Privacy policy

Effective October 25, 2026 · Last updated October 25, 2026 (version 2026-10-25.3) · What changed · Terms of use · Usage Policy

Contents

1. Who we are and what this covers
2. Personal data we collect
3. How we use it
4. Who we share it with
5. AI providers and where your chats go
6. Training Owndom's own AI
7. Your controls and rights
8. How long we keep it
9. Where your data is processed
10. Children and teens
11. Security
12. Cookies and browser storage
13. Changes to this policy
14. Contact
15. Supplement: Europe, the UK and Switzerland
16. Supplement: US state privacy laws
17. Supplement: receptionist callers

1. Who we are and what this covers

The owner, one person in Massachusetts, is responsible for your data on Owndom.

Owndom (owndom.alk.homes, the desktop app, the phone companion, Messages, the studios, the developer API and the receptionist) is run by its owner, an individual in the Worcester area of Massachusetts, USA ("we", "the owner"). The owner decides how and why your personal data is used. When the planned Massachusetts company is formed, it takes over this role under the same promises, and we'll tell you first.

This policy doesn't cover what other companies do with data you send them yourself, such as the AI provider of your key (section 5), or the businesses that use the receptionist, which are responsible for their callers (supplement C). Words such as your key, model on your computer, input, output, training copy and space mean what the Terms say.

2. Personal data we collect

What you give us, what is recorded when you use Owndom, and a little from other services.

What you give us

• Account: your name, email address and password (stored only as a secure hash, never as text), and an invite code if you used one.
• Month and year of birth, asked at sign-up: to check you are 13 or older, and 18 or older for AI chat and training. If you are under 13, nothing about you is kept except a log line of the refused request (its time and IP address), deleted after 90 days.
• Your keys: stored encrypted, shown back only as their last 4 characters, checked with the provider when you save them, and used only for you: your chats, agents, Design Studio, Image Studio and catch-ups. The owner's server can decrypt a key in order to use it for you; it is never pooled, lent or used for anyone else, and it is erased when you remove it or delete your account.
• Which plan you'd pay for: your answer to the sign-up question ($8.35, $14.70 or $29.58 a month, free, or not sure; you can change it under Your profile → Plan & models). It's a survey: nothing is charged. The owner sees it only counted together with everyone's answers, to decide prices.
• What's left on your keys: so you can see your limits (Your profile → Plan & models → Limits left), Owndom keeps, for each of your keys, a one-way fingerprint of the key (not the key), the provider and model, how many calls Owndom made with it this minute and today, the limits and remaining amounts the provider reported (or the provider's published free limits), and the provider's last refusal message. For OpenRouter, Vercel, DeepSeek and Kimi keys, "Check now" asks the provider for the key's credit and free requests left.
• Profile: the @handle, name, picture, bio, status and colour you choose, and your visibility settings.
• Content: your inputs and outputs (chats with agents, including chats with a model on your computer, which your browser sends us after your computer answers), Messages posts, direct messages, files you upload, projects, designs, images, tasks and settings.
• Voice: speaking to an agent uses your browser's own speech features (your browser's maker may process the audio); Owndom keeps only the text, in the chat. In Messages voice channels, audio goes directly between the participants' browsers, so the other participants, and a Google server that helps connect them, can see your IP address. Owndom doesn't record calls.
• Your phone as a device, if you press Use this phone: its name and type, when Owndom was last open on it, what your agents asked it (kept up to a week) and, if an iPhone Shortcut reports it, its Focus mode. Only if you turn them on: its battery level, its location (the latest one only, never a history) and photos you choose to send, saved in your own files. A location or photo an agent asks for becomes part of that chat.
• Messages to us: what you write when you email us, report something or appeal.

