Privacy Policy

MODUS Pilot ("MODUS", "we", "us") is an AI-powered personal operating system. This policy explains what data we collect, how we use it, and your rights. By using MODUS you agree to this policy.

Account data: Your name, email address, and profile photo when you sign in via Google or Apple.

Conversation data: Messages you send to MODUS and AI responses, stored in your account to provide conversation history and context.

Goals, tasks, and habits: Data you create inside MODUS — goals, tasks, habits, and memories — stored to power the app experience.

Google account data (if connected): When you connect Google, MODUS accesses your Gmail, Google Calendar, and Google Drive using OAuth 2.0. We read email and calendar data to populate your daily briefing. We send emails only when you explicitly approve an action. We read Drive files to provide document context in chat. We never store your full email content — only metadata and snippets needed for briefing generation.

Usage data: Daily message counts, plan status, and basic analytics to operate the service.

We use your data exclusively to operate MODUS:

• Generating your daily briefing from your calendar, email, goals, and tasks
• Providing AI responses with relevant context from your memory and history
• Sending emails and creating calendar events on your behalf when you approve
• Tracking habits, streaks, and goal progress
• Enforcing plan limits and processing payments via Stripe

We do not sell your data, use it to train AI models, or share it with third parties except as described below.

MODUS use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only access Google data that is necessary to provide the MODUS service
• We do not use Google data to serve ads
• We do not allow humans to read your Google data unless you explicitly ask for support and grant permission
• We do not transfer Google data to third parties except to operate the service, which means sending the relevant context to the AI provider that answers your message
• We store OAuth tokens encrypted and refresh them automatically
• You can disconnect Google at any time from Settings → Connectors

Your data is stored in Google Firebase (Firestore) and Pinecone (vector memory), both in the United States. We use industry-standard security practices including encrypted transport (HTTPS), token-based authentication, and Firestore security rules that prevent any user from accessing another user's data.

OAuth tokens are stored encrypted server-side and are never exposed to the client.

Conversation history is retained for 2 years, or until you delete your account.

You can delete your account and all associated data at any time from Settings → Account → Delete Account. Deletion is immediate and irreversible.

MODUS uses the following third-party services to operate:

• Vercel AI Gateway — Routes each message to the AI provider that will answer it
• OpenAI, Anthropic, Google, Meta and DeepSeek — AI inference. The message you send, plus the context MODUS attaches to it, goes to whichever of these providers serves the model handling that message, either the one you picked or the one Auto selected
• Pinecone — Vector memory storage
• Stripe — Payment processing (we never see or store your card details)
• Firebase / Google Cloud — Authentication and database
• Vercel — Hosting, deployment, and privacy-friendly pageview analytics
• Sentry — Error monitoring, so crashes get diagnosed and fixed

These providers process your data to deliver their part of the service. We do not permit any of them to use your data to train their models.

MODUS is a multi-model product. On Auto, MODUS picks the model best suited to your message. You can also pick a model yourself, and on PILOT you can send one message to several frontier models at once and compare their answers side by side.

Whichever route it takes, your message and its attached context are sent to that provider for the length of that request. Providers are contractually bound not to train on data sent through the API tiers MODUS uses. If a model is unavailable, MODUS may fail over to another model, and the answer is labelled with the model that actually produced it.

You have the right to:

• Access all data stored about you
• Delete your account and all data at any time
• Disconnect Google and revoke all OAuth access at any time
• Opt out of data being used to improve MODUS (Settings → Privacy)
• Export your data — contact us at the email below

MODUS is not directed at children under 13. We do not knowingly collect data from children under 13.

We may update this policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of MODUS after changes constitutes acceptance.

Questions about this policy? Email us at jeremiah@moduspilot.com.