Privacy PolicyPrivacy Policy

The short version

This summary is here to help you read the policy. It is not a substitute for it.

• We cannot read your content. Your conversations, memories and files are end-to-end encrypted in your browser before they are saved. We store only the encrypted copy and never hold the keys.
• AI models see your message only to answer it. Each message is sent to an AI model to write the reply. We route every request through providers that commit to zero data retention and to not training AI on your content.
• Never used to train AI. Not by us, and the providers we use commit not to.
• We keep very little. For an account, we keep your email, your sign-in details and your encrypted data. We keep usage counts to enforce fair limits. Our servers do not store your IP address.
• No ads, no tracking, no selling. We do not sell or share your personal information, show ads or use advertising or analytics cookies.
• You are in control. You can use Prino without an account, use Ghost mode to save nothing at all, download your data and delete your account at any time.

1. Who we are

Prino is made by Good Things Ahead, LLC, a Wyoming limited liability company ("we" or "us"). We are responsible for the personal information described in this Privacy Policy. It applies to the Prino website at prino.ai, the Prino app and related services (the "Service"). It is part of our Terms of Service.

If you have questions, email hello@prino.ai.

2. How Prino protects your content

"Your content" means what you put into Prino and what Prino creates for you: messages, answers, files, memories, projects, instructions and generated documents, images and video.

Encrypted on your device. Prino encrypts your content in your browser with keys that only your devices can unlock. When you save or sync, we receive the encrypted copy. We cannot read it, search it, hand over a readable copy of it or use it for anything else.

Keys stay with you. Your data is unlocked by your Prino password, your recovery kit, a trusted device or a passkey. We never receive a readable copy of your password, your recovery kit or the keys that unlock your data. This is also why we cannot recover your data if you lose every way to unlock it.

What we can see about encrypted data. To store and sync your data, our servers see limited information about it that is not your content: which account it belongs to, how many records you have, their size, when they changed and random identifiers that link them together.

3. What happens when you send a message

To answer you, some of your content must be readable for a moment. Here is exactly where that happens.

The AI model. Your message, the parts of the conversation needed for context, and any memories, project sources or files needed for the answer are sent to an AI model over an encrypted connection. We send requests only through providers that commit to zero data retention. Under those commitments, your content is processed only to write the answer and is not stored, logged for review or used to train AI. To make answers faster, a provider may keep a short-lived processing cache of recent input, which expires within an hour and is not used for any other purpose. We rely on these commitments and cannot inspect providers' systems. The answer comes back to your browser, where it is encrypted and saved.

Our servers. Your message passes through our servers on its way to the AI model and the answer passes through on its way back. Our servers handle this in memory only. We do not write your content to disk or to our logs. If your connection drops while an answer is being written, we hold the finished answer in memory for up to 30 minutes so your browser can collect it, then discard it. This does not happen in Ghost mode.

Our network provider. Like most websites, we use a network and security provider that sits between your browser and our servers. It handles your traffic in transit to protect the Service from attacks and is not used to store your content. For anti-abuse and security, it collects and manages IP and request logs under its own data processing terms.

Files and documents. When you add a document to a project, it may be converted to text by a processing service that runs in our infrastructure. The conversion happens in memory and nothing is kept once it finishes. Simple text files are read directly in your browser.

4. Information we collect

We collect only what we need to run Prino.

Account information. If you create an account, we collect your email address and your sign-in details. If you sign up with a password, we store a secure hash of it rather than the password itself. If you sign in with Google or Apple, we receive your name, email address and profile picture from that service. Your Prino password for your encrypted data is separate from your sign-in and is never sent to us.

Guest information. If you use Prino without an account, we give your browser a random Guest identifier stored in a cookie, so we can apply fair usage limits.

Encrypted data. If you have an account, we store the encrypted copy of your content and the limited information about it described in Section 2.

Usage and limit information. To keep Prino fair and available, we count how much you use it, such as the number of messages, the amount of AI processing, voice transcriptions and generated media. These counts are linked to your account or Guest identifier.

