Privacy policy

Effective 8 September 2026.

Canary is distributed privately and is available by invitation. This policy covers the app and these public pages.

Data and its use

Canary processes your account and sign-in details, the content you enter, preferences, and device notification identifiers to provide the app, authenticate access, generate requested AI responses, and deliver notifications. Relevant app content is sent to the AI provider when an AI feature runs.

Operational logs contain request and service metadata used for reliability and security, rather than private app content or AI prompts and replies. These public pages use no analytics, cookies, forms, or advertising trackers; hosting infrastructure processes connection metadata to serve and protect them.

Service providers

• Auth0 handles sign-in and identity.
• Railway hosts the backend, database, and temporary export files.
• Firebase, provided by Google, delivers device notifications.
• Anthropic and OpenAI process AI requests and the context needed to answer them.

Providers process the data needed for their services under their applicable terms and retention policies. AI providers do not use your requests to train their models and delete them within 30 days, except where their policies require longer retention for abuse or legal review. Deletion in Canary does not immediately erase a provider's independently retained records.

Retention

Account content remains until you delete it or routine cleanup removes older records. Completed tasks are cleaned up after 30 days. History is limited to the newest three closed projects per area, 20 activity entries per project, and 20 coaching entries per account. Daily plans are removed once more than two days behind the current UTC date.

Export files expire after one hour; expired files are removed by hourly cleanup, and finished export records are cleaned up after 30 days. Background AI results are available for 24 hours. Job records, including their inputs and results, are cleaned up seven days after the result is used or expires, or the job is cancelled or fails. Sources you add for Canary to draft knowledge from, and the drafts made from them, are removed when you discard the draft or seven days after you last acted on it; a source never submitted for a draft is removed after an hour. Context files you keep for an area or project stay until you delete them or their area or project is deleted, including when a closed project falls outside the history limit above. Cleanup runs periodically, so expiry and physical removal can differ.

Export and deletion

In the app, open Settings → Account → Export data to download your stored account records, or Settings → Account → Delete account to remove your account. These actions require recent sign-in. Exports exclude temporary data, credentials, and device notification tokens.

Account deletion removes Canary's live account content, cached AI data, and temporary exports. A sign-in identifier is retained to prevent the deleted account from being recreated. It does not delete your Auth0 identity automatically. Historical encrypted backups remain until separately retired by the operator.

Contact

For privacy questions or help with a data request, contact the person who invited you to Canary.