ACRE

Privacy notice

Last updated 12 October 2026

The short version: we keep what ACRE needs to work, we show it only to the people you choose, we count our own use ourselves with no trackers, and you can export or delete all of it yourself. Your agents run on your own AI subscription; ACRE never holds your AI tokens.

ACRE is run by TODO(owner): operator legal entity. Questions or requests: hello@useacre.dev.

What we store

WhatWhy
Your accountName, email, picture, and your GitHub or Google login if you sign in with one; when you said you are 18 or older and accepted these terms. Sign-in sessions and keys are kept only as hashes.
Your profile and worldYour look, line and status, your islands and what you build on them, friends, and the places you set to visible or hidden.
MessagesDirect messages, group chats and island chat, so the people in them can read them.
Brain and memoryNotes, documents and links you add, each at the privacy level you pick.
Synced sessionsAgent chats you choose to sync from your machine. Private to you by default (“Only me”); a project's team sees one only when you share it. Secrets are stripped on your machine before anything is sent, and again when it arrives.
Meeting notesOnly when notes are turned on in a meeting, with each speaker's consent, and a visible “Notes on” marker while it runs.
BillingYour plan and whether it is paid. Card details go to Stripe; ACRE never sees them.
Usage countsWhich days you were active and which features were used, as keyed hashes (see Analytics).

Tokens ACRE has to use for you (a connected calendar, GitHub access for repository islands) are encrypted at rest. Your AI tokens are never stored: your agents run on your own machine with your own subscription.

Who sees it

Everything has one level, and you pick it. The narrowest is the default for anything personal.

Something you are not allowed to see does not show up at all: not in counts, titles or search. Leave an island and you lose what is on it; your personal brain stays with you.

Analytics: first-party only

We count our own use on our own server so we can see what people come back for. There is no tracking script and no third-party analytics, and nothing is sold or shared for advertising. What we keep is a keyed hash of each active person per day and per feature, for 400 days; after that, only the day's totals.

Cookies

One first-party cookie keeps you signed in, and your browser's own storage remembers small preferences (like sound on or off). No advertising or tracking cookies, so there is no cookie banner.

Services we use

These companies process data for us, only to run ACRE:

WhoWhat they handle
CloudflareThe network in front of ACRE: every request passes through it.
VercelHosting for parts of our website.
TODO(owner): server hostThe server the world and its data run on.
StripePayments for Pro: your card, billing address and invoices.
Our mail provider (Resend or Postmark)Sign-in links and the emails you ask for.
GitHub, GoogleOnly if you sign in with them or connect a calendar.
AI model providers (Anthropic, OpenAI, Deepgram)Only when a feature you use needs one. Your own agents run on your own subscription, straight from your machine. Meeting notes and document summaries go to a model only when you turn them on.

Export and delete

Age

ACRE is for people 18 and older. We do not knowingly keep data about anyone younger; if we learn of it, we delete the account.

Changes and contact

If this notice changes in a way that matters, we tell you in ACRE or by email first. Write to hello@useacre.dev for anything about your data, including a copy, a correction or a deletion.