Network information. Your device's IP address reaches our servers when you connect, as with any website. Our servers do not store it. To prevent abuse, we turn it into a coded value using a secret key that changes every day, and use that value only for daily rate limits. We do not store the key once the day ends and do not try to recover your IP address from the coded value.

Service logs. Our systems record technical events such as error codes, response times, counts and which feature was used. Logs never contain your content, your IP address, your keys or your password.

Bot protection. When you create an account or start as a new Guest, a security check may run to confirm you are a person. The provider of that check processes technical information about your browser and device for that purpose only.

Payment information. If you buy a paid plan, our payment processor collects your payment details. We receive only limited information, such as your plan, the last four digits of your card and the payment status. We never see your full card number.

Messages to us. If you email us, we keep your message and our reply to help you. Please do not send us your content unless you want us to see it.

5. How individual features use your information

Guest. Your content is encrypted and stored only in your browser on your device. It is not backed up and is not sent to us for storage.

Account sync. Your content is encrypted in your browser before it is uploaded, so you can use it on your other devices. We store only the encrypted copy.

Ghost mode. Ghost conversations are never saved, including on your device, and never use Memory, projects or search across your past conversations. Your messages are still sent to the AI model to write the answer, under zero data retention.

Memory. When Memory is on, Prino asks the AI model to pick out short facts from your conversation, such as your preferences, to personalize future answers. The facts are encrypted and saved like the rest of your content. You can view and delete memories, correct one by telling Prino in a chat, or turn Memory off.

Search across your conversations. Prino builds its search index of your past conversations inside your browser. Where a feature uses a search service outside your browser, only the text needed to build or answer the search is sent, and it is not stored in readable form.

Voice. When you use voice input, your recording is sent to a speech-to-text provider under zero data retention, and the text comes back to your screen for you to review. We do not keep your recording or the transcript on our servers. Nothing is sent until you finish recording.

Web search. If you turn on web search, the search terms written for your question are sent to a search provider to find current information. Your conversation history is not sent.

Images and video. If you create an image or video, the description written for it, and any image you choose to include, are sent to a media generation provider under zero data retention. The result is downloaded to your browser, encrypted and saved like the rest of your content. The provider may keep the result for a period set by that provider before deleting it.

Files. Files you attach to a conversation are encrypted and saved on your device. Files you add to an account project may also be synced in encrypted form.

Connectors. If you connect Google, Microsoft or Notion, Prino can search and read your Gmail, Google Calendar and Google Drive, your Outlook mail and calendar, and your Notion pages when you ask it to. Access is read-only: Prino cannot send, edit or delete anything. The permission each service gives Prino is encrypted and saved in your account like your other data. Items Prino reads are sent to the AI model to answer your request under zero data retention and are not added to Memory. You can disconnect at any time in Prino, and you can also remove Prino's access in your Google Account, Microsoft account or Notion settings. We do not sell information from these services and we do not use it to train AI.

Prino's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve ads, we do not sell it, we do not use it to train AI and no person at Prino reads it.

Downloads. When you download a conversation or a document Prino created, the file is built in your browser. It is not uploaded to us.

6. How we use information

We use the information in Section 4 only to:

• provide the Service, including your account, sync and the features you choose;
• apply usage limits and keep the Service fair and available;
• protect Prino and its users against fraud, abuse and security threats;
• process payments and manage subscriptions;
• send you messages about your account, such as sign-in emails, security alerts, receipts and important changes to our terms;
• answer your questions and requests;
• understand overall use of the Service, using counts that do not include your content, so we can improve it; and
• comply with the law and enforce our terms.

We do not use your content, or any information about you, to train AI, to show ads or to build profiles for advertising.

7. Who we share information with

We do not sell or share your personal information for money, for cross-context behavioral advertising or for any other purpose covered by those terms in privacy laws.