What is recorded when you use Owndom

• Logs: each change you make and each failed request, with your username, IP address, the time and what was asked for; for each chat message, its first 140 characters and the tools the agent used; and a technical trace of agent turns. All kept on our own server for 90 days, also after a chat or account is deleted, to find and fix problems and investigate abuse.
• Agreements: which versions of the Terms and Privacy policy you accepted, when, and a scrambled (hashed) form of your IP address at the time.
• Sign-ins: for each device you sign in on, the browser and system it reports and its IP address, so you can see and end your sessions.
• Usage: when you signed up, when you were last online, which kind of model each chat uses (the provider of your key, or a model on your computer), so the owner can see what people use.
• Online status: whether one of your pages is open and in use, from the heartbeat each open page sends.
• Phone notifications: if you turn them on, the address your browser gives us to deliver them.

From other services

• Stripe tells us your subscription's status and gives us its customer and subscription references. Your card details stay with Stripe.
• AI providers send back the replies and, sometimes, error messages about your key (for example that it is invalid or out of credit).

We don't buy personal data, and we don't use data brokers.

3. How we use it

To run Owndom for you, keep it safe, train Owndom's AI on the free plan, talk to you, and obey the law.

• To provide Owndom: run your account, chats, agents, files, Messages, studios and subscription; send your chats to the model you picked; show your profile and posts to the people allowed to see them.
• To keep it safe and working: prevent abuse and fraud, enforce the Terms and the Usage Policy, investigate security problems, and find and fix bugs.
• To check age: keep 13+ for accounts and 18+ for AI chat, the studios and training.
• To train Owndom's own AI on the free plan, for adults, as section 6 describes.
• To talk to you: confirm your email, send notifications you turned on, answer your messages, and tell you about changes to Owndom, these documents or your plan.
• To understand use: see in total which features and kinds of models people use, so the owner can improve Owndom.
• To meet legal duties: keep required records and answer valid legal requests.

We don't use your data for advertising, we don't build advertising profiles, and we don't make decisions about you by automated means that have legal or similarly significant effects.

4. Who we share it with

Only the services that run Owndom, the AI provider you choose, the people you share with, and the authorities when the law requires it.

• Service providers that help run Owndom, each receiving only what its job needs:
  • Cloudflare carries this site's traffic and routes email sent to our domain.
  • Stripe handles subscriptions and card contributions.
  • Google Fonts, only if a design you made in Design Studio uses them: viewing that design loads its fonts from Google. Owndom's own fonts are served by Owndom itself.
  • Push services run by your browser's maker (Apple, Google or Mozilla) carry phone notifications if you turn them on.
  • AirVPN carries some web pages agents open, so the website sees the VPN's address, not ours.
  Our own mail server, search server and tracing run on the owner's server; no outside company receives them.
• The AI provider you choose, for chats that use a cloud model (section 5).
• Websites and search engines receive the searches and addresses agents use for you, without your account details.
• Other people on Owndom: depending on your settings, members see your name, @handle, picture, member-since date and online status (with your profile set to friends only, people who aren't your friends don't see your picture or status); people in a space see what you post there; friends see what you send them.
• Another member's AI provider: when a member asks for a catch-up in a space, or @mentions an agent there, the posts it reads (yours included) are sent to the AI provider of that member's key. Catch-ups never use a provider based in China; an agent's provider may be outside the US.
• The owner runs the servers and can open any account's chats, spaces, files and logs to keep Owndom working, to investigate abuse or a security problem, or when the law requires it.
• Authorities, when the law requires it (for example a court order), or when we believe in good faith that someone is in danger of serious harm (for example a credible threat of violence). We tell you unless the law forbids it or it would put someone at risk. We report apparent child sexual abuse material to the National Center for Missing & Exploited Children.
• A successor: if Owndom moves to the planned Massachusetts company or another successor, your data moves with it under the same promises, and we tell you first.

We never sell your personal data, and we never share it for targeted advertising.

5. AI providers and where your chats go

A chat goes to the provider you pick and follows its rules; deleting it here doesn't delete the provider's copy.

