Personal Context Privacy Policy

This Privacy Policy explains how FCT Technologies LLC handles information for Personal Context.

Summary

• We do not sell personal data.
• We do not run ads, and we use no third-party analytics or tracking SDKs.
• Personal Context requires an FCT account. What it stores under its own name is your conversations, and nothing else.
• Your calendar, your reminders and your contacts are read on this device to answer you, and none of it is ever written to your account.
• Answers are computed on your device by Apple’s model. No third-party AI company is in the path, and neither is an FCT server.
• Diagnostics are anonymous by construction: they are keyed to a random install identifier with no connection to your account or identity.

Your FCT account

Personal Context requires an FCT account, and no part of the app is built before you are signed in. You create an account with Sign in with Apple, Sign in with Google, or an email address and password, and you can connect additional sign-in methods later in Settings.

We store the account identifier from your chosen sign-in method, or your email address. Authentication is handled by our authentication provider (Supabase) on our behalf.

Your name and the profile photo you set are part of the FCT account itself, shared by every FCT app you use rather than owned by this one. Your Personal Context Pro subscription status is claimed on the account too, so it reaches your other devices.

What Personal Context stores in your account

Personal Context owns no record types. Every kind of thing you keep has an app built for it, and this is the app you talk to. What it writes under its own name is the conversation:

• Chat sessions: the title, when the session started, and when you last used it.
• Chat messages: who spoke, the text, which tools ran on that turn, and the time.

Beside them sits your account’s settings row, which every FCT app shares: whether anonymous signals may improve FCT’s apps, and which FCT apps you have connected here.

Synced data is stored on FCT’s cloud infrastructure (a Postgres database hosted on Supabase), scoped to your account and enforced per account at the database level, so it is not readable by another account. We do not sell your data, we do not share it with advertisers, and we do not use it to train models.

Your conversations are kept, deliberately

A chat whose history evaporates is a query box. Sessions and messages are records like any other: kept on this device and synced to your account, so a conversation you started on your phone is there on your Mac. A message is written once, when the turn completes. Regenerating a reply retires the old message and inserts a new one rather than rewriting history.

If you would rather a conversation not persist, delete it. Deleting a session deletes its messages, and the deletion reaches your other devices.

The FCT apps you connect

Connecting an FCT app does two things: that app’s own functions become available to the chat, and this device pulls that app’s tables out of your account so the chat can answer from them. Villain Arc, Anchor, Marquee, Transcription Studio and Memory Lane each have one switch.

Those rows are the owning app’s records on the owning app’s schema, the same rows that app already keeps for you in the same account. Personal Context does not make a second copy under a name of its own, and connecting an app sends nothing anywhere new. An app you have not connected is not read, and its tables are not pulled to this device at all.

Disconnecting an app stops its functions loading and stops the chat reading it. It deletes nothing, because those rows belong to the app that owns them: deleting them here would delete your training history inside Villain Arc.

Which apps you have connected is answered once, on your account, so it holds on every device you sign in on.

What stays on this device

• Your calendar and your reminders. They are read to answer you, and an event or a reminder is added when you ask for one. They stay in Apple’s own apps on this device. Nothing from them is copied to your FCT account.
• Your contacts. The chat looks a person up by name when you ask about them. It cannot list your address book, and it cannot change a contact, because there is no write. Nothing from Contacts reaches your account.
• A photo you attach to a message. It is read on this device to answer that turn and is stored nowhere. It does not become part of the saved message.
• Dictated audio, which is never written to a file: the microphone is streamed into Apple’s on-device transcriber live, and only the text it produces goes anywhere.
• The outside servers you add, which are held in this app’s own storage on this device.
• Your appearance choice, and the permissions you granted this Mac or this phone.

Where the thinking happens

Everyday chat runs on Apple’s on-device foundation model. What you type is processed on your device.

A deeper request can escalate to Apple’s Private Cloud Compute, which is Apple’s own infrastructure rather than a third-party processor, and which Apple states keeps requests private and does not store them. That escalation runs only on a build carrying Apple’s Private Cloud Compute entitlement; until Apple grants it, every turn is answered on your device.

There is no third-party AI provider wired into Personal Context, and no FCT server sits anywhere in the answer path. Nothing you type is sent to an AI company.

Your own servers

Personal Context speaks the Model Context Protocol as a client, never as a server. You can add an outside service by address, and its tools show up in the chat like any other.

That service is yours, not ours. What leaves this device on that path is what a tool call carries, it goes to the address you entered, and every call is a line you can read in the conversation. We do not run those servers and we do not see what you send them. How that service handles what it receives is between you and whoever operates it.

