Privacy Policy

Last updated September 14, 2026. This policy covers the Tarrow website and the Tarrow iOS and Android apps.

What we collect

• Account details: name, email address, city (optional), timezone, and a password hash if you use email sign-in. If you use Sign in with Apple or Google, we receive only your name, email (which may be an Apple private relay address) and an account identifier from them.
• What you share with Tarrow: your messages, interview answers, and what Tarrow saves for you: memories, your "life file" summary, goals, tasks, routines, documents and drafts.
• Device data for notifications: if you turn notifications on, a push token for your device or browser.
• Basic usage counts (for example, tasks per day) to enforce limits. We don't use analytics or advertising SDKs, and we don't track you across apps or websites.
• Voice: if you use the microphone, the recording is transcribed and then discarded. We don't keep audio.

How we use it

Only to provide Tarrow to you: to answer your requests, research things for you, remember context about your life, send notifications you asked for, and keep your account secure. We do not sell your data or use it for advertising.

Third parties that process your data

We ask for your explicit permission before any of your personal data is sent to third-party AI. You can withdraw it in Settings → AI & data sharing.

• AI model providers: OpenRouter, which routes requests to Z.ai (GLM models) or DeepSeek, and Groq as a backup. Relevant parts of your conversation, memories, name and city are sent to generate replies. We only route to hosts that don't retain prompts or train on them. Groq also transcribes voice input.
• Web research: search queries Tarrow writes are sent to search providers, pages are fetched from the websites being read, place lookups go to Google Maps Platform, and weather to Open-Meteo.
• Infrastructure: Vercel (hosting) and Neon (database), Apple Push Notification service and web push services (notifications), Apple and Google (sign-in).

These providers process data only to deliver the service to you, and are required to protect it with the same or equal protection as described in this policy.

Retention and deletion

We keep your data while your account is active. You can view, edit and delete any memory on the Memory page, delete individual chats, goals, routines and documents, and delete your whole account in Settings → Delete account. Deleting your account permanently removes your data from our database immediately. Short-lived copies in backups and provider logs are removed within 30 days.

Your choices

• Withdraw AI data-sharing permission any time in Settings (Tarrow can't answer without it).
• Turn notifications off in Settings or your device settings.
• Request a copy of your data or ask any privacy question by emailing us.

Children

Tarrow is not intended for anyone under 16.

Security

Passwords are hashed with scrypt, sessions use secure cookies, and all data is transmitted over HTTPS.

Contact

keugenelee11@gmail.com