Privacy Policy

Three kinds of data, all tied to your account: your email address (it is your identity and how magic links reach you), your workspace (projects, cells, notes, connections, boards, images, and recordings you add), and a usage ledger (a per-request record of your AI spend, kept so budgets are enforced fairly and disputes can be resolved). If you request access before being invited, we keep that email on the waitlist.

Your data is stored with Supabase (a hosted Postgres database and file storage). Every row and every stored file is access-controlled to your account: the database itself enforces that one user cannot read another's data. A local copy of your workspace also lives in your own browser so Ikai stays fast and works while offline.

Anthropic: when you invoke the AI, your prompt and the relevant slice of your workspace are sent to Anthropic's API to generate the response. We send nothing when you are not using AI features. Anthropic does not train models on API data by default.

Stripe: if you subscribe to a paid plan, Stripe handles the payment. Your card number never touches our servers; we store only your Stripe customer reference and subscription state.

Supabase and Vercel: our database, storage, and hosting infrastructure, with the standard operational logs that come with running a web service.

No advertising. No selling or sharing your data with data brokers. No training AI models on your content. No reading your workspace except when you explicitly ask us to help debug something, and then only with your permission.

One kind: the session cookie that keeps you signed in. There are no tracking cookies, no third-party analytics pixels, and no fingerprinting.

We keep your data for as long as your account exists. Deleting your account from Settings removes your sign-in identity, your synced workspace, your stored media files, and your usage ledger from our systems. Export your mind first if you want to keep a copy; the export lives in Settings too, and it is yours forever.

Access to your data is enforced in the database itself (row-level security scoped to your account), server secrets never reach the browser, sessions are signed, and every AI budget operation runs server-side where it cannot be tampered with. If you find a security issue, please tell us immediately and we will treat it as the highest priority.

You can see your data (it is your workspace), take it with you (Settings, Export), and erase it (Settings, Delete account) without asking anyone. For anything else, including a full copy of whatever we hold about you, email us and we will handle it promptly.

If this policy changes in a way that matters, we will post the update here with a new effective date and let active users know. Reach us any time at colediji@gmail.com.