What Personal Context does not do

• It indexes nothing into Spotlight and donates nothing to Siri. Its Shortcuts actions appear in Siri and Spotlight because they are actions you can run, and running one is you asking a question.
• It does not read your messages. No third-party app on iPhone can: there is no framework that vends a conversation, no permission that grants it, and no entitlement to apply for. Personal Context has a Shortcuts action, Answer a Message, which takes the text your own automation hands it and returns an answer. It receives what your shortcut passes and nothing else.
• It does not ask for your location. The app requests no location permission and links no location framework.
• It does not reach another developer’s apps. The FCT apps you connect, this device’s calendar, reminders and contacts, and the servers you add yourself are the whole of it.

Diagnostics: always on, never identified

Personal Context reports anonymous diagnostics to FCT: crash and performance data, a short trail of screen and action names (never content) leading up to a problem, feature-use counts, and timing measurements such as how long a launch took.

Diagnostics are keyed to a random install identifier created on first launch. They are not linked to your account or identity, the diagnostics system has no connection to account data by construction, and they contain nothing you typed, viewed or stored. Screen and action names are fixed values built into the app, so free text has no way in. We use diagnostics to fix crashes and improve the app, and for nothing else.

Deleting your account erases everything in it (see Deleting your data), but not these: nothing marks which diagnostics are yours, so none can be singled out, not by us and not on request. They expire on their own schedule instead (see Retention).

Settings also offers you your own copy of the diagnostic payloads this device has collected, which you can share with support if you want to.

No third-party tracking

Personal Context uses no advertising identifiers, no third-party ad tracking, no analytics SDKs, no behavioral profiling and no cross-app tracking. The anonymous diagnostics described above are the only thing the app reports on its own, they go to FCT and nowhere else, and they are not linked to you.

Permissions

Each is requested at the moment it becomes useful, never at launch, and each is optional. You can decline any of them, and change your mind later in system settings.

• Calendar: to read your events and add one when you ask.
• Reminders: to read your reminders and add one when you ask.
• Contacts: to look someone up by name when you ask about them.
• Camera: to attach a photo to a message.
• Microphone and speech recognition: to dictate instead of typing. The audio is streamed live and transcribed on your device.

Sharing

We do not sell your personal data, and we do not share it for advertising, profiling or analytics.

We use service providers to operate the app: Supabase for authentication, database and file storage. They process data on our behalf, under our instructions.

When you use Apple platform features such as Sign in with Apple, Apple Intelligence, Private Cloud Compute, Shortcuts or the App Store, Apple processes data as part of providing those services, governed by Apple’s own terms and privacy practices. The same applies to Google if you sign in with Google, and to any outside server you add yourself.

Retention

Your data is retained while your account exists. Deleting a record in the app removes it from your account across your devices; a deletion marker is kept for up to 90 days so every device you sign in on hears about the delete, and is then swept.

Diagnostics are kept on their own clock, because they are not tied to your account: usage metrics and counters are deleted after 180 days, and crash diagnostics after 400 days. A daily job enforces both windows.

Deleting your data

Settings gives you two clearly separated doors, and neither is hidden inside the other.

• Delete Your Personal Context Data. Erases everything this app holds under its own name, which is your conversations, from our servers and from this device, and leaves your FCT account and your other FCT apps intact. If Personal Context turns out to be the last FCT app with any data in your account, the app tells you the deletion becomes a full account deletion before it runs.
• Delete Your FCT Account. Erases your FCT account and all of its data from our systems, everywhere, across every FCT app, along with the sign-in record itself.

You can also delete one conversation at a time from the conversations list, which reaches your other devices like any other change.

If you have a subscription, it is billed by Apple and outlives the data: cancel it in your Apple Account settings, which is the only place it can be cancelled.

Signing out ends your session in every FCT app on that device. Your data stays in your account, and signing back in brings it down again.

Children

Personal Context is a general-audience utility. It has no user-to-user content and no sharing surface, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

Security

We use reasonable technical and organizational measures designed to protect information. No system is perfectly secure.

If a breach happens, this is what we do. Where a personal-data breach is likely to result in a risk to your rights and freedoms, we notify the relevant supervisory authority within 72 hours of becoming aware of it. Where the risk to you is high, we notify you without undue delay, describing what happened, what data was involved, what we are doing about it, and what you can do. We keep a record of every breach and its handling whether or not it is notifiable.

We hold the whole app fleet to this single deadline deliberately: it is the strictest one that applies to us, so meeting it satisfies the others rather than requiring separate timetables to be tracked and one of them to be missed.

International users

FCT Technologies LLC is based in the United States. If you use Personal Context outside the United States, your information may be processed in the United States or in other locations where our service providers operate.

Changes to this Privacy Policy

FCT Technologies LLC may update this Privacy Policy from time to time. If that happens, the date at the top of this page will be updated.

Contact

If you have questions about this Privacy Policy, contact:

FCT Technologies LLC
[email protected], and we respond within 5 business days