Privacy Policy
This policy explains what AnyAI Chat stores, why, and the choices you have. It takes a few minutes to read.
On this page
The short version
- AnyAI Chat stores your account, chats, assistants, settings, usage records and your API keys (encrypted).
- The people who run AnyAI Chat can technically decrypt your keys and read your chats. By policy they do not.
- Your messages go to the AI providers you connect, under their terms. We do not train on them, sell them or show ads.
- Analytics run only if you accept them, and never include what you write.
Who we are
AnyAI Chat (“we”, “us”) runs the AnyAI Chat app and this website, and is responsible for the information described here. Write to us at support@byoai.tech about privacy or anything else.
What we collect
- Account details from Google: your name, email address and profile picture, when you sign in with Google. We also record which version of the Terms of Service and this policy you accepted, and when.
- What you create: your chats (every message and every version of a reply), chat titles, assistants, personal instructions and settings.
- Your API keys and endpoints: the name, address and API format of each endpoint you add, and its API key, stored encrypted.
- Usage records: for each answer, the endpoint and model used, token counts, timings and the estimated cost.
- A security log: a record of account events such as signing in, adding an endpoint, replacing or removing a key, exporting your data and deleting chats or your account. It holds the type of event, the time and a request reference, never your messages, keys or prompts.
- Technical logs: request times, error codes and request references, used to keep the service running. Logs never contain your messages or keys.
Unsent drafts, your theme and your analytics choice are kept in your browser on your device.
How we use it
We use your information only to run AnyAI Chat: to show your chats on every device you sign in on, to send your messages to the AI providers you connect, to show you what each answer cost, and to keep the service secure. We do not train AI models on your content, we do not sell or rent your information, and we do not use it for advertising or profiling.
Our legal bases, where data protection law asks for them, are: providing the service you signed up for (contract), keeping it secure and preventing abuse (legitimate interests), analytics only with your consent, and complying with the law.
Your API keys
Your keys are encrypted before they are stored and are never shown again after you save them, not even in part. A key is used only to send your requests to the endpoint you added it for. You can replace or remove a key at any time; removing it deletes it at once.
When a provider’s error message quotes part of your key, we hide that part before showing, storing or logging the message.
What we can technically access
Your content and keys are encrypted at rest with a key that belongs to your account, and that key is itself encrypted with a master key held by the service. Because the service has to decrypt your keys and chats to work, the people who run AnyAI Chat can technically decrypt your API keys and read your chats. By policy we do not. No admin tool reads your data, and any exceptional access, for example when the law requires it, is recorded in the security log.
AI providers you connect
When you send a message, it goes to the endpoint you chose, together with the earlier messages in that chat and any instructions that apply to it. That provider processes it under its own terms and privacy policy, which you accepted with them. We do not control what providers keep or how they use it.
Analytics
We count a few anonymous product events, such as a chat being started, only if you accept analytics. Nothing is collected unless you accept, and you can change your choice at any time. Analytics events never include your messages, replies, chat titles, keys or email address. We use PostHog for this, with session recording and automatic click tracking turned off.
Cookies and browser storage
We use one essential cookie that keeps you signed in. It cannot be read by scripts on the page and is sent only to the app. Your browser also keeps your drafts, theme and analytics choice. We use no advertising or cross-site tracking cookies.
Where it is stored
AnyAI Chat runs on Cloudflare’s global network. Your data is not pinned to one country or region, and may be stored and processed in the United States and other countries where Cloudflare operates.
Who we share it with
We use these service providers, under contracts that limit what they may do with your data:
| Provider | What for |
|---|---|
| Cloudflare | Hosting, storage and delivery of the service |
| Signing you in | |
| PostHog | Product analytics, only if you accept |
Your messages also go to the AI providers you connect yourself, as described above. We share data with authorities only when the law requires it. We do not sell your personal information or share it for cross-context behavioural advertising.
How long we keep it
| What | How long |
|---|---|
| Chats, assistants, settings and keys | Until you delete them. Deletion takes effect before the app confirms it. |
| Your account | Until you delete it. Deletion is complete before the app confirms it. |
| Backups | Up to 30 days. Encrypted content in backups can no longer be decrypted once your account is deleted, because the key for your account is destroyed first. Your name and email address can remain in database backups for up to 30 days. |
| Security log | 1 year. After you delete your account, your user id in it is replaced by a one-way hash. |
| Technical logs | 7 days |
| Analytics | Deleted within 30 days after you delete your account. |
Your rights
You can see and export your data, delete chats, or delete your account, in the app’s settings or by writing to us. You can also ask us to tell you what we hold about you, correct it, restrict or object to how we use it, or receive it in a portable format, and you can withdraw your analytics consent at any time. We answer within 30 days and will not treat you differently for using these rights.
If you live in the European Economic Area or the United Kingdom, you can also complain to your data protection authority. If you live in California or another US state with a privacy law, you have the rights that law gives you, including the right to know, to delete and to correct, and the right not to have your information sold or shared, which we never do.
Age
AnyAI Chat is for people aged 18 and over. We do not knowingly collect information from anyone younger. If you believe someone under 18 has an account, write to us and we will delete it.
Security
Every connection uses HTTPS. Keys and content are encrypted when stored, account events are logged, and access to production systems is limited to the people who run the service.
Changes to this policy
When we change this policy we update the version and the date at the top of this page and tell you in the app. You do not need to accept it again; continuing to use AnyAI Chat after a change means the new version applies.
Contact
Write to support@byoai.tech about privacy, these terms or anything else.