WiseRaven
Privacy & security
Written in plain language, and kept honest about the limits. Last updated July 2026.
Back to FAQThe short version
Your conversations are encrypted in transit and at rest, and they are never sold, rented, or used to advertise to you.
To answer you at all, WiseRaven has to send the words of your conversation to an AI model. Before that happens, account identifiers are stripped out. What is left is your conversation, not your identity.
Encryption
In transit: every connection between your device, WiseRaven, and any service it calls uses TLS (HTTPS).
At rest: your database records, uploaded files, and backups are stored on encrypted disks by the managed cloud platform WiseRaven runs on.
What this is not: end-to-end encryption. Your companion has to be able to read your conversation to remember it and reply to it, which means WiseRaven's servers can read it too. Anyone claiming both a memory that works and end-to-end encryption is describing something that does not exist yet.
What is removed before anything reaches an AI provider
Your email address, phone number, and any account or database identifiers are stripped and replaced with placeholders.
Your full name is never sent. Your first name is sent only so your companion can use it — and you can turn that off in Settings, in which case nothing name-like goes out at all.
Your saved home location is rounded to roughly a one-kilometre area before it is used for weather, wildfire, or fuel-price lookups. Your exact coordinates are never sent to those feeds.
What is not removed: the content of what you write. If you tell your companion about Mom, or about meeting Dave at Old Station, those words travel with the message — the companion cannot remember what it is not allowed to read. So the accurate claim is that no account-identifying data is shared, not that no human name ever appears.
Who processes your conversations
Replies, memory extraction, and history import are generated by Google Gemini models.
Your companion's voice and microphone transcription are handled by OpenAI models. Voice recordings cannot be de-identified before transcription — the audio is the input — so if you would rather nothing spoken leaves, use typing instead of the microphone.
These providers are used to process your request and return a result. Requests sent through the gateway are not used to train their models.
Weather, wildfire, market, fuel-price, sports, and news lookups go to the relevant public data feeds with a topic or a coarse location, never with anything about who you are.
Advertising
There are no ads in WiseRaven today, and paid plans will never carry them.
A free, ad-supported tier is planned. If and when it launches, any advertising in it will be clearly labelled, and your conversations and memories will not be used to target it. Paying is how you stay out of that entirely.
What you control
Everything your companion remembers is visible in the Me tab. You can correct it or delete it, and deleted memories stop being sent with future messages.
You can turn off first-name sharing, voice, and notifications independently in Settings.
Ask me to delete your account and I will remove your conversations, memories, and files.
Who is responsible for your data
WiseRavens AI is the data controller for the personal data described here, and decides how and why it is used. Contact: keith@wiseravensai.com.
What is collected, and why
Account data (email address, and your display name and birthday if you give them) — to create and secure your account and to let your companion address you properly. Legal basis: performance of our contract with you.
Conversation content, memories, uploaded files, and images you generate — to provide the service you asked for. Legal basis: performance of our contract with you.
Watch preferences, home location, timezone, and notification settings — to deliver updates at the right time about the right things. Legal basis: performance of our contract with you.
Device and usage data (device identifier, browser user agent, IP address, sign-in events, feature usage and cost metering) — for security, fraud prevention, troubleshooting, and improving the product. Legal basis: my legitimate interest in running a secure, working service.
Support messages you send me — to answer you. Legal basis: legitimate interest.
Payment data is collected by Stripe, not by me. I only ever see a subscription record: plan, status, and renewal date.
Who your data is shared with
Service providers that run the service on my behalf: cloud hosting and database, email delivery, push notification delivery, and the AI providers described above. They act on my instructions.
Stripe, the Merchant of Record for orders, for the sale of subscriptions, payment processing, subscription management, invoicing, tax compliance, and refunds.
Professional advisers (legal, accounting) where needed, and authorities where the law requires it.
Your data is not sold, rented, or shared with advertisers.
How long it is kept
Conversations, memories, and files are kept while your account is open, so your companion can remember you. Off-the-record chats are purged within two hours.
In-app notifications are kept 24 hours. Security and sign-in logs are kept up to 12 months. Billing records are kept as long as tax and accounting law requires.
When you close your account, your personal data is deleted or anonymised within 30 days, except where I must keep records by law.
Your rights
You can ask me to give you a copy of your data, correct it, delete it, restrict or object to how it is used, or export it. Where processing relies on consent, you can withdraw it at any time.
Email keith@wiseravensai.com and I will respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection authority.
Data is stored and processed in the United States. Where data moves from the UK or EEA, it is protected by Standard Contractual Clauses with the providers involved.
Security
Access is protected by authentication, row-level database rules that scope every record to its owner, encrypted storage, and encrypted transport. Only I have administrative access.
Cookies
Essential cookies and local storage keep you signed in and remember your device — these cannot be turned off without breaking sign-in.
Analytics cookies (Google Analytics) tell me how the public pages are used. There are no advertising cookies. You can block or clear cookies in your browser at any time.
Questions
Email keith@wiseravensai.com. If something on this page is unclear or looks wrong, I would genuinely rather hear about it.