Privacy policy

Data controller

Olmind (the app, its browser extension and the olmind.com website) is published by Joan Wackernagel, entrepreneur individuel (EI) — 3 impasse de la Caravelle, 31500 Toulouse — SIREN 894 356 039, RCS Toulouse 894 356 039. For any question about your data: contact@olmind.com.

The principle: your files stay with you

Your files, notes, captures, conversations and the index used to find them are stored on your computer. Olmind does not copy them to its servers. Searching your documents (building the indexes, recognising the text in images) also happens on your computer.

For each project, you choose the AI engine. A private project uses local models: its content is sent to no online model. An online project sends the models the content the task needs: the excerpts relevant to your question, the history of the project's conversation, the files you select (their beginning), the names of open or recently added files, the text of documents to analyse and the images to describe (downsized, together with the text recognised in them). This content goes through our server, which does not keep it, then through the OpenRouter service, to models hosted in the European Union that do not keep your data and do not use it for training.

You can change a project's engine at any time, and choose for each folder whether it may be shared with an online model.

What we collect

Account: when you sign in with Google, in the app or on the website, we receive your email address, name, profile picture and Google ID. We never receive your password. We link to it your plan, your credit balance, your payment dates, the version of the terms you accepted and the date you last used Olmind.

Payment: handled by Whop Inc., which acts as a separate controller for this data, under its own privacy policy (whop.com/privacy). We neither see nor store your bank details; we receive your subscription status, the plan chosen and the amounts paid. We keep a record of your purchases and of your credit usage (amounts, model used, date) — never the content of your requests.

Emails: we only send you messages tied to your contract (order confirmation, reminder before an annual renewal, acknowledgements of receipt, warning before an inactive account is deleted). We keep a record of each email sent (recipient, type of message, date) as proof. We send no marketing emails.

Cancellation and withdrawal: the “Cancel your subscription” and “Withdraw from the contract here” forms record the name, the email address and, if you give it, the reference you enter, along with the date of the request; the cancellation form also records the IP address it was sent from.

App usage: product events (for instance “a project was opened”), counters, durations, categorised errors and technical information (app version, operating system, memory, processor), linked to your account. Never the content of your projects, your files or your conversations. This measurement is on by default; you can turn it off at any time in Settings → Account, “Help improve Olmind”.

Security: our servers record the IP address of requests to limit abuse (number of sign-in, payment or cancellation attempts) and in their technical log, without the details of the URL parameters.

Waitlist: if you ask to be told when Olmind comes out on Windows or Linux, we record your email address, the platform chosen, the language and the website you sign up from, and your browser's identifier (user agent).

Website audience: pages viewed, clicks on “Download” and “Subscribe”, the domain name of the page you came from, the language, the device type and the country, linked to a random identifier. We keep neither your IP address nor the details of your browser. If you arrived through a content creator's link, that link is associated with your visit and, if you subscribe, with your account, so that we know which partnerships work.

What the app does on your computer

Captures: Olmind offers to add to a project the screenshots you take (to do so, it watches the folder where macOS saves them), the content of your clipboard when you use the capture shortcut, and what the browser extension sends it. Nothing is added without your agreement; suggestions you do not accept are deleted after 24 hours. You can turn these automatic suggestions off in the app's Settings.

Browser extension: if you install and authorise it, it detects the posts you like or save on social networks and the bookmarks you create, and then reads the post concerned (address, text, author, image). It passes this information only to the Olmind app installed on your computer — never to our servers or to any third party.

Link previews: to show the preview of a link or a post, the app contacts the website concerned (for instance YouTube, Instagram or LinkedIn) and Google's icon service, which then receive your IP address and the address requested. This also applies in a private project.

Downloads: the app downloads its updates from our distribution servers (Cloudflare) and the local AI models from Hugging Face; these services receive your IP address.

Cookies and trackers

The olmind.com website sets no advertising cookies and uses no third-party analytics tool. It remembers in your browser the language you chose and, to measure its own audience: a random identifier (13 months at most from your first visit, never extended), a session identifier deleted when you close the tab and, if you arrived through a creator's link, that link (30 days). This data is used only for our statistics, is shared with no one and cannot be used to track you on other websites; this measurement is therefore exempt from consent. You can refuse it below, and it is turned off automatically if your browser sends the Global Privacy Control or “Do Not Track” signal.

When you sign in with Google from the website, our server sets a technical cookie (olmind_web_nonce) that protects the sign-in against forgery. It expires after 10 minutes and is deleted as soon as the sign-in is complete. Being strictly necessary, it needs no consent.

Why we are allowed to process this data

Performance of the contract: account, subscription, payment, credits, emails tied to your contract, sending the content of online projects to the AI models.

Legal obligation: proof of cancellation, of withdrawal and of their acknowledgements of receipt, the reminder before renewal, keeping accounting records.

Legitimate interest: security of the service and prevention of abuse; deletion of inactive accounts; measurement of app usage and of the website's audience, which you can object to at any time (see above).

Consent: the waitlist. You can withdraw it at any time by writing to us.

Providing your email address is necessary to create an account and buy a subscription. We make no automated decision that produces legal effects concerning you.

Recipients and processors

Google Ireland (sign-in, and the waitlist spreadsheet); Whop Inc. (United States), payment, receipts and taxes; OpenRouter, Inc. (United States), which routes the requests of online projects to model providers hosted in the European Union, all in “zero retention” mode; OVH (France), which hosts our server; Cloudflare (website hosting, downloads, protecting and routing requests to our server, receiving emails sent to olmind.com); Brevo (France), for sending emails.

Content sent to model providers is not used to train their models and is not kept by them. No data is sold or shared for advertising purposes, with anyone.

Google, Whop, OpenRouter and Cloudflare are American companies or affiliated with American companies. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

The use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention periods

Account: for as long as it exists. An account with no subscription and no use for 3 years is deleted, after a warning email sent at least 30 days beforehand.

App usage measurement and website audience: 25 months, then deleted automatically.

Records of emails sent, cancellation and withdrawal requests: 5 years, the period during which a dispute over the contract remains possible (art. 2224 of the French Civil Code), then deleted automatically.

Accounting records (invoices, payment register): 10 years (art. L123-22 of the French Commercial Code), detached from your account if it is deleted.

IP addresses used against abuse: 24 hours.

Backups of our database: 14 days on the server and 90 days on a backup copy; deleted data disappears from the backups at the end of these periods.

Waitlist: until the release on your platform is announced, or until you ask to be removed.

Local data: it lives on your computer, under your control, and disappears if you delete it or reset the app.

Your rights

Under the GDPR, you have the rights of access, rectification, erasure, portability, restriction and objection over your data, as well as the right to withdraw your consent. To exercise them, in particular to delete your account, write to contact@olmind.com from your account's email address; we answer within one month.

You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

United States residents

We do not sell your personal information and do not share it for targeted advertising. The categories of data collected, their sources, their purposes and their recipients are described above; the rights described in the previous section are open to everyone, wherever you live. The website honours the Global Privacy Control and “Do Not Track” signals for its audience measurement; the app does not respond to these signals, but its usage measurement can be turned off in its Settings.

Minors

Olmind is not intended for children under 15. If we learn that an account belongs to someone under 15, we delete it.

Changes

If this policy changes significantly, we will tell you in the app or by email before the change applies.