Privacy Policy

Effective and last updated: 2026-10-04

These pages cover this website only. Anyone installing Edwin runs it on their own machine. Their memories stay on their machine and go only to the model providers and services listed below; Edwin's authors receive none of them. This policy has not yet been reviewed by legal counsel.

Overview

heyedwin.io is the website of Edwin, a local-first AI memory system. The site is owned and operated by Alexander Snyder, who can be reached at alexander@purviewx.ai. The first two sections below describe this website. The section after them describes, for information, what the Edwin software sends to outside services when it runs; it is not a policy covering anyone's installation.

Information this site collects

This site is hosted on Vercel. Like any web host, Vercel keeps standard request logs, such as your IP address, user agent and the page requested, to serve and protect the site. Beyond that, the site collects nothing: it uses no analytics, sets no cookies, stores nothing in your browser's local storage and has no forms. Its fonts are served from this site itself, not from a third-party font service. If you email us, we receive only what you choose to send.

How we use your information

We use what you send by email only to reply to you, and, if you ask, to tell you when Edwin opens to new users. We do not sell your information.

What the Edwin software sends to other services

Edwin keeps its knowledge store as a SQLite file on the owner's Mac. Edwin does not encrypt that file itself; the Mac's own disk encryption (FileVault), if turned on, covers it, and the nightly backups are encrypted. It is local-first, not local-only: to extract and check facts it sends text to third-party model providers, and some optional features use other services. As of October 2026:

  • Venice AI — extracts facts from each meeting transcript, which is sent in sections of up to about 25,000 characters; also challenges facts and writes the combined verdict. Venice advertises a zero-logging policy; we have not independently confirmed it.
  • Google (Gemini) — judges facts and checks their plausibility. It is called with web search enabled, so a phrase taken from a memory may be sent to Google Search as a query.
  • Google (Gemini), the read-time check — off by default; on the developer's install it has been on since 2026-10-03 for searches AI clients make over MCP only. Each such search sends the client's question and up to 12 retrieved facts, with their dates, to the checking model (gemini-2.5-flash), which marks each current, outdated or unclear. Facts marked sensitive, and questions that read as sensitive, are not sent. Nothing stored changes.
  • Google (Gemini Live), voice — only when the owner talks to Edwin by voice, in the terminal or in the portal: the microphone audio, and a preloaded set of the owner's memories as context, are streamed to Google. If the owner asks the terminal voice to look at the screen, screenshots of the screen are streamed to Google too, until screen sharing is turned off (it turns itself off after two minutes). Facts marked sensitive are left out unless the owner opts in. The wake word is detected on the Mac.
  • Anthropic (Claude) — second-provider confirmation, and fallback when another provider does not answer.
  • Apple (iCloud Drive) — stores the encrypted nightly backup (AES-256, keyed by the owner's brain key).
  • Cloudflare — a tunnel for the read-only connector that serves memories to AI clients the owner authorizes, and for the ingest webhook, when either is turned on.

OpenClaw, a separate agent, is not part of Edwin's install. On the developer's own Mac the voice can hand it a short request; what OpenClaw then sends, and where, is set by OpenClaw's own configuration, not by Edwin.

During enrichment, the text of a stored fact and up to five related facts goes to these providers. Over 99% of enrichment inference ran on cloud providers rather than a local model (audit, 2026-09-20). Facts the extraction model marks sensitive get no further model calls and are never served to other AIs unless you opt in. The transcript they came from was already sent to Venice for extraction. Sensitive facts are inside the encrypted backup, like everything else. Encrypted snapshots to the Walrus testnet are an opt-in demonstration, off by default; those copies expire.

Edwin processes the author's own meetings, which include colleagues' and clients' speech. That text reaches the providers above; data processing agreements with them are not yet in place.

Children

This site is not directed at children, and we do not knowingly collect information from them.

Changes to this policy

If this policy changes, the new version will be posted on this page with a new date at the top.

Contact

Questions about privacy? Email alexander@purviewx.ai.