Privacy
Without an account, your gremlin lives only on your device and we never see it. If you create an account, we keep a synced copy so it follows you between devices. Either way: no ads, no trackers, and we never sell or share your data.
Short version: signed out, nothing leaves your device. Signed in, your gremlin is stored on our server (encrypted at rest) so it syncs. AI features send only what each feature needs to Anthropic, the company that makes Claude, and we don't keep it. Delete your account any time and it's gone from our server.
On your device
Your brain dump, plans, check-offs, reviews, energy logs, memories, dreams and settings are saved in your browser's storage. Clearing your browser data or uninstalling the app deletes them on that device. Gremlin → Backup exports a copy (optionally passphrase-encrypted).
If you create an account
- Sign-in uses a passkey (your face, fingerprint or screen lock). We store an account id, the name you chose (optional), your passkey's public key, and hashed session and recovery codes. We never see your biometrics or have a password.
- Sync. A copy of your gremlin (the same data as on your device) is stored in our database so your devices stay in step. It's encrypted at rest and only used to sync it back to you — we don't read it, analyse it or use it for anything else.
- Usage counts. How many AI requests you've made this month, so we can apply the free allowance and keep costs fair. Not what you asked.
AI features
When you tap a ✨ feature, the gremlin sends only what that feature needs to Anthropic's Claude API, gets an answer, and passes it back to you. We don't store what was sent. Per feature:
- Sort it for me — the text you rambled.
- Let the gremlin pick tomorrow — the titles and details of your candidate tasks, tomorrow's fixed commitments, and short lines from "What I've learned".
- Chop it smarter — the task you're chopping.
- Snap the mess — the photo (shrunk on your device first, with location data removed).
- Deeper read and weekly letter — counts and percentages only (days followed, blocks done, sleep, energy), plus learned facts. Never your task names, notes or reviews.
- Full voice (Pro) — the line being rewritten and a little context.
Anthropic processes these requests under its commercial terms and privacy policy; it doesn't train its models on API data by default.
Payments
Pro subscriptions are handled by Stripe. Your card details go to Stripe, never to us; we keep your Stripe customer id and whether your subscription is active.
Push nudges
If you turn on push, we store your browser's push address, your wake and sleep times and your time-zone offset. The reminder carries no message content; your device writes the words.
Keeping it running
If the app crashes, it sends us the error message, the screen it happened on, your browser type and (if you're signed in) your account id, so we can fix it. It never sends your tasks, notes or reviews. To stop abuse, we count requests per IP address, but we store only a one-way hash of the address and delete the counts within a day. Error reports are deleted after 30 days.
To see whether the app is working for people, we count a handful of actions per day (for example "opened the app", "made a plan", "made an account"). These are plain daily totals with no account id, IP address or cookie attached, so they can't be traced to you. If your browser sends Global Privacy Control or Do Not Track, the app doesn't count you at all.
Email (optional)
You can add an email address in Gremlin → Account to get a short Sunday summary of your week. It holds counts only (days followed, blocks done), never your tasks. We use the address for nothing else, send it through Resend (USA), and every email has a one-tap unsubscribe. Remove the address any time and we delete it.
Accountability buddies
If you pair with a buddy, they can see your display name, how many days you followed your plan in the last week, how many blocks you finished, your streak and when you last opened the app. They never see your tasks, plans, notes or reviews. Either of you can end the pairing at any time, and it ends automatically if either account is deleted.
Invites
If you join with a friend's invite link, we record which account invited yours so we can give you both the free month. Your friend can see how many people joined with their link, but not who.
Where it lives
The app and its API run on Vercel; the database is Neon Postgres in Sydney; push reminders run on Cloudflare; AI requests go to Anthropic (USA); payments to Stripe. Like any host, they process standard request data (IP address, browser type) to deliver the service and keep it secure.
Deleting your data
Gremlin → Account → Delete account deletes your account and everything synced to our server straight away and cancels any subscription. Your device keeps its own copy until you clear it. Encrypted database backups roll off within 30 days.
Children
The app isn't aimed at children under 13.
Changes
If this changes, we'll update this page and the date at the top before the change goes live. See also the terms of use.
Contact
Questions or deletion requests: admin@thebarberandco.com
← Back to your gremlin