On this page
Your privacy is important to us. This Privacy Policy explains how Catalyst collects, uses, stores, and protects your personal information. We are committed to transparency and to complying with all applicable federal and state privacy laws, including the FTC Act and the California Consumer Privacy Act (CCPA).
Section 1: Information We Collect
1.1 Voice Data
What We Collect- Voice recordings from your conversations with Catalyst
- Voice characteristics (tone, pace)
- Language detection for multilingual features
- When you speak with Catalyst (voice input)
- During voice-first onboarding
- When using dynamic language switching
- Provide voice-based productivity coaching
- Enable multilingual voice interactions
- Detect language preferences
1.2 Conversation Data
What We Collect- Full text transcript of your conversations with Catalyst
- Timestamped session history
- Goals, projects, and priorities shared with Catalyst
- Daily focus scores and productivity patterns
- Archetype classification and preferences
- Provide personalized productivity coaching
- Track progress toward your goals
- Enable daily focus scoring and task recommendations
- Support archetype-based personalization
1.3 Calendar and Task Data
What We Collect- Calendar events and availability (optional)
- Task lists and project details
- Deadlines, time commitments, and project interdependencies
- Provide goal-aware calendar orchestration
- Generate task recommendations based on dependencies
- Align time allocation with priorities
1.4 Usage Patterns
- How often you use Catalyst and which features you access
- Session duration and engagement metrics
- Task completion patterns
Collected through app analytics (no third-party tracking) and our backend systems.
1.5 Device and Technical Information
- Device type (iOS/Android, system language)
- App version and operating system version
1.6 Web Search Data
What We Collect- URLs and search queries initiated through Jax
- Fetched web page content (temporarily, for response generation)
- When you ask Jax to look something up or mention a URL
- Provide real-time information in coaching responses
- Web content is used only for the immediate response and is not permanently stored
1.7 Memory & Context Data
What We Collect- AI-extracted conversation summaries (not raw transcripts)
- Key facts, decisions, commitments, goals, and patterns identified during sessions
- Context relevance signals that help Jax prioritize what matters most
- Automatically at the end of coaching sessions to preserve continuity
- Memory entries are summaries only — raw transcripts and voice recordings are not stored as memory
- Enable Jax to remember your goals, commitments, and context across sessions
- Follow up on commitments you made in previous conversations
- Notice patterns across sessions so support stays relevant over time
- Make coaching feel personal and continuous rather than starting from zero each session
- You can ask Jax to forget specific memories at any time
- You can request deletion of all memory data
- Older memory summaries may be archived or deleted according to our retention rules
Section 2: How We Use Your Information
2.1 To Provide Services
- Generate personalized productivity coaching responses
- Calculate daily focus scores
- Provide task recommendations based on priorities and dependencies
- Identify and apply archetype-based personalization
- Suggest calendar modifications aligned with your goals
2.2 To Personalize Your Experience
- Adapt coaching style to your archetype
- Recognize productivity patterns over time
- Suggest relevant resources from the Wisdom Knowledge Base
- Adjust language and tone based on your preferences
2.3 To Improve Services
We use anonymized, aggregate data to understand which features provide the most value, improve daily focus scoring accuracy, optimize task recommendation quality, and test new features before rollout.
Catalyst stores most app data — including goals, projects, settings, and saved progress — primarily on your device. We send only the data needed for AI-powered coaching, voice processing, subscriptions, memory continuity, or optional backup and restore.
What We Do NOT Do- We do NOT sell your personal data to anyone
- We do NOT share your conversations with advertisers
- We do NOT share your data with analytics platforms without explicit consent
2.4 For Legal Compliance
- Comply with FTC requirements for consumer apps
- Document consent records and maintain audit logs
- Comply with CCPA if you are a California resident
Section 3: How We Share Your Information
3.1 We Do Not Sell Your Data
We do NOT sell your voice recordings, conversations, calendar data, or any personal information to third parties for any purpose.
3.2 When We Share (Limited Cases)
| Situation | What's Shared | Why | Your Consent |
|---|---|---|---|
| Voice Processing | Voice audio and response text | Convert speech to text and responses to voice | Yes (in-app consent) |
| AI Coaching | Conversation content needed for the reply | Generate personalized coaching responses | Yes (in-app consent) |
| Web Research | Search query text | Fetch real-time information | Yes (in-app consent) |
| Memory & Context | AI-generated conversation summaries | Enable continuity across sessions | Yes (in-app consent) |
| Secure Infrastructure | Encrypted backups and service logs | Secure, operate, and restore the service | Yes (in-app consent) |
| Payment Processor | Payment info | Process subscriptions | Yes (during checkout) |
| Legal Requirement | As required by law | Court order compliance | No (legal process) |
3.3 Third-Party Service Details
Catalyst uses third-party services to power voice interaction, AI coaching, and web research. Here's what each service category does with your data:
Voice Processing: Your voice is converted to text for processing and Jax's responses are converted to speech for playback. Voice audio is processed in real time and is not permanently stored by our processing partners.
