Security & privacy
Security & privacy
What happens to your data – in plain words. The privacy policy is binding.
What goes where
Your data is stored primarily on our server at Hetzner in Germany. Only what a task needs goes out – and only to these places:
| Service | what for | whose key | Country |
|---|---|---|---|
| Hetzner | server, database and backups | – | Germany |
| Fine-Techs (operator) | operation and support – access to the server | – | Turkey |
| OpenAI | answers with GPT models, voice (conversation, read aloud, dictation), pictures, checking your own companion picture | yours | USA |
| Anthropic | answers with Claude models, research with web search, Osiris | yours | USA |
| Resend | emails with sign-in links and notifications to you | Fine-Techs | sent from Ireland, company in the USA |
| Composio | app connections (e.g. Gmail, calendar, Instagram): holds the access to your apps; before that only a random identifier of your area | Fine-Techs | USA |
| Web pages | “Read web page” and research: the server fetches the page, not your browser | – | depends on the page |
If you connect an app, the necessary data also goes to that app itself (for example to Google for Gmail).
What never goes out
- Notes and documents marked “sensitive” are not included in requests to an AI model.
- Your keys are stored encrypted in the database; only the last four characters are shown.
- No tracking, no ads: the app and this documentation load nothing from other servers – no analytics, no external fonts, no ad networks. Exceptions: in conversation mode your browser connects directly to OpenAI, and when you connect an app, the sign-in page of Composio or of the app opens.
- Nothing goes out without approval: emails, posts and anything that changes something on your behalf are created as drafts and only run after you click “Approve” – exactly once. What only reads, for example viewing a connected mailbox, runs without asking.
The approval principle
Your companion may read, think and write drafts. Anything that has an effect outside – sending, posting, changing, deleting, paying – needs your approval. An approval applies to exactly this one thing with exactly these details and is used up afterwards.
Exception only if you want it: for a single project you can switch on working on its own. Before that comes a clear warning, you confirm explicitly, you set a spending limit, and every step is logged. You can switch it off at any time.
Two separate areas
Private and Business are two separate areas, separated down to the database: chats, projects, knowledge, tasks, routines, connections and keys of one area are not visible in the other. If your companion needs something from the other area, it asks first.
Privacy mode and the voice
In privacy mode your companion tries to recognise names, addresses, phone, account and ID numbers and to replace them with placeholders before anything in chat or tasks goes to the AI model. In the answer you see the real details again. It recognises common first names itself – rare names are best added to the list “Names that are always protected”. More under Privacy mode.
Important: the voice (conversation, read aloud, dictation), pictures and the web search during research run past privacy mode. In conversation mode your voice goes directly to OpenAI; if privacy mode is on, the app points this out before the first conversation.
Download your data and delete your account
- Download notes: under Second Brain you download all notes as a ZIP file (also for Obsidian). We send you further data on request by email to info@fine-techs.com.
- Delete account: under Settings › Account you delete your account with all areas and all content. Connected apps are disconnected. Backups on the server usually disappear on their own after 7 days (the newest one is always kept).
You are talking to an AI
Your companion is an artificial intelligence, not a person. Its answers can be wrong – check important things before you rely on them.