address if the database or a backup leaks. It does not hide it from our server, which decrypts it to send, so an alias works perfectly well. Signing in uses a one-way fingerprint, and the app only shows a masked label like sat****@bitcoin.com.
Your Private Cloud usage
To count your free questions and your plan, each Private Cloud request is recorded against your account, or against an anonymous installation if you have none: when it happened and, on a plan, how many encrypted bytes it carried, never what it said. These records last as long as the account does.
Your IP address
Hashed together with the day, using a server-side secret, so the result changes daily, is used only for rate limiting, and cannot be reversed back to your address. There is no durable IP record anywhere. That covers our side; every site and network you reach still sees the address itself, so we recommend a VPN, which is the only thing that hides it from everyone else.
What Alice remembers about you
The memory that personalizes her answers is stored on your device and rests encrypted there: with the phone’s secure storage, with a key the desktop app keeps in your system keychain, or, on the web, with a key your browser keeps and never hands out. The same goes for your conversations, your Explorer tabs and saved wallets, and your Playground wallet. “What Alice remembers” lets you inspect and erase the memory anytime. When you use Private Cloud, the relevant memory travels inside the same end-to-end encrypted envelope as your messages, addressed to the attested enclave. The hardware is checked, but the exact program inside cannot be verified yet, pending Venice’s reference values. The memory page explains what is kept, what the code refuses, and how to erase it.
Product analytics
Day-level aggregate counters only: an event, a platform, a version. No user id, no session id, no timeline. An individual profile cannot be reconstructed from what we store, even in principle.

What this site does not do

On this site’s analytics

This site counts page views with Cloudflare Web Analytics. It sets no cookie, writes nothing to your browser’s storage, and builds no fingerprint, so nothing follows you between sessions or across sites. It tells us which pages get read, from which country, and nothing that identifies you. The app itself is a separate matter, described above.