• With your key, each chat is sent from Owndom's server to that provider to get an answer. The provider's own privacy terms decide what it keeps and whether it trains on it; some keep requests for up to 30 days, some longer, and some free keys allow the provider to train on your chats. Only you can change those settings, with the provider.
• Deleting a chat on Owndom doesn't delete it at the provider. Ask the provider if you want its copy gone.
• With a model on your computer, the chat is answered on your computer, unless that app sends it to its own online service (for example Ollama's cloud models). Either way, the chat is then saved on Owndom.
• The studios and catch-ups run on your own key too. Design Studio and Messages catch-ups use one of your keys, and Image Studio uses your OpenAI, xAI, Together, Cloudflare or NVIDIA key (Cloudflare's and NVIDIA's are free): your request and any picture you add go from Owndom's server to that provider, and the result comes back to your Image Studio. The owner's own models, hardware and keys are never used for members' AI features (voice for members uses the browser's own speech features).

Where providers are based. The company that made a model and the company that runs it can differ: a Chinese-made model run by a US company is processed in the US.

6. Training Owndom's own AI

Free plan, 18+: cleaned copies of your words, and of replies whose makers allow it, train Owndom's AI. You choose if you share more; subscribers and teens share nothing unless an adult chooses to.

Owndom trains its own AI model. If you are on the free plan and 18 or older, while a chat is kept (30 days after you last use it), what you write is copied as training data, and the AI's reply is copied only when the company behind that model allows its replies to be used to train other AI. Only what you write after you first accepted terms dated October 25, 2026 (any version), never anything older. People in the EEA, the UK or Switzerland can switch this off without paying, under Your profile → Plan & models.

Help improve Owndom (your choice). Under Your profile → Plan & models, any adult can choose how much to share: the standard way above, everything (every reply included), or, for subscribers, nothing (their default). You can also send one chat to the owner on purpose (the send button under a reply, or /share): the owner gets a readable copy in their Storage, and the whole chat goes into the training data. Some providers in the table don't allow their replies to be used to train other AI; if you choose to share those replies, you are told first, and it is your choice with that provider.

• What is copied: chats you start yourself in the app, as text: your messages and the replies. Not your files, Messages posts, profile or email, not chats an agent writes for you in Messages, and never an exchange in which your agent used a tool (reading files, mail or web pages), since its reply could repeat them.
• Cleaning: before anything is written, automatic filters remove common personal details and secrets: email addresses, phone numbers, card numbers, passwords and keys, your name, email and account id, and paths of your files. Filters are not perfect, so don't put anything in a chat you would not want in training data; subscribe if you want your chats kept out.
• Storage: training copies are stored on the owner's server under random names in place of your name or account id; a private index links them to your account, so they appear in your data download and are deleted with your account. When a chat expires after 30 days, its copy stays until you delete your account or ask us to delete it. Deleting a chat yourself deletes its copy. A model already trained on them can't un-learn what it learned.
• Who sees them: only the owner can open training copies. They are never sold, never shared with or sent to another person, company or outside AI service, and never used for advertising.

7. Your controls and rights

Change, download or delete your data yourself; ask us for anything else; we answer within 30 days.

• Profile and visibility: Your profile → Profile. Choose who sees your profile (everyone here, or friends only) and your online status (everyone, friends or nobody).
• Training: Your profile → Plan & models → Help improve Owndom. Choose the standard way, everything, or (subscribers, and free-plan people in the EEA, the UK or Switzerland) nothing. Deleting a chat deletes its training copy and any copy you sent the owner.
• Devices: see and sign out of devices under Your profile → Sign-in & security.
• Delete a chat from your chat list: it is deleted, with its messages and its training copy (backups keep it up to 16 more days; log lines stay 90 days).
• Download or delete: Your profile → Your data. Download your account, profile, agreements, chats and training copies, or delete your account and everything in it, including your phones and designs you shared to the library. Email us for a copy of anything else, such as direct messages, friends or logs. Posts in shared spaces stay in those spaces; email us to remove them.
• Ask us: email [email protected] to access, correct or delete your data, or with any question. We answer within 30 days and may need to confirm it's you. Outputs can contain mistakes about people; if a chat says something wrong about you, ask us and we'll correct or delete what we hold.

