Your privacy is important to us. This Privacy Policy explains how Catalyst collects, uses, stores, and protects your personal information. We are committed to transparency and to complying with all applicable federal and state privacy laws, including the FTC Act and the California Consumer Privacy Act (CCPA).
Collected through app analytics (no third-party tracking) and our backend systems.
We use anonymized, aggregate data to understand which features provide the most value, improve daily focus scoring accuracy, optimize task recommendation quality, and test new features before rollout.
Catalyst stores most app data — including goals, projects, settings, and saved progress — primarily on your device. We send only the data needed for AI-powered coaching, voice processing, subscriptions, memory continuity, or optional backup and restore.
What We Do NOT DoWe do NOT sell your voice recordings, conversations, calendar data, or any personal information to third parties for any purpose.
| Situation | What's Shared | Why | Your Consent |
|---|---|---|---|
| Voice Processing | Voice audio and response text | Convert speech to text and responses to voice | Yes (in-app consent) |
| AI Coaching | Conversation content needed for the reply | Generate personalized coaching responses | Yes (in-app consent) |
| Web Research | Search query text | Fetch real-time information | Yes (in-app consent) |
| Memory & Context | AI-generated conversation summaries | Enable continuity across sessions | Yes (in-app consent) |
| Secure Infrastructure | Encrypted backups and service logs | Secure, operate, and restore the service | Yes (in-app consent) |
| Payment Processor | Payment info | Process subscriptions | Yes (during checkout) |
| Legal Requirement | As required by law | Court order compliance | No (legal process) |
Catalyst uses third-party services to power voice interaction, AI coaching, and web research. Here's what each service category does with your data:
Voice Processing: Your voice is converted to text for processing and Jax's responses are converted to speech for playback. Voice audio is processed in real time and is not permanently stored by our processing partners.
AI Coaching: Your conversations are processed through AI language models to generate Jax's responses. These services do not permanently store your conversations.
Web Research: When you ask Jax to look something up, the search query is sent to web search providers. They receive only the query text — never your conversation history, personal data, or voice recordings.
Memory & Context: Jax remembers your goals, projects, and patterns across sessions through conversation summaries stored on Aurandel's private infrastructure. We store AI-extracted summaries — not raw conversation transcripts or voice recordings. All memory data is encrypted at rest (AES-256) and in transit (TLS 1.3). You can delete all memories at any time through the app. We do not share this data with advertisers, data brokers, or social platforms.
At Rest: Data stored on Aurandel's infrastructure is encrypted with AES-256. Data kept on your device is protected by Apple's platform security and any device encryption you enable.
In Transit: All data transmitted using TLS 1.3 encryption with HTTPS-only connections and certificate pinning.
| Role | Access Level | Purpose |
|---|---|---|
| Founder | Full access | Oversight and development |
| Authorized Developers | Read-only for debugging | Issue resolution only |
| Third-Party Services | Ephemeral access | Provide services only |
Every access to your data is logged with timestamp and purpose. Logs are retained for 2 years.
| Data Type | Retention Period | When Deleted |
|---|---|---|
| Conversation transcripts | 90 days after session | 90 days after deletion request |
| Voice recordings | 90 days after session | 90 days after deletion request |
| Memory & context summaries | 12 months (then archived) | Immediately on user request |
| Usage patterns | 12 months | 12 months (or 90 days if requested) |
| Web search queries | Not retained | Used only for immediate response |
| Crash reports | 90 days | 90 days |
If a breach occurs, we will notify you within 60 days, describe the breach, explain what we are doing to address it, and provide guidance on steps you can take.
You can view all stored conversations, voice recordings, and usage data, and export all your data in a readable format.
How: In Catalyst app → Settings → Data → Export Data, or email privacy@aurandel.com
You can delete your account and all associated data, specific conversations, or voice recordings.
How: In Catalyst app → Settings → Data → Reset App, or email privacy@aurandel.com
We delete your data within 90 days. Third-party services do NOT retain your data. Backups on Aurandel's private infrastructure are securely destroyed.
California residents can request ALL data collected (not just last 12 months) under CCPA 2026.
How: Email privacy@aurandel.com with subject "Data Export - CCPA". Complete export in JSON within 30 days.
You must consent before we collect, store, or share any personal data. We use explicit opt-in with no pre-checked boxes, no false urgency, no misleading placement, and no dark patterns.
If you are a California resident, your rights include:
How: Submit request to privacy@aurandel.com. Response within 30 days. No fee.
For automated decision-making (e.g., task recommendations, daily focus scoring), we conduct risk assessments before the December 2027 deadline, disclose significant impacts, and provide opt-out where feasible.
Catalyst is NOT intended for children under 16. We do NOT knowingly collect personal information from children under 16. If we discover such collection, we delete it immediately.
If you are outside the United States, your data is processed in the United States. We use Standard Contract Clauses for data transfers and appropriate security measures. This policy is based on U.S. law (FTC, CCPA). Additional local protections may apply.
If we change this policy, we will post the updated policy in the Catalyst app, email you notice of material changes, and explain what changed and why.
Privacy Questions: privacy@aurandel.com (response within 30 days)
General Inquiries: info@aurandel.com
Legal Inquiries: legal@aurandel.com