Privacy Policy
Last updated: 22 May 2026
Auprès is a quiet, considered AI companion. We’re solo-built by Avalon Design Studio, Inc. This policy is in plain English because privacy matters more than legal theatre.
What we collect
- Account details: your email address and the display name you choose. Required so you can sign in.
- Chats: the questions you ask and the answers we give you. Stored so you can return to them across devices.
- Images you upload: when you attach a photo to a message, we store it so you can see it later on any device you sign in to.
- Memory facts: when you ask Auprès to remember something (“remember that I take Lisinopril”), we store that note alongside your account so future answers can use it.
We do not collect device identifiers, location, contacts, or browsing history. The microphone is only listened to when you tap the mic button, and the audio never leaves your device — speech is recognised on-device by Apple’s frameworks.
Where it lives
All account data is stored on Supabase’s US-East infrastructure. Images are stored in Supabase Storage. Emails (sign-in codes, password resets, the waitlist welcome) are sent via Resend.
Who else sees it (subprocessors)
- Mistral processes your chat conversations. The main reply runs on mistral-medium; background work (summarising a chat, extracting a fact, picking a folder) runs on mistral-small. Mistral’s paid API terms prohibit training on customer data by default; they keep API traffic for thirty rolling days for abuse monitoring and then delete it.
- OpenAI processes one narrow task: generating the numeric “embeddings” we use to find conversations that look similar to your current question (the “you asked this before” pattern). Their text-embedding-3-smallmodel receives a short snippet of your message and returns a vector of numbers. OpenAI’s API terms prohibit training on API customer data.
- Supabase stores the data above and processes authentication. US-East infrastructure. Encrypted at rest.
- Vercel hosts aupres.ai and serves the marketing / recipes pages. Does not see chat content (that lives in Supabase).
- Brave Search answers occasional web-search queries on your behalf when a question genuinely needs current information. The query text is sent; your identity is not.
- Resend delivers transactional emails (sign-in codes, password resets, the waitlist welcome) on our behalf.
- Stripe processes subscription payments on the web checkout. Card details go directly to Stripe and never touch our servers; we receive only the customer ID and the subscription state.
We do not sell your data. We do not show advertising. We do not share your data with marketing partners, analytics vendors, or data brokers.
Training and product improvement
We do not train AI models on your chats, your memory facts, or your images. Our subprocessors (Mistral and OpenAI) contractually commit not to train on data sent via their paid APIs either — that’s a standard guarantee, not something we had to negotiate. Mistral’s consumer chat product (le Chat) has a separate “memories” feature; that does not apply to traffic we send via the API and your chats never enter it.
For users on our free tier, we may review small samples of conversations internally — with personal identifiers removed — to spot problems and improve how Auprès answers. Examples: a confusing reply we want to fix, an emergency-language case where the safety prompt fired (or should have but didn’t), a recipe import that broke. This review is by humans on our team, not by AI models, and the purpose is product quality only.
Paid subscribers are excluded from this review by default. Free-tier users who don’t want their conversations sampled can opt out by emailing privacy@aupres.ai — a self-serve toggle is on the roadmap. Opting out does not change anything else about how Auprès works for you.
How we measure usage
Each conversation with Auprès has a cost — the AI providers charge us by the token. To keep the service sustainable and to enforce fair-use limits, we record, for each message you send, the model that answered, the number of tokens used, and when it happened. We do not store the content of your messages a second time alongside this measurement — the measurement is metadata only, and the message content is already covered above. You can see your own usage in Settings → Usage.
Your rights
You can delete your entire account, every chat, every image, and every memory fact from inside the app at any time — Settings → Delete account. The delete is permanent and immediate; there is no recovery. If you can’t access the app for some reason, email privacy@aupres.ai and we’ll process the deletion within seven days.
You can request a copy of everything we hold about you by emailing the same address. We’ll send it within thirty days.
Children
Auprès is for adults. We don’t knowingly accept accounts from anyone under thirteen. If you believe a child has signed up, email privacy@aupres.ai and we’ll delete the account.
Changes
If we materially change this policy we’ll email signed-in users at least thirty days before the change takes effect. Smaller edits (clarifications, typos) we’ll just update the date above.
Contact
Avalon Design Studio, Inc. · privacy@aupres.ai