GrantAi Remembers · Privacy Policy

Your memories live on your phone.

GrantAi Remembers stores your memories only on your phone. SolonAI never stores them. When an AI agent you connected asks GrantAi something, the request and the answer pass through our relay encrypted in transit and are not kept. We do not read them, log them, or use them for anything.

Only on your phone

Every memory and saved exchange
Conversation history you import
The search index over your memories
The record of what each agent saved and recalled

What the relay keeps

A random phone id and a hash of its secret
One row per connected agent: name, save mode, counts
The push address used to wake your phone
Timing of requests, never their content

1. What This Policy Covers

This policy covers the GrantAi Remembers app for iPhone and Android and the GrantAi relay at connect.grantai.ai, both provided by Solon AI Corporation ("SolonAI", "we"). It also covers the GrantAi Remembers connector as listed in AI agent directories. The GrantAi Memory Companion app and the GrantAi server products have their own privacy policy.

The AI agents you connect (for example Claude, ChatGPT, Muse, Grok or Perplexity) are provided by their own companies under their own privacy policies. This policy does not cover them.

2. How GrantAi Remembers Works

The app keeps a memory on your phone. An AI agent you connect reaches that memory through the relay: the agent sends a request to the relay, the relay wakes your phone and passes the request to it, your phone answers from its own memory, and the relay passes the answer back to the agent. The relay is a pass-through. It holds no memory content.

On your phone:

• Memories are stored in the app's private storage, encrypted at rest by the operating system
• Search and recall run on the phone, with models downloaded to it
• No account is created and no email address is collected by the app
• If you delete the app, the memory on that phone is deleted with it; we cannot restore it

3. Information the Relay Processes

3.1 In transit, not kept

Requests from your agents (a search query, or text an agent saves at your request or because you chose to keep your conversations) and the answers your phone returns pass through the relay over TLS. They are held in memory only for the seconds a request takes and are not written to storage or logs.

3.2 Kept, so the service works

Phone identity — a random id the app generates on first launch, and a one-way hash of the secret the phone uses to prove it is yours. The secret itself is only on your phone.
Connections — one entry per agent you connect: which agent, the save mode you chose, when it was created and last used, and how many saves and recalls it made.
Push address — the token Apple or Google issues so the relay can wake your phone when an agent calls. It identifies the app on your phone, not you.
Sign-in records — when an agent signs in, the agent's registered name, its return address and the approval you give on your phone. Pending sign-ins and six-digit connection codes expire after ten minutes.
Timing log — for the most recent requests, the kind of request, which agent made it, how long it took and its size. Never its content.
Usage counts — the number of saves and recalls, used to plan free and paid tiers.

We never store

Your memories, the text of anything an agent saves or recalls, your conversations, your name, your email address or any account of yours with an AI agent.

4. What Your AI Agents Receive

When an agent you connected searches your memory, the matching records are sent to that agent so it can answer you. They are then handled by that agent's company under its own policy, in the same way as anything else you type into it. An agent only ever reaches the memory through its own connection, which you approved on your phone, and only while that connection exists.

Each connection is private to one agent. Agents cannot see each other's connections, and nothing identifies you to an agent beyond what it already knows from your own account with it.

5. Your Choices and Controls

Approve each agent — no agent can read or save until you approve its sign-in on your phone, or enter the code it shows you.
See everything — the app shows what each agent saved and recalled, with dates.
Disconnect any agent — removing a connection in the app ends that agent's access immediately; its tokens and keys stop working.
Delete everything — deleting the app deletes the memory on your phone. The relay's record of your phone id and connections is removed within 30 days of the phone's last contact, or sooner on request.

How to delete your GrantAi Remembers data

Disconnect your agents. In the app, open Connect and remove each connection. That agent's access ends at once.
Delete the app. Every memory, saved exchange, imported conversation and search index is stored only in the app's private storage on your phone, so deleting the app deletes all of it. We hold no copy and cannot restore it.
Ask us to clear the relay record. The relay keeps only your random phone id, a hash of its secret, one row per connected agent (name, save mode, counts) and the push address used to wake your phone. These are removed automatically 30 days after your phone's last contact. To have them removed sooner, email support@solonai.com with the subject "GrantAi Remembers deletion" and the phone id shown on the app's Status screen. We complete requests within 30 days.

Nothing else is kept. The relay stores no memory content, no account, no name and no email address, so there is no further data to delete or retain.

6. Service Providers

We do not sell your data. The relay runs on Cloudflare's infrastructure. Wake-up notifications are delivered by Apple Push Notification service on iPhone and Firebase Cloud Messaging on Android; the notification carries no memory content. The app stores do not receive anything from the app itself.

No secondary use. Nothing that passes through the relay or is kept by it is used for advertising, for profiling, for inferring anything about you, or for training any model, ours or anyone else's. It is used only to run the service you asked for.

We may disclose information if required by law. Because memory content is never stored by us, there is no memory content for us to disclose.

7. Security

Transport: all traffic between agents, the relay and your phone uses TLS
Sign-in: agents use OAuth 2.1 with PKCE; tokens open one connection only and expire
Secrets: the relay keeps only hashes of your phone's secret and of any connection keys
On the phone: memory is held in the app's private storage, protected by the device's own encryption and lock

You are responsible for securing your phone and for the agents you choose to connect.

Reporting a security issue: email support@solonai.com with the subject "GrantAi Remembers Security". Security reports are read first. If an incident ever affects relay records, we notify the platforms your agents run on and, where we can reach you, you.

8. Children

GrantAi Remembers is not directed to children under 13, and we do not knowingly collect information from them. Use of the connected AI agents is subject to their own age requirements.

9. California & European Users

CCPA: We do not sell personal information. California residents may contact us for data requests.

GDPR: EEA users have rights to access, rectification, erasure and portability. Our legal basis for operating the relay is performance of the service you asked for. Memory content is under your sole control on your phone.

10. Policy Changes

We may update this policy. Material changes are announced in the app and on this page before they take effect. Continued use after that constitutes acceptance.

11. Contact

Privacy Inquiries

Solon AI Corporation

Email: support@solonai.com

Subject: GrantAi Remembers Privacy Request

Security reports: same address, subject "GrantAi Remembers Security"

By using GrantAi Remembers, you acknowledge that you have read and understood this Privacy Policy.