Privacy Policy
Gaussian.ai is built on a simple idea: the less of your life we can see, the less anyone can ever lose. This policy is short because the architecture does most of the talking.
What stays on your device (everything, basically)
- Your tasks, lists, notes, and history live in a local database on your Mac, iPhone, and Apple Watch. We operate no server that stores them.
- Your profile — your priorities ("North Star"), values ("Anchors"), and personal context ("About You") — is stored on your device, encrypted at rest with a key held in your device's Keychain. On iPhone, app data is additionally protected by iOS file-level encryption.
- Facts the app learns about your world are stored the same way, visible to you in the app, and removable one by one or all at once.
- We have no accounts, no analytics, no tracking, and no advertising. The app contains no third-party SDKs.
What leaves your device, and why
When you ask Gaussian.ai to analyze a task, the app sends that task and relevant context to a large language model (Claude, running on Amazon Web Services' Bedrock service in Canada) to produce scores and suggestions. Before anything is sent:
- Protected names are pseudonymized. Names you mark as protected (family, colleagues, clients) are replaced with anonymous tokens on your device before transmission, and replaced back when responses arrive. Those names are never transmitted anywhere, in any form.
- Emails, phone numbers, and street addresses are pseudonymized automatically. The app detects them on-device and tokenizes them the same way — nothing to configure, nothing to remember.
- Sensitive fields are opt-in. Health notes never enter a request unless you explicitly enable sharing them, and any task's notes can be locked away from the AI entirely with one switch.
- You can verify all of this. "See what the AI sees," in the app, shows the recent AI payloads exactly as they left your device — tokens where your details were. The log is stored encrypted, only on your device.
Model requests are sent directly from your device to the model provider over encrypted connections. Our own service in the middle does exactly one job: it issues short-lived access credentials and counts how many you've used today. It never receives, relays, or logs the content of your tasks — it cannot leak what it never carries. The model provider processes requests to generate responses and does not use them to train models.
Syncing between your devices
If you use Gaussian.ai on more than one device, your tasks sync through your personal iCloud account's private database — encrypted in transit and at rest by Apple, in a space we cannot read or access. Enabling Apple's Advanced Data Protection for iCloud extends this to end-to-end encryption, and we recommend it. Sync is between your devices and your iCloud only; our servers are never involved.
The one identifier we see
To meter fair usage, the app sends our credential service a random identifier generated on your device. It is not your name, email, or Apple ID, and it is not linked to any of them. It is stored with a usage count that expires after three days.
Notifications
Reminders are scheduled locally through macOS. Notification content never leaves your device.
Your controls
- Export My Data — one click in the app produces a complete, readable copy of everything Gaussian.ai knows.
- Delete Everything — one click erases all tasks, profile data, learned facts, and keys from your device. There is nothing to delete on our side, because there is nothing on our side.
Changes and contact
If this policy changes, the date above changes with it, and material changes will be noted in the app. Questions: hello@gaussian.ai.