Privacy policy

Last updated: 2026-11-07

Draft. This describes what the software does today, but it has not been reviewed by a lawyer. Verlapz AI should have it reviewed, and check it against where the service operates, before relying on it.

Verlapz AI is run by Verlapz AI. To reach us about privacy, write to support@verlapz.ai.

What we collect

• Your account: your email address and a scrambled form of your password that can't be turned back into the password.
• What you put in the app: your messages and the AI's replies, photos and files you attach, memories, assistants, projects, reminders, calendar events and settings.
• Your location, if you turn it on: your latest rough position, to about 100 metres, and the name of the area. There's no history of where you've been, and turning location off deletes it.
• Technical details: your device's name and app version, your IP address and your time zone offset.
• Purchases, if you buy a plan: what you bought, when, and the name and email address you used. Squarespace takes the payment, so we never see your card details.
• Reports: if you report an AI reply, a copy of that reply and of your message before it. These are kept until your account is deleted.
• Discord, if you link it: your Discord user ID, so we can give you the role for your plan in our Discord server.

We don't use advertising or analytics services in the app, we don't sell your data, and we don't use your chats to train AI models. Our website is hosted by Squarespace, which counts visits to it, and we've turned off its optional cookies.

If you use speech, your recording goes to our servers to be turned into text, and replies are turned into speech there. The audio is only held while that happens, and it isn't saved.

How we use it

• To run the service: your messages, files and memories are processed by the AI models on our servers to write replies.
• To keep it secure and prevent abuse, including limits on use and an activity log.
• To review replies people report.
• To send you the emails your account needs, such as password reset codes.

Who can see your data

Other users can't see your data. Your chats are protected in transit and in our backups, but they are not end-to-end encrypted: people who operate the service can technically access them, and we limit that to what's needed to run the service, investigate abuse, review reports or meet a legal obligation. We rent our servers from a hosting provider, which could technically access what's on them.

Your account, chats, memories and settings are stored in a database that Supabase runs for us, in the United States. Your files, the AI models and speech stay on our own servers. Supabase also keeps your password, in a form that can't be turned back into it, and checks it when you sign in. It doesn't receive anything from your phone directly: only our server talks to it. Supabase could technically access what it keeps for us.

The people who run the service have owner tools in the app. With them they can see an account's email address, plan and how much it has used today, give someone a temporary password when they're locked out, and suspend or delete accounts that break the terms. Owner tools don't show your chats, files or memories, and what owners do with them is logged.

Some features send information outside our servers:

• Web search and web pages: when the assistant searches the web, your search words go to a search provider, and when it opens a page, that website receives the request from our server.
• Pictures: when your assistant shows you pictures, our server looks for them on Wikimedia Commons, or on the website of a place it found for you, and downloads them. Those sites receive the search words or the address from our server, and not who is asking.
• Location: if you share your location, the name of your area and places near you are looked up with OpenStreetMap's public services. They receive your rough position from our server, and not who is asking.
• Voice typing on older apps: older versions of the Android app, and any app when our speech service is unavailable, use your device's speech recognition. That may send audio to the speech service your device uses, such as Google's. We don't receive the audio, only the words it produces.

We use an email provider to deliver account emails.

Payments for plans are handled by Squarespace, which runs our store. It receives your payment details and billing address under its own privacy policy, and tells us what you bought and the email address you used, so we can add the plan to your account.

If you link Discord, our server gives your Discord account the role for your plan in our Discord server, so Discord and the members of that server can see which plan you're on. We don't send Discord anything else.

Updates to the Android app come from our own server, not from anyone else. Checking for one doesn't say who you are.

How long we keep it

• Your chats, files and memories stay until you delete them or delete your account.
• Temporary chats are deleted automatically.
• The activity log, including IP addresses, is kept for 180 days.
• Encrypted backups are replaced on a rolling basis, and the most recent 7 are kept. Data you delete leaves the backups as they age out.
• A Discord link stays until you unlink it or delete your account.

Your choices

• You can review, edit or turn off memory in the app.
• You can export your data in the app, under Settings, Privacy and data.
• You can delete your account in the app or on this page.
• You can unlink Discord on this page, which removes your plan role.
• Depending on where you live, you may have other rights over your data. Write to support@verlapz.ai to use them.

Children

Verlapz AI is for people aged 18 or over. If you believe a child has an account, write to support@verlapz.ai and we will delete it.

Changes

If this policy changes in a way that matters, we'll tell you in the app or by email.