Privacy policy
Draft, not yet reviewed by a lawyer. This page describes how Pufy works today. It is not final and will change before launch.
Last updated: 6 October 2026.
Pufy is a personal AI agent. To help you, it has to hold some of your data. This page says what it holds, why, who else handles it, and how you can see, export and delete it.
Pufy is run by [Company name and address to be added] ("we").
What Pufy stores
- Your account: your email address, your name, language and plan, and how you sign in (an email code, Apple or Google).
- Your chats: your messages and Pufy's replies in each agent and group chat, and the approval cards with what you decided.
- Memories: what you tell Pufy and what it learns about you. You can see, change and erase all of them in What Pufy knows, and turn learning off.
- Notes and to-dos you or Pufy write. Deleted notes are kept in the trash for 30 days.
- Uploads: photos, documents and voice questions you send, with the text Pufy read from them. They are kept for 30 days.
- Agents, skills and plugins: your agents' names, mascots and settings, your skills, and the plugins you added.
- Plugin connections: when you connect a service, its sign-in tokens are stored encrypted (sealed) on our servers and never sent to the app. Removing the plugin revokes them where the service allows it, and deletes them.
- Automations and price watches, with any standing approvals you gave, and their run history.
- API keys: only a hash of each key, its name and when it was last used.
- Feedback: when you rate a reply or report it as offensive or harmful, the rating or report and a short excerpt. Kept for 180 days, and never from temporary chats.
- Service logs: timings, counts and error codes, to keep Pufy working. They do not contain your words.
- This website: if you join the waitlist, your email address, the time, your language and the page you joined from.
When you allow it, Pufy can read your phone's calendar, contacts, reminders and photos to answer a request. What it reads becomes part of that chat.
Temporary chats
A temporary chat is not saved as a conversation. Memory is not read or saved. It is deleted when you end it, or within a day if the app could not.
How we use your data
We use it to run Pufy for you: to answer, remember what you asked it to, carry out what you approve, and keep the service safe and working. We do not sell your data and we do not show ads.
Who processes it
| Provider | What for | What they receive |
|---|---|---|
| Cloudflare | Hosting, storage, the cloud browser, speech recognition and a backup AI model | Everything Pufy stores, as listed above, and your voice recordings for speech recognition |
| Anthropic | The AI model that writes Pufy's replies, and web search | Your messages and what Pufy reads to answer them, such as memories, notes, files and web pages |
| ElevenLabs | Pufy's spoken voice | The text of replies that are read aloud |
| Brandfetch | Logos of services and websites, only | The app asks for a logo by the site's name. Brandfetch sees your device's network address, not your data |
| Apple and Google | Sign in with Apple and Sign in with Google | What you agree to share when you sign in with them |
When you connect a plugin, Pufy sends that service what it needs to do what you asked, under the service's own terms. When Pufy opens a web page, that site sees a request from our servers, not from your device.
Your choices and rights
- See and erase memory: Settings, What Pufy knows.
- Delete conversations: delete an agent's chat, or all of them, in What Pufy knows.
- Export: Settings, Download my data, gives you one file with your account, chats, memories, notes, to-dos, agents, plugins, automations and ratings.
- Delete your account: Settings, Delete account. This erases everything Pufy holds about you and revokes connected services. It cannot be undone.
Depending on where you live, you may have more rights, such as to object or to complain to a data protection authority. Contact us to use them.
How long we keep it
- Your account and what is in it: until you delete it, or delete the item.
- Uploads: 30 days. Notes in the trash: 30 days.
- Temporary chats: until you end them, at most about a day.
- Feedback and reports: 180 days.
- Memory: erased 90 days after Pufy+ ends.
Security
Pufy uses encrypted connections. Service sign-ins are encrypted at rest and API keys are kept only as hashes. No system is perfectly safe; tell us if you find a problem.
Children
Pufy is not for children under 13. If you think a child under 13 has an account, contact us and we will delete it.
Changes
We will update this page when Pufy changes, and tell you in the app about important changes.
Contact
[Contact email to be added]