ACRE
Privacy notice
Last updated 12 October 2026
The short version: we keep what ACRE needs to work, we show it only to the people you choose, we count our own use ourselves with no trackers, and you can export or delete all of it yourself. Your agents run on your own AI subscription; ACRE never holds your AI tokens.
ACRE is run by TODO(owner): operator legal entity. Questions or requests: hello@useacre.dev.
What we store
| What | Why |
|---|---|
| Your account | Name, email, picture, and your GitHub or Google login if you sign in with one; when you said you are 18 or older and accepted these terms. Sign-in sessions and keys are kept only as hashes. |
| Your profile and world | Your look, line and status, your islands and what you build on them, friends, and the places you set to visible or hidden. |
| Messages | Direct messages, group chats and island chat, so the people in them can read them. |
| Brain and memory | Notes, documents and links you add, each at the privacy level you pick. |
| Synced sessions | Agent chats you choose to sync from your machine. Private to you by default (“Only me”); a project's team sees one only when you share it. What is sent: what you and the agent wrote, and each tool call's name with what it ran on (a file path, relative or from ~, a search or a web address, or a short command line) and whether it worked. Tool output, file contents and the agent's thinking never leave your machine. Secrets are stripped on your machine before anything is sent, and again when it arrives. |
| Meeting notes | Only when notes are turned on in a meeting, with each speaker's consent, and a visible “Notes on” marker while it runs. |
| Billing | Your plan and whether it is paid. Card details go to Stripe; ACRE never sees them. |
| Usage counts | Which days you were active and which features were used, as keyed hashes (see Analytics). |
Tokens ACRE has to use for you (a connected calendar, GitHub access for repository islands) are encrypted at rest. Your AI tokens are never stored: your agents run on your own machine with your own subscription.
Who sees it
Everything has one level, and you pick it. The narrowest is the default for anything personal.
- Only me: you alone. Your synced chats and personal brain start here.
- Specific people or Friends: the people you name, or your friends.
- Team or Team + guests: the people on that island.
- Harbor: anyone signed in to ACRE. Public: anyone, including the web.
Something you are not allowed to see does not show up at all: not in counts, titles or search. Leave an island and you lose what is on it; your personal brain stays with you.
Analytics: first-party only
We count our own use on our own server so we can see what people come back for. There is no tracking script and no third-party analytics, and nothing is sold or shared for advertising. What we keep is a keyed hash of each active person per day and per feature, for 400 days; after that, only the day's totals.
Cookies
One first-party cookie keeps you signed in, and your browser's own storage remembers small preferences (like sound on or off). No advertising or tracking cookies, so there is no cookie banner.
Services we use
These companies process data for us, only to run ACRE:
| Who | What they handle |
|---|---|
| Vercel | The front door of useacre.dev: pages and requests pass through it on their way to our server. |
| Cloudflare | Our domain's DNS, and the route large uploads take to our server. |
| TODO(owner): server host | The server the world and its data run on. |
| Stripe | Payments for Pro: your card, billing address and invoices. |
| Our mail provider (Resend or Postmark) | Sign-in links and the emails you ask for. |
| GitHub, Google | Only if you sign in with them or connect a calendar. |
| AI model providers (Anthropic, OpenAI, Deepgram) | Only when a feature you use needs one. Your own agents run on your own subscription, straight from your machine. Meeting notes and document summaries go to a model only when you turn them on. |
Export and delete
- Export: Settings → General → Your data → Export my data. You get one file with your profile, the messages you sent and received, the islands you own, your brain and memory, and your sessions.
- Delete: Settings → General → Your data → Delete my account, then type your name. You are signed out everywhere at once, and your account and everything only you owned are gone within 7 days. Messages others received stay theirs, shown as from “Deleted user”. Islands you share keep going for the others. Cancel Pro first if you have it.
- Backups: TODO(owner): how long whole-world backups are kept. A deleted account is never restored from one.
- Can't sign in? Write to hello@useacre.dev from the address on the account and we will do it for you.
Age
ACRE is for people 18 and older. We do not knowingly keep data about anyone younger; if we learn of it, we delete the account.
Changes and contact
If this notice changes in a way that matters, we tell you in ACRE or by email first. Write to hello@useacre.dev for anything about your data, including a copy, a correction or a deletion.