This service is operated by Akhere ("we", "us"). We are the controller of the personal data described in this policy. You can contact us at 101akhere5@gmail.com.

• Account details: your email address and a securely hashed password.
• Your files: the documents you upload, the text extracted from them, the chunks that text is split into, and the numerical embeddings we create from those chunks.
• Your conversations: the questions you ask, the answers you receive, and which passages were used to produce each answer.
• Usage and technical data: how many messages you send each month, and standard server logs such as timestamps and error details.

• To provide the service (storing your files, searching them and answering your questions). Our basis is performing our contract with you.
• To keep the service secure, enforce usage limits and prevent misuse, and to diagnose and fix faults. Our basis is our legitimate interests in running a safe and reliable service.
• To meet legal obligations and respond to lawful requests.

We do not sell your personal data and we do not use it for advertising.

To answer a question, we send the text of your question, relevant parts of your conversation and the passages retrieved from your files to Amazon Bedrock, which rewrites the question, creates embeddings and generates the answer. We do not use your content to train AI models. AWS states in its Bedrock documentation that customer prompts and responses are not used to train the underlying models.

Answers are produced automatically but do not make decisions about you that have legal or similarly significant effects.

We use the following providers as processors, under contracts that only allow them to handle your data to provide their services to us:

• Google Cloud Platform (GCP) for our database and hosting, in the europe-west1 region (Belgium).
• Amazon Web Services (AWS) for AI processing through Amazon Bedrock, and for encrypted file storage in eu-north-1 (Stockholm).

We may also disclose data where the law requires it, or to protect our rights, users or the public from harm.

Your data is stored in the European Economic Area, which the UK recognises as providing adequate data protection. If a provider processes data elsewhere, we rely on approved safeguards, such as the UK International Data Transfer Agreement or Addendum.

Your files may contain personal data about you or other people. You are responsible for making sure you are allowed to upload them. Please do not upload special category data (such as health or biometric data), criminal records, payment card details or passwords. Our terms of use explain this further.

We keep your files, conversations and account details until you delete them or close your account. After that we remove them from our systems within 30 days, except where we must keep something to meet a legal obligation. Backups may hold copies for a short time longer.

We use appropriate technical and organisational measures to protect your data, including encryption in transit and for stored files, and access controls limited to what is needed to run the service. No system is completely secure, so please keep your password confidential and think carefully about what you upload.

If a personal data breach occurs that we are required to report, we will notify the Information Commissioner's Office and affected users as the law requires. Our responsibility to you is set out in our terms of use.

We only use cookies or similar storage that are needed to keep you signed in and the service working. We do not use advertising or tracking cookies.

You can ask us to access, correct, delete or export your personal data, to restrict how we use it, or to object to our use of it. Email 101akhere5@gmail.com and we will respond within one month. You can also delete files and conversations yourself in the app.

If you are unhappy with how we handle your data, we would like the chance to put it right first. You can also complain to the Information Commissioner's Office at ico.org.uk.

The service is not intended for anyone under 18, and we do not knowingly collect their data.

If we make significant changes, we will update the date above and let you know in the app or by email before they take effect.