Privacy policy

The service is run by ICXCNIKA OU, a company registered in Estonia (“we”). We decide why and how your personal data is used, so under the GDPR we are the controller. Write to us at support@getconsistency.app.

• Your account: email address, name, time zone, language, and a hash of your password (never the password itself). If you sign in with Apple or Google we store their identifier for you and the email they share.
• Your businesses: name, website, what kind of business it is, your goal, the profile our research produced and you confirmed, your habits (what, where, how often) and your schedule.
• Your daily work: each day’s tasks, the AI reference drafts, the text you write yourself, the “own words” score, saved ideas, and the tracked links you create with their click counts. We do not store IP addresses of people who click a tracked link.
• Your coach: the chat with your coach and the memories it keeps about how you like things done. You can read, edit and delete every memory in the app.
• Your subscription: which plan, how long, and which store it came through. Payment happens in the App Store or Google Play and is reported to us by RevenueCat. We never receive your card details.
• Your devices: the push-notification token of each device you sign in on, the device type and the app version.
• What you connect: if you connect an analytics account, TikTok, YouTube, Search Console or another source, we keep the read-only access token (encrypted) and the numbers we pull, such as visitors or views. If you set up an AI browser check, we keep the site address, the saved browser session (encrypted), the numbers read from the page and a screenshot. You sign in to those sites yourself in a live browser and we never see or store your password.
• Forwarded email: if you forward mail to your inbox address, we keep the sender, the subject and a summary so the app can tell you what needs a reply.
• Cost and safety records: how many AI calls your account makes and what they cost us, so we can protect the service from abuse and keep prices fair.

To run the app: build your plan, write reference drafts and ideas, answer your coach questions, send the notifications you allow (morning brief, evening nudge, weekly review, and account alerts such as a login that needs your attention), check your subscription, keep the service secure, and answer your support requests. We do not sell your data, we do not show ads, and we do not use it to track you across other sites.

Nothing is ever posted or sent in your name. Buttons in the app open the other app with your own text; you press share.

To write plans, ideas and drafts, your business profile, active memories, and the text you give the coach or editor are sent to AI model providers through OpenRouter (the models are from providers such as Anthropic and Google). We choose providers and settings under which your content is not used to train their models. Content from websites, emails and connected accounts is treated as untrusted data and never as instructions.

Our staff cannot read your drafts, chats, memories, forwarded emails or connector data. The admin tools show only counts, costs and subscription state.

• To provide the service you asked for: performance of our contract with you.
• To keep the service secure, prevent abuse and control costs: our legitimate interests.
• For push notifications and connected accounts: your consent, which you can withdraw in the app at any time.
• To keep records the law requires, such as accounting: legal obligation.

• Our own servers, in the European Union with database replicas in India and Singapore.
• RevenueCat, to confirm your subscription with the App Store and Google Play.
• Apple and Google, for sign-in with Apple or Google and for payment in their stores.
• OpenRouter and the AI model providers behind it, to generate text and images.
• Resend, to send account emails such as email verification and password reset.
• Expo, to deliver push notifications through Apple and Google.

Some of these providers are outside the European Economic Area. Where that is the case we rely on the European Commission’s standard contractual clauses or an adequacy decision.

We measure visits with a self-hosted Umami instance. It sets no cookies, stores no IP address and does not follow you across sites, and it respects the Do Not Track setting. The site sets no other cookies.

We keep your data while your account exists. When you delete your account in the app, your account, businesses, drafts, chats, memories, connectors, browser sessions and push tokens are deleted. We keep nothing that identifies you, except records we must keep by law, such as invoices issued to us by the stores. Database backups are overwritten on a rolling schedule and a deleted account is not restored from them.

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. Most of this is in the app: Account, Privacy & data has “Export my data” and “Delete my account”. For anything else, email support@getconsistency.app. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the supervisory authority where you live.

Connections use HTTPS. Passwords are stored as argon2id hashes. Connector tokens and saved browser sessions are encrypted. Access to production systems is limited to the people who run the service, and every admin action is logged.

Consistency is for people running a business. It is not directed at children under 16 and we do not knowingly collect their data.

If we change this policy in a way that matters to you, we will tell you in the app before it takes effect. The effective date above always shows the current version.