Legal · Privacy

Privacy Policy

Effective date: 2026-06-09 Last updated: 2026-06-09

Cairn is a personal project built and operated by AJ Bayoun, an individual ("I", "me", "my"). This Privacy Policy describes what information Cairn (the "Service" — including the desktop app, mobile app, and any related website) collects, how I use it, and the choices you have.

By using the Service, you agree to this policy. If you don't agree, please don't use the Service.

You can reach me at aj@trycairn.io for any privacy question.

1. The short version

  • Cairn is a one-person project. There is no company behind it.
  • I try to collect as little as possible. Your notes live on your device by default.
  • When you use AI features, the text of your prompt is sent to Anthropic (the Claude API). I don't use your data to train AI models, and Anthropic doesn't train on data submitted through the API.
  • I don't sell your data. I never will.

2. What I collect

2.1 Information you give me

  • Account info (if/when accounts exist). Email address, display name, and authentication identifier (e.g., from Apple or Google sign-in).
  • Your content. Notes, spaces, tags, attachments, and anything else you create in the app ("Your Content"). Today this is stored locally on your device. If you opt into sync in the future, it will also be stored on the backend described in Section 4.
  • Messages to me. If you email me with feedback or bug reports, I'll see your email address and whatever you wrote.

2.2 Information collected automatically

  • Crash reports and diagnostics. Stack traces, app version, OS version, and basic device info when something breaks. These do not include the contents of your notes.
  • Basic usage events (if enabled). Anonymous events like "app opened" or "note created" — no note content. If I add analytics, it will be a privacy-respecting provider and you'll be able to opt out.
  • Local storage. The desktop app stores your notes and settings in your operating system's local application data directory. The mobile app uses the equivalent secure on-device storage.

2.3 AI features

When you use a feature that calls a large language model:

  • The text you submit (your "prompt") and any context you attach (e.g., a selected note) is sent to Anthropic, PBC via the Claude API.
  • Anthropic does not train its models on data submitted through the API. I do not train any model on your data either.
  • The model's response ("AI Output") is returned to you and only stored if you choose to save it as a note.

3. How I use information

I use the information above only to:

  1. Run the Service and make it work on your devices.
  2. Sync Your Content across your devices (only if you turn sync on).
  3. Process the AI requests you initiate.
  4. Fix bugs and improve reliability.
  5. Reply to you if you contact me.
  6. Comply with the law when I have to.

I do not sell your data, run ads against it, or use Your Content to train AI.

4. Who else sees your data

I keep this list short on purpose. Today, the third parties that may process your information are:

  • Anthropic, PBC — runs the Claude API that generates AI Output from your prompts.
  • Apple / Google — if you sign in with Apple or Google, or distribute the app through their stores, they receive what their platforms require.
  • A hosted backend (planned: Convex) — if and when sync is enabled, Your Content will be stored on a backend provider for that purpose. I'll update this policy with the specific provider before sync ships.
  • Email and crash reporting tools — if I add them, I'll list them here.

I'll share information with law enforcement or other parties only when I genuinely believe I'm legally required to, or to protect someone's safety.

5. How long I keep things

  • Your notes live on your device until you delete them. Once deleted in-app, they're gone from your active workspace immediately.
  • If sync is enabled, deleting a note removes it from the backend, and it will be purged from any backups within 30 days.
  • Crash and diagnostic logs are kept for up to 90 days, then deleted or aggregated.
  • If accounts exist and you delete yours, I'll delete your account info and any server-side content within 30 days, except where the law requires me to keep it longer.

6. Your choices and rights

You can:

  • Delete your notes at any time inside the app.
  • Uninstall the app to remove all local data from your device.
  • Email me at aj@trycairn.io to ask what I have, request a copy, request deletion, or correct anything inaccurate.

Depending on where you live, you may have additional rights under laws like the GDPR (EU/UK), the CCPA/CPRA (California), or similar laws elsewhere — including the right to access, correct, delete, or port your data, and to lodge a complaint with your local data protection authority. I'll respect those rights and respond within the timeframes the law requires.

I do not "sell" or "share" personal information for cross-context behavioral advertising as those terms are defined under California law.

7. Security

I take reasonable steps to protect your information — including using providers that encrypt data in transit (TLS) and at rest where supported. But Cairn is a small personal project, not a hardened enterprise system. No method of storing or transmitting data is 100% secure. If a security incident affects your data, I'll let you know and notify regulators where the law requires it.

8. Children

Cairn is not directed to children under 13 (or 16 in the EU/UK), and I don't knowingly collect information from them. If you believe a child has used the Service and provided information, email me at aj@trycairn.io and I'll delete it.

9. International users

I operate Cairn from the United States. If you use the Service from another country, your information will be transferred to and processed in the U.S. and wherever my providers operate. By using the Service, you understand this.

10. Third-party links

The Service may link to third-party sites or services. I don't control them and this policy doesn't apply to them — check their policies.

11. Changes

I may update this policy. If I make a meaningful change, I'll update the "Last updated" date and, where reasonable, notify you in the app or by email before it takes effect. Continued use after the change means you accept the update.

12. Contact

Any question or request: aj@trycairn.io.

This document is a template I wrote for my own project. It is not legal advice. If you're reusing this for your own app, talk to a lawyer.

← HomePrivacyTerms