AI Coaching: Your conversations are processed through AI language models to generate Jax's responses. These services do not permanently store your conversations.
Web Research: When you ask Jax to look something up, the search query is sent to web search providers. They receive only the query text — never your conversation history, personal data, or voice recordings.
Memory & Context: Jax remembers your goals, projects, and patterns across sessions through conversation summaries stored on Aurandel's private infrastructure. We store AI-extracted summaries — not raw conversation transcripts or voice recordings. All memory data is encrypted at rest (AES-256) and in transit (TLS 1.3). You can delete all memories at any time through the app. We do not share this data with advertisers, data brokers, or social platforms.
3.4 What We Never Share
- Ad networks or advertisers
- Data brokers
- Analytics platforms without explicit consent
- Social media platforms
Section 4: Data Security
4.1 Encryption
At Rest: Data stored on Aurandel's infrastructure is encrypted with AES-256. Data kept on your device is protected by Apple's platform security and any device encryption you enable.
In Transit: All data transmitted using TLS 1.3 encryption with HTTPS-only connections and certificate pinning.
4.2 Access Controls
| Role | Access Level | Purpose |
|---|---|---|
| Founder | Full access | Oversight and development |
| Authorized Developers | Read-only for debugging | Issue resolution only |
| Third-Party Services | Ephemeral access | Provide services only |
Every access to your data is logged with timestamp and purpose. Logs are retained for 2 years.
4.3 Data Retention
| Data Type | Retention Period | When Deleted |
|---|---|---|
| Conversation transcripts | 90 days after session | 90 days after deletion request |
| Voice recordings | 90 days after session | 90 days after deletion request |
| Memory & context summaries | 12 months (then archived) | Immediately on user request |
| Usage patterns | 12 months | 12 months (or 90 days if requested) |
| Web search queries | Not retained | Used only for immediate response |
| Crash reports | 90 days | 90 days |
4.4 Breach Notification
If a breach occurs, we will notify you within 60 days, describe the breach, explain what we are doing to address it, and provide guidance on steps you can take.
Section 5: Your Rights
5.1 Right to Access
You can view all stored conversations, voice recordings, and usage data, and export all your data in a readable format.
How: In Catalyst app → Settings → Data → Export Data, or email privacy@aurandel.com
5.2 Right to Delete
You can delete your account and all associated data, specific conversations, or voice recordings.
How: In Catalyst app → Settings → Data → Reset App, or email privacy@aurandel.com
We delete your data within 90 days. Third-party services do NOT retain your data. Backups on Aurandel's private infrastructure are securely destroyed.
5.3 Right to Export (CCPA)
California residents can request ALL data collected (not just last 12 months) under CCPA 2026.
How: Email privacy@aurandel.com with subject "Data Export - CCPA". Complete export in JSON within 30 days.
5.4 Right to Opt Out
- Opt out of analytics collection at any time
- Opt out of new features requiring additional consent
- Revoke consent for third-party services
5.5 Right to Consent
You must consent before we collect, store, or share any personal data. We use explicit opt-in with no pre-checked boxes, no false urgency, no misleading placement, and no dark patterns.
Section 6: California and State Rights
6.1 CCPA 2026
If you are a California resident, your rights include:
- Right to know all categories of personal information collected
- Right to know sources and purposes for collection
- Right to know third parties sharing data
- Right to delete and correct personal information
- Right to opt out of sale or sharing (we do not sell)
- Right to limit use of sensitive personal information
How: Submit request to privacy@aurandel.com. Response within 30 days. No fee.
6.2 Risk Assessment
For automated decision-making (e.g., task recommendations, daily focus scoring), we conduct risk assessments before the December 2027 deadline, disclose significant impacts, and provide opt-out where feasible.
Section 7: Children's Privacy
Catalyst is NOT intended for children under 16. We do NOT knowingly collect personal information from children under 16. If we discover such collection, we delete it immediately.
Section 8: International Users
If you are outside the United States, your data is processed in the United States. We use Standard Contract Clauses for data transfers and appropriate security measures. This policy is based on U.S. law (FTC, CCPA). Additional local protections may apply.
Section 9: Changes to This Policy
If we change this policy, we will post the updated policy in the Catalyst app, email you notice of material changes, and explain what changed and why.
Section 10: Contact Us
Privacy Questions: privacy@aurandel.com (response within 30 days)
General Inquiries: info@aurandel.com
Legal Inquiries: legal@aurandel.com