Privacy Policy
Last updated June 13, 2026
Almanack is built so your memory stays yours. This policy explains what we collect, how we use it, and the controls you have. If anything here is unclear, email us at support@echoforge.to.
What we collect
Account. Your email address, and the sign-in provider you choose (Apple, Google, or email).
What you capture. The notes you type, the files you attach, and the structured memory the AI derives from them (summaries, tasks, topics, and related items).
Usage. Basic product analytics (pages viewed, features used) to understand what works. We do not sell this or build advertising profiles.
Access keys. If you connect Almanack to your own AI tools over MCP, we store a one-way hash of each key, never the key itself.
How your notes are processed
When you capture a note or ask a question, the relevant text is sent to our AI provider (OpenRouter, which routes to model providers such as OpenAI and Anthropic) so it can organize the note or answer you. This processing is transient. Your notes are not used to train models.
Answers are sourced only from your own data. Items you mark as personal are walled off from business questions, exports, and any shared surface.
Where your data lives
Notes and structured memory are stored in Supabase (managed Postgres), encrypted at rest. Attachments are stored in Cloudflare R2. Access is scoped to your account through row-level security, so other users cannot read your data.
Who we share with
We do not sell your data. We use a small set of service providers to run Almanack, each handling only what their function requires: Supabase (database and auth), Cloudflare (storage and edge), OpenRouter (AI processing), PostHog (product analytics), and RevenueCat (subscription status). We may disclose data if required by law.
Your controls
Export. Download everything you have captured as a single markdown file at any time, from Settings.
Delete. Deleting your account erases your entries, structured memory, and attachments. This is immediate and permanent, so export first if you want a copy.
Retention
We keep your data for as long as your account is active. When you delete your account, the data is removed. Backups roll off on their normal cycle.
Children
Almanack is not intended for anyone under 16. We do not knowingly collect data from children.
Changes
We will update this page when our practices change and revise the date above. Continued use after a change means you accept the updated policy.
Contact
Questions about your data or this policy go to support@echoforge.to.