Privacy Policy

Local and hosted data are different

• Nowledge Mem is local-first. When you use the app without enabling a hosted workspace, your memories, threads, files, search index, and knowledge graph stay on your device. Signing in does not silently upload that content.
• When you explicitly create or use a Nowledge Cloud workspace, the content you place there is stored and processed on infrastructure operated for Nowledge Labs. Official cloud connectors, including ChatGPT, access only the Cloud workspace and permissions you authorize through OAuth.

Information we collect

• Account information, such as your email address, account identifiers, subscription status, and workspace membership or role.
• Cloud workspace content you choose to store, including memories, thread messages, Library files, summaries, labels, relationships, and related metadata.
• Connector requests and responses needed to perform your requested action, together with the OAuth client, granted scopes, and revocation state.
• Operational information needed to run and secure the service, such as request time, IP address, browser or client type, error and security events, storage use, and feature usage volume.
• Billing status and transaction identifiers from Stripe. Nowledge Labs does not receive your full payment-card number.

How we use information

• Provide, search, sync, and secure your workspace and the features you request.
• Process an authorized connector action, such as searching, creating, or updating a Memory.
• Operate optional AI features, enforce plan limits, prevent abuse, troubleshoot failures, and communicate service or account changes.
• Comply with legal obligations and protect users, Nowledge Labs, and the public.

Service providers and sharing

• We do not sell personal information, serve advertisements, or use workspace content to train our models. We share information only as needed with the service providers listed on our current subprocessors page.
• When you connect ChatGPT, Claude, Grok, MiniMax, or another third-party service, it receives only the data returned by the tools and scopes you authorize. Its own privacy policy also applies. We may disclose information when required by law or to address fraud, abuse, or a security incident.

View current subprocessors

Retention and deletion

• Device-local content remains on your device until you delete it or uninstall its local data.
• Cloud workspace content is retained while the workspace is active and removed from live systems when a workspace-deletion request is completed. Service backups age out on their normal schedule and may retain deleted content for up to 35 additional days.
• Connector tokens remain usable only until they expire or you revoke the grant. Revoked credential records may be retained in hashed form for security and audit purposes.
• Raw recall-usage events are retained for up to 90 days. Operational, billing, fraud-prevention, security, and legal records are retained only as long as needed for those purposes or as required by law.

Your choices and controls

• Choose local storage or explicitly create a hosted workspace; review, edit, export, or delete supported content through the product.
• Review the permissions a connector requests during OAuth, allow or cancel the request, and revoke a connector from your Nowledge Mem or third-party settings.
• Request access, correction, export, or deletion through the privacy address below. Additional rights may apply where you live.

Security, international processing, and children

• We use TLS in transit, access controls, workspace isolation, encryption and credential hashing appropriate to the data, backups, and security monitoring. No service can guarantee absolute security. Providers may process information in the United States and other countries where they operate.
• Nowledge Mem is not directed to children, and we do not knowingly collect children's personal information without the consent required by applicable law.