1. Who is responsible
The data controller is registered legal entity name, ofregistered address. Privacy questions and requests reach a person atprivacy@understudio.app.
2. What stays on your machine
Sessions — transcripts, screenshot thumbnails, generated answers and the Markdown context files you attach — are written to your own disk by the application and are not uploaded to us. The 50 most recent sessions are retained locally and older ones are dropped; that pruning happens on your machine, and we neither hold nor recover the dropped rounds.
Deleting the application's data directory deletes them. There is no server-side copy to also delete, because there was never a server-side copy.
3. What leaves your machine, and to whom
Two things leave, and only while you are actively using the corresponding feature.
- Audio for transcription. While a session is running, captured audio is sent to a speech-to-text provider to be turned into text.
- The context you solve. When you press ⌘R, the relevant transcript excerpt, any pending screenshots and any matching passages from your attached context files are sent to a model provider to produce the answer. Nothing is sent on any other keystroke.
Sub-processors, the regions they operate in, and their retention periods:named sub-processors, regions, retention periods, and the DPA links.
We do not use your content to train models. Where a provider offers a no-training commitment it is relied on; the specific commitments are part of the gap above.
4. This website
This site sets no cookies and runs no analytics or third-party tags. The one thing it stores in your browser is a flag recording that you dismissed the cookie notice, kept in local storage on your own device and never transmitted. Clearing site data removes it.
Server request logs kept by the host: host, what is logged, retention period.
5. Accounts and payment
An account holds your email address, your plan and token balance, and a record of solves for billing. Card details are handled by the payment processor and never reach us.
Processor and the data it holds: payment processor name and DPA link.
6. Legal basis
Where the GDPR applies: performing the contract, for everything needed to deliver the product you have paid for; legitimate interests, for security and abuse prevention; and legal obligation, for financial records. No processing here relies on consent, which is why this site does not ask for any.
7. Your rights
Access, correction, deletion, portability, restriction and objection, exercised by writing toprivacy@understudio.app. Note that most of what you would ask us to delete is not ours to delete — it is on your disk. You may also complain to your local supervisory authority; ours is lead supervisory authority.
8. Children
The product is not directed at anyone under 16, and accounts are not knowingly created for them.
9. Changes
Material changes will be dated at the top of this page. The version you agreed to at signup is the one that governs until you are notified of a new one.