Privacy Policy

1. Introduction

Chert Technologies ("we," "us," or "our") operates Ivy, an AI-powered concierge accessible via iMessage. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Service.

2. Information We Collect

Information You Provide

• Account information: name, email address, phone number
• Preferences: coffee orders, food preferences, dietary restrictions, spending limits, quiet hours
• Messages: text conversations with Ivy via iMessage
• Payment information: processed and stored securely by Stripe (we do not store your card details)

Information from Connected Accounts

With your explicit consent, Ivy may access:

• Email data: subject lines, senders, and timestamps from your connected email account (via Nylas) to identify routines and preferences
• Calendar data: event titles, times, and locations to anticipate your schedule
• Location data: real-time location shared via Find My Friends to enable delivery to your current location

Information Generated by Ivy

• Factoids: AI-generated insights about your habits and preferences (e.g., "You tend to grab coffee mid-morning on weekdays")
• Order history: records of orders placed on your behalf

3. How We Use Your Information

We use your information to:

• Provide, personalize, and improve the Ivy concierge experience
• Learn your routines and preferences to anticipate your needs
• Place and manage orders on your behalf
• Process payments and manage billing
• Send you service-related communications via iMessage or email
• Ensure the safety and security of the Service
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your data with:

• Delivery platforms (e.g., DoorDash) — order details and delivery address to fulfill your orders
• Payment processors (Stripe) — to process transactions securely
• AI providers (Anthropic) — message content is processed by Claude to generate responses (subject to Anthropic's data policies)
• Email & calendar providers (Nylas) — to access your connected accounts with your consent
• Virtual assistants — order details shared with our human operators who place orders on delivery platforms
• Legal requirements — when required by law, regulation, or legal process

5. Data Storage & Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security policies. Payment data is handled by Stripe in compliance with PCI-DSS standards. We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Message history and factoids are retained to improve your experience. You may request deletion of your data at any time by contacting us.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Export your data in a portable format
• Withdraw consent for connected account access at any time

To exercise any of these rights, contact us at ian@trychert.com.

8. Location Data

Ivy uses your location (shared via Find My Friends) to determine your delivery address. Location data is accessed only when needed to fulfill orders and is not used for advertising or sold to third parties. You can stop sharing your location at any time through your iMessage settings.

9. AI Processing

Ivy uses AI (Claude by Anthropic) to process your messages, understand your preferences, and generate responses. Your conversations are sent to Anthropic's API for processing. We configure our AI integration to not use your data for model training. AI-generated insights (factoids) are stored in your account and used to improve your personalized experience.

10. Children's Privacy

Ivy is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via iMessage or email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at ian@trychert.com.