Privacy Policy

Effective: October 21, 2026

What this service is

Anthony Asi is an AI chat assistant web app, created and operated by Anthony Asi (business contact: Willow Rain Company LLC). This page explains, in plain language, what information the app stores when you use it and what choices you have.

Accounts

You can use Anthony Asi as a guest, with no account. If you create an account (by email sign-in link or Google sign-in), your work is saved to your account so it follows you across devices. Accounts are provided through Supabase Auth. Each account gets its own user ID, and your data is stored under that ID only — other users cannot see it.

What your account stores

When you are signed in, the app stores the following, tied to your user ID:

• Account information — your email address and user ID, managed by Supabase Auth (our authentication provider).
• Conversations — your chats: the messages you send and the assistant's replies, plus conversation titles and settings attached to them (such as persona and model choices).
• Memories — the facts you ask the assistant to remember. These are the same memories shown on the app's Memory page; there is no hidden second store. You can view, edit, export, and delete them in the app.
• Usage — a simple count of metered AI calls you make in a week (the count behind the usage meter in the app). It is a number, not a record of what you asked.
• Images and audio you choose to submit — if you attach an image or use voice features, that content is processed to generate a response (for example, describing an image or speaking a reply aloud).

As a guest, your conversation history and settings are kept only in your own browser's local storage, on your device. If you later sign in, that guest work moves into your account.

Session logging

For account security, we keep a short-lived events record for each account. One record is written when you:

• sign up,
• log in,
• log out, or
• have a session revoked (signed out everywhere, for example when an account is deleted or an administrator ends your sessions).

Each record holds only: your user ID, the type of event, a device label (the kind of browser/device, not a device serial number), a hashed version of the IP address, and the time. We never store raw IP addresses in this log — the address is turned into a one-way hash first, so the original address cannot be read back from it. These records are visible only to the operator (through the service dashboard) for spotting account abuse and answering your questions about your account; you cannot be tracked across the web with them.

The 7-day rule

• Session logs are short-lived. Event records described above are automatically deleted after 7 days. They are not kept longer for any purpose.
• Account deletion. When you delete your account (see below), two things happen right away: your account is marked deleted (a "soft delete") and all of your signed-in sessions are revoked immediately, everywhere.
• 7-day grace period. For 7 days after you delete your account, you can cancel the deletion simply by signing back in — your account and data come back as they were.
• Hard purge. After the 7-day grace period ends, your data is permanently erased ("hard purged"): your conversations, messages, memories, usage records, event records, account markers, and your authentication record are deleted. This cannot be undone.

How AI processing works

To generate responses, the app sends the content you submit to third-party AI model providers — currently Google's Gemini API — through our server-side functions. Those providers process the content to return a response. Their handling of API data is governed by their own terms and privacy policies. Do not submit sensitive personal information (passwords, financial details, health records, or anything similar) in chat — the assistant does not need it and it should not be sent through an AI chat tool.

Who processes your data

• Supabase is our data processor for accounts and stored app data: it runs the authentication service and the database where your account information, conversations, memories, usage counts, and session event records are stored.
• Netlify hosts the site and may process basic technical information, such as IP addresses and request logs, as part of delivering and securing the site.
• Google (Gemini API) processes the content you submit in chat to generate responses, as described above.

What we do not do

• We do not sell your personal data. Not to advertisers, not to data brokers, not to anyone.
• We do not share your information with data brokers.
• Your chats are not used by us to train models.

Cookies

Anthony Asi uses first-party cookies — set by our own domains only — in three categories. You choose the optional ones in the cookie banner (Reject All / Accept All / Cookies Settings), and you can change your choice any time from the Cookies link in the app's menu. Most of the app also keeps data in your browser's local storage; the cookies below are the ones that travel with requests.

• Essential — always on. These keep the site working: your sign-in session and security, plus the small cookie that remembers your cookie choice itself. The service cannot run without them, so they are never switched off.
• Functional — only with your OK. These remember your preferences (theme, default model) and keep your usage counters and course progress on this device, mirrored so they survive cleared site storage. If you reject them, nothing in this category is written.
• Analytics — only with your OK. These would help us see which features get used. No analytics provider is wired into the app today, so accepting records your permission and collects nothing until one is — this section will be updated before that changes.

We do not use third-party advertising cookies, and no cookie here is sold or shared with data brokers.

Your choices

• Clear your history: you can delete conversations and memories at any time from within the app. Guest data can also be cleared by clearing your browser's site data for this site.
• Delete your account: signed-in users can start account deletion from Settings → Account in the app; if in-app deletion is not live for your account yet, the email path there finishes the same deletion. The full process — including how to ask by email if you cannot sign in — is explained on our account deletion page. The 7-day rule above applies.
• Choose what you share: you control what you type or attach. Avoid submitting personal or sensitive information.

Children

This app is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new effective date.

Contact

Questions about privacy — or any request about your data — can be sent to willow.rain.llc@gmail.com.