Privacy Policy

_Last updated: 2026-05-28_

This is a stub. Plain-language draft, not a lawyer-reviewed final policy. Get a real legal review before any wide launch.

Fati is a voice-first AI coaching app. We take a small set of personal data, hand it to a small set of vendors who help run the service, and keep the rest under your account. This page lays out what we collect, why, who else touches it, and how you control it.

What we collect

• Account info. Your email, display name, timezone, and basic profile fields you fill in.
• Voice recordings. When you talk to Fati, your audio is recorded and stored so the coaching can stay coherent across conversations. Call recording is on by default; you can turn it off in settings.
• Transcripts and conversation content. Everything you say and everything Fati says back is transcribed and saved alongside the audio.
• Activity data. The goals, habits, tasks, check-ins, and other entries you create through the app.
• Device tokens for push. If you allow notifications, we store the push token your browser or OS hands us so we can deliver nudges.
• Phone number for SMS. If you opt into SMS, we store the phone number you give us so we can send and receive text messages on Fati's behalf.
• Basic technical info. Standard server logs (IP, user agent, timestamps) needed to run a web service and debug problems.

How we use it

• Run the coaching service. Hold conversations, remember context, surface the right activities, send check-ins, and deliver the rest of the product to you.
• Improve the product. Look at aggregate, de-identified patterns to make Fati better. We do not sell your data and we do not share it with advertisers.
• Keep the service safe. Detect abuse, debug failures, respond to security issues.

Third-party processors

We rely on a small set of vendors to run Fati. Each of them processes only the data they need for their slice of the service. Their policies link below; you should glance through them.

• Anthropic — the language model that powers Fati's responses.
• Deepgram — speech-to-text, turns your voice into transcripts.
• ElevenLabs — text-to-speech, turns Fati's text into the voice you hear.
• Cartesia — alternate text-to-speech provider used for some voices.
• Supabase — database, authentication, file storage.
• Telnyx — sends and receives SMS on Fati's behalf when SMS is enabled.
• Push notification providers (Apple Push Notification service and Google Firebase Cloud Messaging) — deliver push notifications when you opt in.

We may add or change vendors over time. Material changes will be flagged in the "updates" section below before they take effect.

Data retention

By default, your account data — including voice recordings and transcripts — is kept for the lifetime of your account. The coaching gets better the longer Fati has worked with you, so we don't time-age recordings.

You can request earlier deletion at any time:

• Delete your account from settings to remove everything in a single pass: profile, calls, voice notes, audio files, transcripts, and the memory derived from them.
• Email the address below to request manual erasure of specific data.

Backups roll off on our vendors' default retention schedule (currently around 7 days at Supabase).

Your rights

You can:

• Access the data we hold on you.
• Correct anything that's wrong.
• Delete your account and everything attached to it.
• Export a machine-readable copy of your data.

To exercise any of these, email [privacy@fati.app](mailto:privacy@fati.app) or, while this stub is in place, [smamiller08@gmail.com](mailto:smamiller08@gmail.com).

If you live in a region with a specific privacy law (GDPR in the EU/UK, CCPA in California, and others), those rights apply to you too. Use the same address.

Children

Fati is not for children. We do not knowingly collect data from anyone:

• under 13 in the United States (COPPA), or
• under 16 in regions where local law sets a higher minimum age (much of the EU/UK).

If you believe a minor has signed up, email us and we'll delete the account.

Security

We use standard practices to protect your data: encrypted connections, encrypted storage at our vendors, role-based access on the database, and limited admin access. No system is perfectly secure; if we discover a breach affecting your data, we'll notify you.

International transfers

Fati's vendors are primarily based in the United States. If you use the service from outside the US, your data will be transferred to and processed there.

Updates

We'll notify you in-app or by email before any material change to this policy. Non-material edits (typos, link fixes) may be made silently; the "last updated" date at the top will always reflect the most recent change.

Contact

Privacy questions: [privacy@fati.app](mailto:privacy@fati.app) (or [smamiller08@gmail.com](mailto:smamiller08@gmail.com) while this stub is in place).