We disclose information only in these cases:

Service providers. We work with companies that help us run Prino. They may process personal information only on our instructions and only to provide their service to us. They include providers of:

• hosting, networking and security;
• databases and rate-limiting systems, which store encrypted data and usage counts;
• email delivery, for sign-in and account messages;
• bot protection, for sign-up checks;
• AI models, speech-to-text and media generation, which receive the minimum content needed for each request under zero data retention commitments;
• web search, which receives only the search terms written for your question;
• sign-in with Google or Apple, if you choose to use them; and
• payment processing, if you buy a paid plan.

Services you connect. When you connect a service such as Google, Microsoft or Notion, we exchange information with it to provide the features you asked for.

Legal reasons. We may disclose information if we believe in good faith it is required by law, such as a valid subpoena, court order or search warrant, or needed to protect someone from serious harm. We can only disclose what we have. We cannot disclose your content in readable form, because we cannot read it. We review requests and may challenge those we believe are invalid or overbroad. Where the law allows and it is practical, we try to tell you about a request before disclosing your information.

Business changes. If we are involved in a merger, acquisition or sale of assets, your information may be transferred as part of it. The new owner must honor this Privacy Policy. Your content would transfer only in its encrypted form, which the new owner cannot read.

With your permission. We may share information in other ways if you ask us to or agree to it.

8. Cookies and browser storage

We use only what Prino needs to work or to remember your choices. We do not use advertising cookies, analytics cookies, tracking pixels or third-party trackers, and none of these can identify you across websites.

What	Why	How long
Guest cookie	Keeps your Guest session and its usage limits	Until it expires or you clear it
Sign-in cookies	Keep you signed in and protect your account	Until you sign out or the session expires
Security check	Confirms a person is signing up	For that check only
Encrypted browser storage	Holds your encrypted content on your device	Until you delete it or clear your browser data
Preferences	Remembers small display settings, such as a collapsed sidebar	Until you clear your browser data
Returning visitor	Holds only the value 1, with no identifier, so prino.ai can take you straight to the chat when you come back	One year, or until you clear it

You can remove any of these in your browser settings. Removing the returning visitor cookie only means you see the prino.ai homepage again. Removing the others may stop Prino from working, and your Guest data will be deleted. To see the homepage without removing anything, visit prino.ai/?home. We honor Global Privacy Control signals. Since we do not sell or share personal information, there is nothing further to opt out of.

9. How long we keep information

Information	How long
Your encrypted content on our servers	Until you delete it or delete your account
Your content in your browser	Until you delete it or clear your browser data
Content sent to AI and other providers	Not kept under zero data retention commitments, apart from short-lived processing caches that expire within an hour and generated media held until the provider deletes it
Finished answers held for reconnecting	Up to 30 minutes, in memory only
Account information	Until you delete your account
Usage counts	As long as needed for limits, security and abuse prevention
Coded network values for rate limits	As long as needed for rate limits, and they change every day
Service logs	For a limited period, as needed for security and reliability
IP and request logs at our network and security provider	As set by that provider for anti-abuse and security
Payment records	As long as tax and accounting laws require
Messages to us	As long as needed to handle your request and keep a record of it

When you delete something that is synced, we remove the encrypted copy and keep only a marker with no content, so your other devices know to delete it too. When you delete your account, we delete your encrypted data and account information. Copies in our backups are removed on a rolling schedule as the backups expire. We may keep information longer where the law requires or permits it, to prevent fraud and abuse, to enforce our terms or to resolve a dispute.

10. Your choices and rights

Choices in the app. You can use Prino as a Guest or in Ghost mode, turn Memory off, delete individual conversations, memories and files, disconnect Google, download your conversations and delete your account in your settings.

Your rights. Depending on where you live, you may have the right to:

• know what personal information we have about you and get a copy of it;
• correct information that is wrong;
• delete your information;
• receive your information in a portable format;
• object to or restrict certain processing;
• withdraw consent where we rely on it; and
• opt out of sale, sharing, targeted advertising and profiling. We do none of these.

How to use your rights. Most of these are available directly in your settings. You can also email hello@prino.ai. We will verify your request by confirming it from the email address linked to your account. You may use an authorized agent, and we may ask for proof that they are acting for you. We will respond within the time the law requires, usually 30 or 45 days. We will not treat you differently for using your rights.

