privacy ยท first version
We built it so we can't look.
Your capsules are locked to your phones before anything leaves them. Here is exactly what reaches us, and what never does.
What we can see
- Your account id.
- The public keys of your phones. Public keys lock things; they do not open them.
- How many locked files you have, their size, and when they changed.
- A capsule made in a chat app, for one moment, while it is checked and locked (more below).
What we can't see
- What is inside your capsules: lists, notes, expenses, contacts.
- Your conversations with your AI. Those go to the assistant you chose, under its terms.
- What you do in a capsule. It runs on your phone, not on our server.
How your things are locked
- Everything you keep is end-to-end encrypted. The keys are made on your phone and never sent to us.
- Signing in alone unlocks nothing. A new phone is unlocked with a passkey, a yes from a phone you already have, or your backup key.
- Each phone has its own keys. Removing a phone changes the keys, so it can't read anything new.
- Changes you make offline join up when your phones reconnect.
Capsules and the internet
Capsules load nothing and send nothing while they run. Everything they need is inside the file. The one exception is a capsule that asks your AI something: it is labelled, it asks you first, and you can say no.
Capsules made in a chat app
A capsule your assistant sends us passes through once, to be checked and locked to your phones. The readable copy is thrown away straight after. It is never stored or logged. Then it waits in New until you open it.
This website
- No cookies, no analytics, no trackers. Fonts are served from here, not from a font company.
- The light or dark switch (the logo) is remembered in your browser only. It never reaches us.
- Our web host keeps standard request logs (address, page, time) for security. We don't use them to follow anyone.
- The three files for AI assistants are plain text, served as written.
- If you email us for early access, we use your address only to write back and to let you in.
When this page changes
This describes the first version of Popsule. If what our server can see ever changes, this page and its date change first. Questions: hi@popsule.app.