Privacy Policy
Last updated: June 8, 2026
This Policy explains what data Puggy (“we”) collects, how we use it, and your rights. Puggy is a “second brain”: you send messages, voice notes, links, and images through channels like WhatsApp, and our AI organizes everything into notes, summaries, and categories you can find later.
1. Data we collect
Account data: your email and, if you sign in with Google or Facebook, the name and picture associated with that account.
Content you send: the messages, audio, images, and links you send to Puggy, and the notes we generate from them (title, summary, category, tags, dates, and identified entities).
Usage data: anonymous, cookie-free, privacy-respecting site analytics.
2. How we use your data
To run the service: transcribe audio, read images, and classify and organize what you send into searchable notes.
To forward your notes to the apps you connect (for example, Notion or Todoist), when you authorize that connection.
To authenticate your access and send transactional emails (such as sign-up confirmations).
3. Artificial intelligence
To organize your content, we send parts of your messages to AI providers acting as our processors: Anthropic (classification), OpenAI and Groq (audio transcription), and OpenRouter/Google (image reading).
These providers process the content only to return the organized result and do not use it to train their own models, under the business terms we adopt.
4. Who we share with
We do not sell your data. We share it only with processors that make the service work: Vercel (hosting), Supabase (database and authentication), the AI providers above, Nango (managing your app connections), and Resend (email delivery).
We share with third-party apps (such as Notion, Todoist, Google Tasks, or Microsoft To Do) only when and while you voluntarily connect them.
5. Retention and deletion
We keep your content while your account is active. You can request deletion of your data at any time, and we will remove it from our systems within a reasonable period, unless we must retain it by law.
6. Your rights
Under the LGPD (Brazil) and the GDPR (EU), you can access, correct, export, or delete your data and withdraw consent. To exercise these rights, contact us at privacy@puggynotes.com.
7. Security
We use encrypted connections (HTTPS/TLS), access-restricted databases, and secrets kept off the browser. No system is fully immune, but we work to protect your information.
8. International transfers
Some processors handle data outside your country. When that happens, we use providers that offer adequate data-protection safeguards.
9. Children
Puggy is not intended for children under 13, and we do not knowingly collect their data.
10. Changes and contact
We may update this Policy from time to time; material changes will be noted on this page. Questions? Email privacy@puggynotes.com.