Privacy Policy

Celindor AB (“Celindor”, “we”, “us”) builds a personal AI agent with a private memory. This policy explains what data we handle, why, and who can see it. Privacy is the core of the product: the people who run the service do not read your conversations, and much of Celindor can be self-hosted so that your data never leaves your own infrastructure.

Who we are

The data controller is Celindor AB (org.nr 559595-3992), Tomegapsgatan 24, 223 50 Lund, Sweden. You can reach us at info@celindor.ai.

Data we process

• Account data — your email address and sign-in credentials, used to create and secure your account, and the devices you have signed in from so we can deliver notifications.
• Conversations and memory — the messages you exchange with the agent, and the memory Celindor builds from them: the people, places, facts and preferences it has learned about you.
• Documents and recordings — files, photos and voice recordings you choose to add, together with their transcripts, summaries and what the agent extracts from them.
• Connected accounts — if you connect a mailbox or a calendar, the mail and events Celindor reads from it. See “Connected accounts” below.
• Operational data — logs and diagnostics needed to run the service securely and reliably. Our logs are redacted so that secrets and conversation text do not end up in them.

How we use it

• To provide the agent, its memory and the features you use.
• To secure, maintain and improve the service.
• To respond to you when you contact us.

We do not sell your personal data, and we do not use it for advertising.

Who can see your conversations

The content of your conversations, documents, recordings and memory is yours. The people who operate the hosted service only ever see metadata about them: when a chat happened, how large it is, which role sent a message, chat identifiers, error reports. They do not see the text.

Our support staff can read conversation content only when you let them:

• You grant support access yourself, from the app, for one chat or for your whole account, and for a limited time measured in hours, not weeks. You can revoke it at any time. Nothing an operator does can create that access without you.
• Every time someone reads your content under such a grant, it is written to a log you can see in the app, under Your data: who read what, when, and through which part of the service.
• Incognito chats are never readable by anyone but you, whether or not you have granted access.

If we need to look into a problem and you have not granted access, we work from metadata and our redacted logs. If that is not enough, we ask you.

Connected accounts

You can connect a Google account (Gmail and Google Calendar), a Microsoft account, an IMAP mailbox or a CalDAV calendar so that the agent can read your mail and your calendar and, if you ask it to, add or change calendar events. Connecting is always your choice, and you can disconnect at any time from the app.

Data that Celindor receives from Google APIs is used only to provide these features to you. We do not use it for advertising, we do not sell it, and we do not share it with anyone except as needed to provide the feature you asked for (for example, the model provider you have chosen, see below). Celindor’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. When you disconnect an account, its sign-in tokens are deleted.

Models and processing

Celindor is model-agnostic. When you connect a model provider, or point Celindor at your own endpoint, the content you send to the agent is processed by the model you have chosen, under that provider’s terms. If you self-host the model, that processing stays on your own infrastructure. We do not train models on your data.

Where it is stored

The hosted service runs on servers operated by Hostinger in Germany. Documents and recordings are stored with Hetzner, also in Germany. Your data stays inside the EU/EEA and is protected by EU data-protection law.

Model-provider keys and the sign-in tokens for connected accounts are encrypted at rest with AES-256-GCM, using keys that never leave the server. Your conversations, memory, documents and recordings are not encrypted separately by the application. They are protected by access controls on our servers in the EU.

Usage statistics

The app sends anonymous usage counts to TelemetryDeck GmbH (Germany), which processes them on servers in the EU, so we can see which features are used and what to improve. A count says that something happened, such as a message being sent, a screen being opened or a recording being started, together with the app version, the kind of device and operating system, and the device language. It never contains what you write, say, store or search for, never your account, and nothing is sent from an incognito chat. The counts are grouped under a random id for the device, which is hashed before it is sent and is not linked to your account.

Usage statistics are on by default, and you can turn them off at any time under Your Data in the app. Turning them off stops them and forgets the device’s id.

Who we share it with

We use hosting providers (above) and the model providers you choose to connect as processors on our behalf, and TelemetryDeck for the anonymous usage counts described above. We do not share your personal data with anyone else, unless the law requires it.

Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to access, correct, export and delete your personal data, and to object to or restrict certain processing. You can delete individual chats, documents, recordings and memories from the app. To export your data or delete your account, contact info@celindor.ai. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Retention

We keep personal data only as long as needed to provide the service or as required by law. When you delete a document or a recording it moves to the Trash, where you can restore it for 30 days. After that, or when you delete it for good, it is erased together with what Celindor learned from it alone. When you ask us to delete your account, we erase everything.

Cookies

This website sets no cookies and uses no analytics. The app uses a session cookie or token only to keep you signed in.

Changes

We may update this policy as the product evolves. Material changes are reflected here with a new “last updated” date.