åsecond

who we are

åsecond is made by Jordan Jeffery, trading as entrées studio, in Australia. On this page, "we" and "us" means that. You can reach us at tomspanx@entrees.live. The studio's other policies are listed at entrees.studio/privacy.

what stays on your phone

åsecond works without an account. The thoughts, sketches, photos, places and rooms you keep are stored in the app on your phone. They stay there until you delete them or delete the app.

Location. åsecond uses your location on the phone to pin a thought to a place and bring it back when you return. It is not sent to us, even when you are signed in.

Camera. The camera shows the AR view, takes a photo when you add one to a thought, and runs hands-free gaze and hand control. That tracking runs on the phone with an on-device model. Camera frames are never stored and never sent anywhere.

Voice. If you speak a thought, your phone's speech recognition (Apple's, on an iPhone) turns it into text under Apple's own privacy terms. We never receive the audio.

Sketch ink, layers, photo backdrops and the places you pinned stay on the phone even when you are signed in. The one exception is a sketch or image you ask AI to read, which is covered below.

your entrées account

The account is optional. You sign in with a code sent to your email. On the web you can also sign in with GitHub. One entrées account works across åsecond, süschef and pacioli.

When you are signed in, we store:

• your email address and account id, so you can sign in
• the text of your thoughts, the links between them, and the labels åsecond gives them (what kind of thought it is, and how it felt)
• a search index of your thoughts, which we compute on our own servers, not with a third party
• files you add to your drive, and 3D models, in private storage that only your account can reach
• your answers from setting up åsecond, skills you add, and connect keys you create (we keep a scrambled copy of each key, not the key)
• a count of the images you make, so we can keep costs in check
• if you bring your own AI key, that key, encrypted (AES-256) in our key vault and used only for your requests
• on the web, your subscription status if you pay for AI

When you first sign in, åsecond uploads the thoughts already on your phone, so the account has them. If you connect another entrées app to åsecond, what it sends (for example a süschef cooking session) is kept with your thoughts.

We use this only to run åsecond for you. We don't use it for advertising and we don't sell it.

AI, and who does it

Some features use AI: tagging and linking a new thought, reading an image you import, turning a sketch into something that works, chat, questions, skills, workflows, summaries and tidying. They need an account and your permission. The first time, åsecond asks. If you choose not now, AI stays off and everything else keeps working. You can change your answer later in the app.

When AI is on:

Anthropic (Claude)

Receives the text of a thought, or the image or sketch you ask it to read. For chat and questions it also receives the thoughts it needs to answer. We send the content, not your name or email. Under Anthropic's commercial terms it is not used to train their models, and Anthropic keeps it only for the short time those terms allow, for example to check for misuse.

fal.ai

Receives the text prompt when you ask åsecond to make an image. No thoughts, photos or account details.

Vercel AI Gateway

Only while we test a second labelling model (Jev, from TypeSafe AI). When that test is switched on, the text of a new thought also goes through Vercel's AI Gateway to it, with zero data retention requested. It only answers what kind of thought it is and how it felt. It never runs if you use your own Anthropic key.

who else receives data

Supabase

Runs our database, sign-in, file storage and the server code behind AI requests. Your account data is stored in Sydney, Australia. Supabase (and the email service it uses) sends your sign-in codes.

Vercel

Hosts åsecond on the web and runs our key vault.

Stripe, on the web only

If you subscribe to AI on the web, Stripe takes your payment details. We keep your Stripe customer id and subscription status, never your card number. There is nothing to buy in the iPhone app.

GitHub, only if you connect it

If you back up your brain to GitHub, åsecond writes your thoughts as files into a repository you choose, including the place a thought was pinned. GitHub's own privacy terms then apply to it. If you sign in with GitHub on the web, GitHub tells us your email address and username.

Esri and OpenStreetMap

Supply the map and globe images. Their servers see your IP address and the area on screen.

Re:Earth

Supplies the 3D terrain for the globe. Its servers see your IP address and the area on screen.

Google and jsDelivr

Serve the on-device face and hand tracking model. They see your IP address when the app downloads it.

Supabase, Vercel, Anthropic, fal.ai and Stripe handle your information for us under their terms with us. Those terms require them to protect it at least as well as this policy does, and to use it only to provide their service to us. GitHub and the map, terrain and model servers act under their own privacy terms, and see only what is described above.

Like any online service, our hosts see your IP address and keep short technical logs to run and protect the service. There are no ads, no analytics and no tracking in åsecond, and we never sell your data.

data sent overseas

Your account data is stored in Sydney. Anthropic, fal.ai, Vercel, Stripe, GitHub, Esri and Google are based in the United States, and OpenStreetMap, Re:Earth and jsDelivr run their servers overseas too. What you send them may be processed there or in other countries where they run servers. Our server code may also run outside Australia. We send each of them only what the feature needs. This is the overseas disclosure Australian Privacy Principle 8 asks us to tell you about.

how long we keep it

• On your phone: until you delete it, or delete the app.
• In your account: until you delete it, or delete the account.
• At Anthropic and fal.ai: only for the short time their commercial terms allow.

deleting your data

Deleting the app deletes everything it kept on your phone.

To delete your account, email tomspanx@entrees.live from your account address and we delete the account and everything tied to it within 30 days.

It is one entrées account, so this also deletes your süschef list and your pacioli books. Books you share with someone else stay with them. If you pay for AI on the web, we cancel that subscription too.

children

åsecond is not made for children under 13, and we don't knowingly collect their information. If you think a child has an account, email us and we will delete it.

security

Everything travels encrypted. In our database, each record is locked to the account that owns it, so one account cannot read another's. Keys and secrets stay on our servers and never ship inside the app. No system is perfect: if something goes wrong that puts your information at risk, we will tell you what happened and what we are doing about it.

your rights

You can ask for a copy of what we hold about you, or ask us to correct it. Email us from your account address. If you are unhappy with how we handle your information, tell us first. If we don't fix it, you can complain to the Office of the Australian Information Commissioner atoaic.gov.au.

changes

If this policy changes, we will post the new version here with a new date. If a change matters, we will tell account holders by email before it takes effect.

contact

Jordan Jeffery, trading as entrées studio, Australia. tomspanx@entrees.live