Because your content is end-to-end encrypted, we can provide or delete it, but we cannot read it to you. You can read it yourself in the app and download it at any time.

Appeals. If we decline your request, you can appeal by replying to our decision or emailing hello@prino.ai with the subject line "Privacy appeal". If you are not satisfied with the outcome, you may contact your state attorney general or data protection authority.

11. United States state privacy notice

This section applies to residents of California and of other US states with consumer privacy laws. It describes our practices over the past 12 months.

Category of personal information	Examples	Disclosed to
Identifiers	Email address, name, Guest and account identifiers	Hosting, database, email and sign-in providers
Customer records	Payment status and billing details	Payment processor
Internet and network activity	Usage counts, coded network values, service logs, IP and request logs	Hosting, networking and security, database and rate-limiting providers
Audio information	Voice recordings, processed under zero data retention commitments	Speech-to-text provider
Content you choose to send	Messages, files and connected service items, processed under zero data retention commitments	AI, search and media generation providers
Inferences	Memories you allow Prino to save, stored encrypted	Stored encrypted, readable only by you

Sources. We collect this information from you, from your device, and from services you choose to connect or sign in with.

Purposes. We use it for the purposes in Section 6.

Sensitive information. Your content may include sensitive information, such as health, financial or other personal details you choose to share. We use it only to provide the Service you asked for, as allowed by law, and never to infer characteristics about you. Account sign-in details are used only to secure your account.

Health information. If you share information about your health, it is handled like the rest of your content: end-to-end encrypted when saved, sent to an AI model only to answer you under zero data retention commitments, never sold and never used for ads or AI training. Our Consumer Health Data Privacy Policy explains this in detail.

No sale or sharing. We have not sold or shared personal information in the past 12 months, and we do not knowingly collect information from anyone under 18.

California "Shine the Light". We do not disclose personal information to third parties for their direct marketing.

12. If you are in the European Economic Area, the United Kingdom or Switzerland

Legal bases. We process personal information:

• to perform our contract with you, to provide the Service you signed up for;
• for our legitimate interests in keeping the Service secure, preventing abuse and understanding overall use, where those interests are not outweighed by your rights;
• to comply with our legal obligations; and
• with your consent, such as when you connect Google, Microsoft or Notion, which you can withdraw at any time.

Health and other special information. If you choose to include health information or other special categories of personal information in your content, we process it only to provide the Service you asked for, based on your explicit consent, which you give by sharing it with Prino. You can withdraw that consent at any time by deleting the content or your account.

International transfers. We are based in the United States, and our service providers may process information in the United States and other countries. When we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on adequacy decisions or on the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents.

Complaints. You have the right to complain to your local data protection authority. We would appreciate the chance to address your concerns first at hello@prino.ai.

13. Security and its limits

We designed Prino so that a breach of our servers would expose encrypted data, not your content. We also use encrypted connections, strict access controls, and a browser security policy that limits which code can run in the app.

No system is perfectly secure, and we cannot guarantee the security of any information. We want you to understand the limits:

• If someone gets into your device or your browser, or learns your password or recovery kit, they may be able to read your data.
• Browser extensions you install can read what is on your screen.
• Your content is readable for a moment while it is processed to answer you, as described in Section 3.
• Our servers can see the limited information described in Section 2, such as when your data changes.
• A web app is delivered by the server each time you open it. You rely on us to deliver the genuine app.

If we learn of a security incident that affects your personal information, we will notify you and the authorities as the law requires.

14. Children

Prino is for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor is using Prino, email hello@prino.ai and we will close the account.

15. Changes to this policy

We may update this Privacy Policy. We will post the new version here with a new effective date. If a change is material, we will give you reasonable advance notice by email or in the app. Your continued use of the Service after the change takes effect means you accept it. We will not apply a change that materially reduces your privacy protections to information we collected before the change without your consent.

16. Contact us

Good Things Ahead, LLC Email: hello@prino.ai