Privacy policy

Last updated October 14, 2026

Distrohead ("we", "us") runs distrohead.com and apps.distrohead.com. This policy explains what we collect, why, who helps us run the service, and the choices you have. We keep it short and plain on purpose.

What we collect

• Waitlist. Your email address, and a one-way hash of the network address you joined from, used only to stop abuse.
• Your account. Your name and email address, and your profile picture if you sign in with a Google account.
• What you tell your heads. Your messages, files you upload, the interests, preferences and to-dos you save, and what your heads find and make for you.
• Settings and devices. Your time zone, when you want briefs, and, if you turn on notifications, your browser's push subscription.
• Google Calendar. If you connect it, we keep an encrypted key that lets your heads read the events on your calendar (to check for clashes and answer “what do I have tomorrow?”) and add events you ask for, without inviting anyone. We don't store your calendar; we read it when a head needs it. Disconnect in Settings and the key is deleted and its access withdrawn at Google.
• Health devices. If you connect a wearable, scale or health app, we keep an encrypted key to read it and a daily summary of what it measured: sleep, heart rate and heart rate variability, recovery or readiness, activity and workouts, and, from scales and blood pressure monitors, weight and blood pressure. We use it only for your Health head: reading how you are, finding patterns (including with your calendar, if you connected it) and suggesting time for your health. It's wellness information, not medical advice.
• Payment card. If you connect one, you type it on our payment processor's page, not ours. We keep only its brand, last four digits and expiry; the payment processor keeps the card itself.
• Published pages. Pages you choose to publish, and how many times they're viewed.
• Technical data. Basic logs (such as time, page and error details) that keep the service secure and working.

How we use it

• To run the service: your heads read your messages and the sources you care about so they can answer, screen and brief you.
• To send you what you asked for: briefs, notifications, and emails such as your waitlist confirmation and invite.
• To keep the service safe: preventing abuse, fixing problems and planning capacity.

We don't sell your personal information, we don't show ads, and we don't use your content to train AI models.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is used only to check for clashes, answer your questions about your schedule and add the events you ask for; it's never sold, used for ads, or used to train AI models, and people at Distrohead don't read it.

Health data is yours and sensitive. We ask before we collect it (connecting a device is that consent), we never sell it, share it for advertising or use it to train AI models, and your other heads see only short summaries when they need them. Disconnect a device in Settings and everything it sent is deleted at once, and its access withdrawn where the device allows it.

Who helps us

We share data only with the providers that run parts of the service for us, and only what each needs:

• Cloud hosting runs the app and its database in the United States.
• AI model providers power your heads: your messages and the context your heads need are processed to produce answers. They don't use them to train their models.
• Sign-in and calendar. If you sign in with a Google account or connect your Google Calendar, Google handles that sign-in and holds your calendar. Small site icons next to links come from a public icon service, asked by the site's domain alone, never the page or who you are.
• Email delivery sends our emails to you.
• Payments: our payment processor stores the card you connect, charges it only for purchases you approve, and, if you link a bank, lets us read its transactions (read-only) so Wallet can answer about your spending.
• Travel booking: our flight-booking partner receives the traveller details needed to book a flight you approve, and passes them to the airline.
• Phone calls: our telephony and voice providers place the calls you turn on, to the number you verify, and provide the voice on them. Calls aren't recorded; we keep a short transcript in your Attention chat.
• Search and data providers receive the search queries your heads run (for example, a topic you asked about), not your account details.
• Your browser's push service delivers notifications you turned on.

We may also disclose information when the law requires it, or to protect people and the service from harm.

Published pages are public

Anything you publish at apps.distrohead.com can be seen by anyone with the link and may be indexed by search engines until you unpublish it.

How long we keep it

We keep your account data while your account is open. When you ask us to delete your account, we delete it within 30 days, apart from what we must keep by law; backups roll over on a short schedule. Waitlist entries are kept until you join or ask us to remove them.

Your choices

You can ask us to access, correct, export or delete your information, or to remove you from the waitlist, by writing to privacy@distrohead.com. Depending on where you live, you may have further rights, such as objecting to or restricting how we process your data, or complaining to your data protection authority. We'll answer within 30 days.

Security

We protect your data with encryption in transit, access controls and private networking. No service is perfectly secure, so please tell us right away if you notice anything wrong.

Children

Distrohead isn't meant for anyone under 16, and we don't knowingly collect their information.

Changes

If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect.

Contact

Questions about privacy: privacy@distrohead.com.