People in Europe, the UK, Switzerland and some US states have additional rights: see the supplements below.

8. How long we keep it

Free-plan chats: 30 days after last use. Subscribers: until you delete. Backups: 14 more days.

• Free plan, chats: deleted 30 days after you last use them (sending a message counts as use). Chats you started before accepting the October 25, 2026 terms keep the earlier rule: 183 days without use.
• Free plan, files: deleted after 183 days without use.
• Subscribers: chats and files are kept, privately, until you delete them. When a subscription ends, your chats follow the free plan from then on, each with at least 30 days; files unused for 183 days can be deleted from then.
• Messages posts and direct messages: until you or the space's owner delete them. Posts in shared spaces stay after you delete your account; email us to remove them.
• What you send us (reports, appeals, requests): as long as we need to handle them, at most 2 years.
• Payment records: Stripe keeps them under its own rules; we keep the subscription references until you delete your account.
• Training copies (free plan, 18+): until you delete that chat or your account, or ask us to.
• Limits readings for your keys: 30 days after the last call, or until you remove the key or delete your account.
• Your answer to "Which plan would you pay for?": until you delete your account.
• Account and profile: until you delete your account.
• Accounts never confirmed: deleted after 30 days. Accounts not approved: deleted 30 days after the owner turns them down (until then you can download your data, delete the account or cancel a subscription). An account waiting for approval is kept.
• Your phone: the latest location only while sharing is on; turning it off deletes it, and removing the phone deletes everything about it (battery, Focus mode, agents' requests, which are kept up to a week anyway). A location an agent reads becomes part of that chat, kept as long as the chat and sent to that chat's AI provider.
• Logs: 90 days.
• Backups: nightly copies of the database are kept for about two weeks, so deleted data can stay in a backup for up to 16 days.

You last write in a free-plan chat on October 1. It is deleted on October 31, and the last backup holding it is gone by November 16.

9. Where your data is processed

In Massachusetts, USA, and wherever the AI provider you pick runs.

Owndom's server and the owner's PC (voice) are in Massachusetts, USA. If you use Owndom from another country, your data is sent to and kept in the United States, where privacy law may differ from yours. A chat you send with your key is processed wherever that provider runs (section 5).

10. Children and teens

Not for under-13s; teens get Messages and friends only, with safer settings.

Owndom is not for children under 13, and we don't knowingly keep data about them: sign-up asks for your month and year of birth and keeps nothing if you are under 13. If you are 13 to 17, a parent or guardian must agree to the Terms for you; AI chat and the studios are not available to you (Messages, friends and your files are); your profile starts visible to friends only and your online status to nobody; and nothing you write is used for training. If you believe a child under 13 has an account, or a parent wants a teen's data deleted, email us and we'll delete it.

11. Security

Strong basics, limited access, and we tell you and the authorities if your data is at risk.

Passwords are hashed, keys are encrypted, traffic is encrypted, each account's files are kept apart, and access to the servers is limited to the owner. No system is perfectly secure. If a security incident puts your personal information at risk, we tell you as soon as we can and without unreasonable delay, and notify the authorities the law requires (in Massachusetts, the Attorney General and the Office of Consumer Affairs and Business Regulation).

12. Cookies and browser storage

One sign-in cookie and some settings in your browser; no advertising or tracking cookies.

• Sign-in cookie: keeps you logged in. Needed for Owndom to work.
• Browser storage: settings such as your appearance (including a background picture you choose, which never leaves that browser), remembered tabs and drafts.
• Age check: if a sign-up gives an age under 13, a cookie keeps the sign-up form closed on that browser for a day.
• Cloudflare may set a cookie it needs to protect the site from attacks.

