What we do with what you tell it.

Privacy

Version 1 - 13 August 2026

Aegis is a digital chief of staff that works only for you. It remembers what you tell it, looks things up, and can act with your approval. This explains what it holds, where that lives, what leaves, and what you can do about any of it. It is written to be read once and understood, not filed and forgotten.

The one boundary the whole product is built on

Your agent is its own database, isolated to you, opened by your passkey. It is not a row in a shared table with your name on it. Most products keep everyone in one place and separate you with a filter on a query; get that filter wrong once and somebody reads somebody else. There is no shared table here, so there is no query to get wrong.

What it holds

• What you tell it - names, numbers, preferences, the things you say in passing. Each fact carries where it came from: whether you said it, it read it somewhere, or it worked it out.
• A searchable copy of that, by meaning, so it can recall months later.
• A record of what it has done on your behalf, and a ledger of everything that has ever left the machine.
• Anything you seal, which is encrypted in your browser with your passkey before it reaches us. We hold those bytes and cannot open them.

Where it lives, and how it is protected

Everything runs on Cloudflare. Your memory is encrypted where it sits, under a key derived for your agent alone - a stolen disk, a leaked backup or a snapshot is bytes. We will not oversell that padlock: encryption at rest protects the storage, not us, because the agent has to be able to read your memory in order to think.

What we could be compelled to hand over

Honestly: everything the agent knows about you, readable, for exactly the reason above - it has to decrypt to think, and we hold that key. Encrypting the disk does not change that, and we would rather say so than let a padlock imply otherwise. The one exception is anything you sealed: those we could only ever produce as bytes we cannot open, because the key is yours and never reaches us.

What leaves the machine, and when

By default, nothing you have told it leaves. When a task genuinely needs the outside world - a model to reason with, a search, a call you approved - only the fields that task needs are sent, built from a declared list rather than handed over as a blob. Every departure is written to a ledger you can read: where it went, why, and which of your details travelled. The parties that can receive anything are named in the subprocessor list below.

What it will never do

• No advertising, ever. No advertiser, no paid placement, nothing a third party can pay to change in what it recommends. If loyalty were for sale it would not be a chief of staff.
• We do not sell your data, and there is no second party we could sell it to - you are the only client.
• It does not act alone. Anything that spends, sends, or cannot be undone waits for your explicit approval.
• We never handle your raw credentials - no passwords, no card numbers. Sign-in is a passkey; anything sensitive is a hosted connection or your own session.

What you can do

• Take it with you. Export the whole of what it knows, any time, in one move. Portability is day one.
• Make it forget one thing. It records that a deletion began before anything is removed, so a finished deletion is distinguishable from an interrupted one.
• Close the account entirely. That deletes everything - the memory, the ledger, anything you sealed, the passkey itself - and retires the agent's name so it is never given to anyone else. Take a copy first, because afterwards there is nothing left to export.
• Sign out of a browser without deleting anything, for a machine that is not yours.

Children

Aegis is not for people under 16, and it is not designed or marketed for them.

When this changes

If we change this in a way that matters, we date a new version here rather than editing the old one out of existence. The date at the top of this section is the one you are reading.

Reaching us

Privacy questions: privacy@mynde.app. Security reports: security@mynde.app, or security.txt.

Terms

Version 1 - 13 August 2026

These are the terms for using Aegis. They are meant to be fair and short. Using the product means you accept them.

What Aegis is

A digital chief of staff that works only for you. It proposes; you dispose. It can remember, look things up, draft, and - with your explicit approval - act. It is a tool, not a licensed professional: it does not give legal, financial, medical or investment advice, and you are responsible for the decisions you make with its help.

Your account

You claim an agent with a passkey, which binds it to you and your device. You are responsible for keeping access to that passkey; if you leave an email for recovery, that is the only way we can help you reach the agent again from a new device. One agent belongs to one person - do not share it as a way around that.

Approval, and what that means

Anything that spends, sends, or cannot be undone waits for you. When you approve such an action, you are authorising it - the agent carried out what you agreed to. Read what it proposes before you approve it, the same way you would read anything before signing it.

Fair use while it is free

Aegis is free to start, with no invite and no waitlist. There are fair-use limits so it stays sustainable while it is early - ordinary use will not meet them. We may adjust those limits, and if we ever introduce paid plans we will say so clearly before anything you do costs money.

What you must not do

• Use it to break the law, or to harm, harass, deceive or surveil other people.
• Try to reach another person's agent, or to make an action happen without its owner's approval.
• Attack, overload, or reverse the service - though a good-faith security report is welcome and covered by security.txt.

If you use it this way we may suspend the account. Where we can, we will tell you why.

The honest limits of what it can do

It can be wrong. It is built to rather say it does not know than to invent - a figure it cannot trace does not get spoken - but no assistant is perfect, and you should treat what it tells you as something to check when it matters. It depends on services that can be down. We do our best; we do not promise it is always available or always right.

The promise we do make

You can always leave with everything, and you can close the account completely. Those are not conditional on anything. Lock-in is the one thing we have decided the product may never use to keep you.

Liability, in plain terms

Aegis is provided as-is. To the extent the law allows, we are not liable for indirect or consequential loss arising from using it. Nothing here limits anything that cannot lawfully be limited.

Changes and contact

If these terms change materially, we date a new version here. Questions: hello@mynde.app.

Who else touches a request

Version 1 - 13 August 2026

These are the outside parties that can receive something in the course of Aegis doing its job. Most of the time, nothing you have told it goes anywhere. When it must reach out, only what a specific task needs is sent - and it is written to your ledger either way. The list is short on purpose, and it is checked against the code, so it cannot quietly name fewer parties than the product can actually reach.

If we add a party to this list, we date a new version. If a party you see here ever stops being used, it comes off. The one place this must stay honest is against the code, and that is what the build checks.