Privacy Policy

Effective October 16, 2026

Manifold (“we”, “us”) is a private AI assistant at https://ai.ushost.org. This policy explains what information Manifold handles, why, where it is kept and the choices you have. The short version: the AI runs on our own server, your conversations are not sent to outside AI companies, we do not sell or share your data for advertising, and there is no tracking or third-party analytics.

1. Where your data is processed

Manifold runs on a single server we own and operate in the United States. The AI models that write replies, read documents, transcribe speech and make images all run on that server. Your messages, files and memories are processed there and are not sent to OpenAI, Anthropic, Google or any other AI provider.

2. Information we collect

Account details: your username, display name and preferences.
Sign-in credentials: your password is stored only as a salted scrypt hash. Passkeys are stored as public keys; your device keeps the private key.
Your content: chats, messages, files you upload, things Manifold makes for you (pages, images, audio, video, 3D models), projects, notes, schedules and saved skills.
Live calls: the transcript of a call, and the camera or screen frames each reply was looking at, which are kept with that reply in the chat so you can see them afterwards. Recordings of your voice are not kept. Frames are deleted with the chat, included in your export, and never included in a shared link.
Memory: if memory is on, facts Manifold learns from your conversations so it can remember them later. You can view, edit and delete memories, turn learning off, or use temporary chats that are not learned from.
Devices and sessions: for each signed-in device, the IP address, browser description and sign-in times, so you can see and sign out your devices and so we can limit password guessing.
Notifications: if you turn on notifications, your browser’s push subscription. Notification text stored on the server is encrypted.
Connected accounts: if you connect Google or an email account, the access granted and the data described in section 4.

3. How we use information

We use your information only to provide Manifold to you: to answer your messages, run the tools you ask for, keep your history, memories and files, sign you in securely, send the notifications you turned on, and keep the service working and secure. We do not use your content to train AI models, we do not build advertising profiles, and we do not sell, rent or trade your information.

4. Google user data

If you choose to connect a Google account, Manifold asks only for read-only access to what you tick when connecting, and you can untick any of it on Google’s screen. Manifold never sends, drafts, saves, changes or deletes anything in your Google account:

Gmail (read only): so Manifold can find and read mail you ask about. It cannot send email or write drafts in Gmail.
Google Drive (read only): so it can find and read files you ask about.
Google Calendar (read only: events, calendar list, free/busy): so your chosen calendars appear in Manifold’s calendar. Changes you make in Manifold stay in Manifold.
Google Contacts (read only, and “other contacts”): so you can import your contacts into Contacts. Edits you make in Manifold stay in Manifold.
Your Google account’s email address, to show which account is connected.

Mail and Drive files are read when you ask: in a chat, or when you open a person’s page in Contacts, which lists your mail, meetings and files with them (looked up as the page opens; only subjects, dates and who was in each are shown, and none of it is stored). If you turn on Keep in touch for someone, Manifold also checks your calendar and your newest mail with them about twice a day, and keeps only the date you were last in touch. What is read in a chat becomes part of that chat; files you open are saved in the chat’s workspace; and, if memory is on and the chat is not temporary, Manifold may remember facts from it. Calendar events and contacts you sync are stored on our server so they can be shown and kept in sync. Google sign-in tokens are encrypted (AES-256-GCM).

Manifold’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features you turned on; it is not used for advertising, not sold, not transferred to anyone else, and not used to train AI models. No person reads it unless you ask us to (for example, for support), it is needed for security or abuse investigation, or the law requires it.

You can disconnect Google at any time in Settings › Connections, which also revokes Manifold’s access at Google. Deleting your account does the same. You can also remove access at myaccount.google.com/permissions. Contacts that were synced stay in Manifold as yours until you delete them.

5. Services that see some information

We do not use third-party analytics, advertising or tracking. To do what you ask, the server sometimes contacts other services:

Web search and page reading: search words and the addresses of pages Manifold reads are sent to public search engines and to those websites, from our server. They see the server’s address, not yours or your account.
Weather: a town name or a location rounded to about 1 km is sent to public weather services.
Push notifications: notifications pass, encrypted, through your browser maker’s push service (Apple, Google or Mozilla). By default they say only what kind of event happened; chat titles and reply text are included only if you choose that.
Pages and apps Manifold builds for you may load code libraries or fonts from public content delivery networks when you open them.
Google, if you connect it (section 4).

Maps, place search, routing, offline encyclopedia and speech services run on our own server.

6. Cookies

Manifold uses only cookies it needs to work: one that keeps you signed in (up to 30 days after you last use it), one that recognises a device you have signed in from before (to protect your account from password guessing), short-lived ones for passkey sign-in and for connecting Google, and layout preferences such as the sidebar’s width. There are no advertising or tracking cookies.

7. Security

All connections use HTTPS (TLS 1.2 or newer); Manifold is reachable only through that secure connection.
Passwords are hashed; sign-in attempts are rate limited; passkeys are supported.
Secrets such as connected-account tokens and notification text are encrypted in the database.
Code Manifold runs for you executes in an isolated sandbox with no network access.
Server logs record only that something happened, never the words of your messages, replies, file names, memories or search terms.
Backups are encrypted before they leave the server.

No system is perfectly secure. If we learn of a breach that affects your information, we will tell you promptly.

8. Who can see your data

Your chats, files and memories are visible only to you, and to people you deliberately share them with (a shared chat link, a published page, or a project you invite people to). Anyone with a share link can open what it shares until you revoke it; shared pages are hidden from search engines.

Administrators cannot open your account on their own. An administrator can ask for access; you must approve the request in Manifold, the access lasts at most an hour, it appears in your devices list (where you can end it) and it is recorded in the activity log you can see in Settings. As the operator of the server we could technically access stored data; we do not, except with your approval, to keep the service secure, or when the law requires it.

9. How long we keep information

Your chats, files, memories and synced data are kept until you delete them or delete your account.
Temporary chats are deleted automatically one day after their last activity.
Signed-in sessions end 30 days after they were last used.
Server logs are deleted after 14 days.
Encrypted backups are kept for up to 12 months, so deleted information can remain in a backup until that backup expires. Backups are used only to recover from a failure.

10. Your choices and rights

Access and export: download a copy of your data (chats, projects, memory, notes, schedules, skills and files) in Settings › Privacy & data.
Correct or delete: edit or delete chats, files and memories at any time.
Delete your account: in Settings › Privacy & data. This deletes your account and everything in it from the live service, including your files and memories, and revokes connected Google access.
Control memory: turn memory or learning off, or use temporary chats.
Disconnect services such as Google at any time.

Depending on where you live, you may have further rights under laws such as the GDPR or the California Consumer Privacy Act, including the right to know, correct, delete or port your information. We honor those requests for every user: you can export or delete everything yourself in Settings › Privacy & data. We do not sell or share personal information as those laws define it.

11. Changes to this policy

If we change this policy, we will update the date above, and for material changes we will tell you in Manifold before they take effect.

12. Your data, your controls

Export or delete your data at any time in Settings › Privacy & data. See also our Terms of Service.