We use no advertising, analytics or cross-site tracking cookies, and we don't track you across other websites. So Do Not Track and Global Privacy Control signals from your browser change nothing: there is no tracking or sale to stop. If we ever did either, we would honor Global Privacy Control as an opt-out.

13. Changes to this policy

Changes that are worse for you get 30 days' notice; new uses apply only to new data.

We update the dates at the top whenever this policy changes. When a change is worse for you, we tell you at least 30 days before, by email and in the app, unless the law or a security problem requires it sooner, and the app asks you to accept it; you can download your data or delete your account instead. A new use of your data applies only to what you add after you accept.

What changed

• Version 2026-10-25.3: reorganized with the sections people expect from an AI service's privacy policy: data we collect (what you give us, what is recorded, what other services send), how we use it, who we share it with, controls and rights, cookies, and supplements for Europe and the UK, US state laws, and receptionist callers. Added sign-in device records, invite codes, messages to us, and that we don't buy data or make automated decisions about you. Members' studios and Messages catch-ups now run on their own keys, never the owner's; members' voice uses the browser; a training switch for the EEA, the UK and Switzerland; logs, agreements, phone Focus and requests, other members' AI providers, and longer retention details are now described.
• Version 2026-10-25.2: layered rewrite; corrected where providers are based; deleting a chat here doesn't delete the provider's copy; AI chat, studios and training 18+; members' Design Studio without Google's or NVIDIA's free trial services; voice, our own mail server, the VPN, who can open training copies, legal requests, breach notices.

14. Contact

Questions, requests and complaints: [email protected]. The owner, an individual in the Worcester area of Massachusetts, USA, is responsible for your data.

Supplement A: Europe, the UK and Switzerland

If you are in the EEA, the UK or Switzerland, these extra rules apply to you.

Controller: the owner (contact above). Legal bases for each use:

• Your rights: to access your data, correct it, delete it, restrict or object to how we use it, take it with you (download under Your profile → Your data), and withdraw consent at any time without affecting what was done before. Where we rely on legitimate interests, you can object and we will stop unless we have strong reasons to continue.
• Transfers: your data is processed in the United States (and wherever the provider you choose runs), because that is needed to provide the service you asked for.
• Complaints: you can complain to the data protection authority where you live or work. We'd like the chance to fix it first: email us.

Supplement B: US state privacy laws

For residents of California and other US states with privacy laws: what we collect, why, and your rights.

Depending on where you live (for example California, Colorado, Connecticut, Virginia and other states), you may have the right to know what personal information we collect and how we use it, to access and get a copy of it, to correct it, to delete it, and to not be treated differently for using these rights. Email us to use them; you may use an authorized agent, and we may need to confirm it's you. If we turn a request down, you can appeal by replying to our answer.

• Sources: you, your use of Owndom, Stripe and the AI providers, as section 2 describes.
• Purposes: as section 3 describes. We use sensitive information (such as your messages, precise location and login details) only to provide Owndom, keep it safe, and (for free-plan adults' chats) train Owndom's own AI as section 6 describes.
• Sale, sharing and targeted advertising: we don't sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, and we haven't in the past 12 months. We don't knowingly sell or share data of anyone under 16.
• Retention: as section 8 describes.
• Consumer health data (for example Washington and Nevada): we don't ask for health information. If you write about your health in a chat, it is handled like the rest of your chats, including training copies on the free plan for adults. You can ask us to delete it, or switch training off by emailing us, whatever your plan.

Supplement C: receptionist callers

If you called a business that uses the AI receptionist: the business controls your data.

Businesses can use Owndom's AI receptionist to answer their calls. At the start of each call it says it is an AI and that the call is transcribed. For the business it keeps the caller's number, a transcript, a summary and any contact details the caller gives. That information belongs to the business; Owndom handles it on the business's behalf. It is kept for the period the business chooses (90 days unless it changes it), and callers' contact details are deleted after 12 months. Calls are connected by a phone carrier and answered by the owner's own language and speech models. To see or delete it, ask that business.