Privacy Policy
Last updated: 15 October 2026
Auprès is a quiet, considered AI companion. We’re solo-built by Avalon Design Studio, Inc. This policy is in plain English because privacy matters more than legal theatre.
What we collect
- Account details: your email address and the display name you choose. Required so you can sign in.
- Chats: the questions you ask and the answers we give you. Stored so you can return to them across devices.
- Images you upload: when you attach a photo to a message, we store it so you can see it later on any device you sign in to.
- Memory facts: when you ask Auprès to remember something (“remember that I take Lisinopril”), we store that note alongside your account so future answers can use it.
We do not collect device identifiers, location, contacts, or browsing history. The microphone is only listened to when you tap the mic button, and the audio never leaves your device — speech is recognised on-device by Apple’s frameworks.
Where it lives
All account data is stored on Supabase’s US-East infrastructure. Images are stored in Supabase Storage. Emails (sign-in codes, password resets, the waitlist welcome) are sent via Resend.
Who else sees it (subprocessors)
- Mistral AI processes your chat conversations on La Plateforme, their EU-hosted API. The main reply runs on mistral-medium; background work (summarising a chat, extracting a fact, picking a folder) runs on mistral-small. The same API also handles one narrow task: generating the numeric “embeddings” we use to find conversations that look similar to your current question (the “you asked this before” pattern). Their mistral-embed model receives a short snippet of your message and returns a vector of numbers. Mistral’s paid API terms prohibit training on customer data by default; they keep API traffic for thirty rolling days for abuse monitoring and then delete it.
- Supabase stores the data above and processes authentication. US-East infrastructure. Encrypted at rest.
- Vercel hosts aupres.ai and serves the marketing / recipes pages. Does not see chat content (that lives in Supabase).
- Brave Search answers occasional web-search queries on your behalf when a question genuinely needs current information. The query text is sent; your identity is not.
- Resend delivers transactional emails (sign-in codes, password resets, the waitlist welcome) on our behalf.
- Stripe processes subscription payments on the web checkout. Card details go directly to Stripe and never touch our servers; we receive only the customer ID and the subscription state.
We do not sell your data. We do not show advertising. We do not share your data with marketing partners or data brokers.
We use one privacy-preserving, cookieless analytics tool (Vercel Analytics) to count page views on our website — it tells us how many people visited a page, not who they are, and it sets no tracking cookies and builds no advertising profile. It does not run inside your private conversations or your memory. When you join our waitlist, we record the email you give us along with your IP address and browser type, used only to prevent spam sign-ups and deleted when you create an account or ask us to remove you.
Health and sensitive information
Auprès is built to remember what matters to you, and for many people that includes health details — a medication, an allergy, a dietary restriction, something a doctor said. When you tell Auprès these things, we store them so it can use them to help you (for example, keeping a recipe within a sodium limit you mentioned). We treat this information with extra care: it is covered by the same encryption, access controls, deletion rights, and no-training commitments as everything else here, and we never share it with advertisers or data brokers — we don’t have any. You can view, correct, or delete any fact Auprès has remembered about you at any time from the memory screen inside the app. Auprès is a companion, not a medical service, and nothing it says is medical advice.
How long we keep things
We keep your conversations, memory facts, saved recipes and lists, and images for as long as your account exists, so they’re there when you come back. There is no automatic expiry — your library is yours until you remove it or delete your account, at which point it is erased permanently (see Your rights, below). Usage measurements (described below) and the diagnostic records we keep to run the service are retained on a rolling basis and are not tied to the content of your conversations.
Training and product improvement
We do not train AI models on your chats, your memory facts, or your images. Mistral AI, the one model provider we send them to, contractually commits not to train on data sent via its paid API either — that’s a standard guarantee, not something we had to negotiate. Mistral’s consumer chat product (le Chat) has a separate “memories” feature; that does not apply to traffic we send via the API and your chats never enter it.
For users on our free tier, we may review small samples of conversations internally — with personal identifiers removed — to spot problems and improve how Auprès answers. Examples: a confusing reply we want to fix, an emergency-language case where the safety prompt fired (or should have but didn’t), a recipe import that broke. This review is by humans on our team, not by AI models, and the purpose is product quality only.
Paid subscribers are excluded from this review by default. Free-tier users who don’t want their conversations sampled can opt out by emailing privacy@aupres.ai — a self-serve toggle is on the roadmap. Opting out does not change anything else about how Auprès works for you.
How we measure usage
Each conversation with Auprès has a cost — the AI providers charge us by the token. To keep the service sustainable and to enforce fair-use limits, we record, for each message you send, the model that answered, the number of tokens used, and when it happened. We do not store the content of your messages a second time alongside this measurement — the measurement is metadata only, and the message content is already covered above. You can see your own usage in Settings → Usage.
Your rights
You can delete your entire account, every chat, every image, and every memory fact from inside the app at any time — Settings → Delete account. The delete is permanent and immediate; there is no recovery. If you can’t access the app for some reason, email privacy@aupres.ai and we’ll process the deletion within seven days.
You can request a copy of everything we hold about you by emailing the same address. We’ll send it within thirty days.
Children
Auprès is for adults and we don’t knowingly accept accounts from anyone under eighteen. If you believe a minor has signed up, email privacy@aupres.ai and we’ll delete the account.
Changes
If we materially change this policy we’ll email signed-in users at least thirty days before the change takes effect. Smaller edits (clarifications, typos) we’ll just update the date above.
Contact
Avalon Design Studio, Inc. · privacy@aupres.ai