Privacy policy
Effective date: [EFFECTIVE DATE]
This policy explains what personal data Compi handles, why, and what you can do about it. We kept it as short and plain as we could.
Who we are
Compi is a Quetzal product, made by Quetzal Tech, S.L. (Sociedad Unipersonal), a Spanish company with registered office at Alameda Principal, 24, planta 1ª, puerta 3, 29005 Málaga, Spain and tax ID (CIF) B93928919. We are the controller of the personal data described in this policy. Full company identification, including the registry details, is in the Legal notice.
Contact for anything about privacy: hello@quetzaltech.es. We have not appointed a data protection officer because the law does not require one for our activity. Data protection questions go to that address and are handled by the company's sole director. [OWNER DECISION: confirm no DPO is needed]
The short version
- Compi has three parts: a free desktop app (with a browser extension) that runs on your computer, a paid iPhone app, and Compi Cloud, the service behind the iPhone app.
- The desktop app works with your own model keys. What you ask it and what it sees on your computer go from your computer to the providers you chose. We do not receive it.
- For the iPhone app we keep what an account needs: your email, your purchases, and how much metered voice you used. We never keep the content of your conversations, calls or tasks.
- Messages between your iPhone and your computer are end-to-end encrypted. Our servers pass them along without being able to read them. When you talk to Compi on the iPhone, the call goes from your phone to OpenAI's voice service, not through our servers.
- No ads, no tracking, no analytics SDKs, and we never sell your data.
1. The desktop app and the browser extension
The desktop app (Mac and Windows) runs the agent on your own computer. Its core is open source.
- Your content stays between you and your providers. The agent reads pages, files and apps on your computer to do what you ask, and sends what it needs to the model, speech and other providers you configured with your own keys (for example OpenRouter). That data goes from your computer straight to those providers. It does not pass through our servers, and we cannot see it. Each provider's own terms and privacy policy apply to it, under your agreement with that provider.
- Data on your computer. Memory, task history, settings and logs are stored on your computer, in the Compi data folder. You control them and can delete them at any time.
- The browser extension talks only to the Compi app on the same computer, through the browser's native messaging. It has no server of its own and sends nothing to us.
- Downloads and updates. The desktop app checks Compi Cloud for updates and downloads them, like the installers on our website, from our file storage (Supabase Storage). The request shows your IP address, the app version and your platform, as with any download. The update files are signed, so the app checks they come from us.
- If you sign the desktop app in to Compi Cloud (only needed for the iPhone app), the data in section 2 applies.
2. The iPhone app and Compi Cloud
The iPhone app is the paid part of Compi. To work, it needs an account in Compi Cloud. This is the data we keep about you there:
| Data | What it is | Why |
|---|---|---|
| Email address | The address you sign in with | Your account and sign-in, service messages, beta invitations and the beta welcome email |
| Beta access (during the beta) | The date your beta access ends, which invite code you used (we store only a keyed hash of each code) and, if you asked for access on the waitlist, your email, what you wrote, your language and whether we approved it | Running the beta, choosing testers |
| Sign-in codes | One-time 6-digit codes. We store only a keyed hash (HMAC), never the code itself | Sign-in |
| Account identifiers | Your account id and the purchase token that links App Store purchases to your account | Running your account, linking purchases |
| Device identifiers | The ids of your iPhone and your computers. They are derived from public keys created on your devices, not from hardware ids | Knowing which devices belong to your account, revoking them |
| Computer names | The name you gave each computer you signed in | Showing you your computers |
| Access tokens | We store only keyed hashes of them | Keeping you signed in |
| Purchases | App Store transaction data that Apple signs and sends us (product, dates, status, renewal, refunds). We never get your card or payment details | Your subscription and credit |
| Credit and usage records | Your credit balance and movements, and one record per metered request or call: provider, model, tokens, seconds, characters, cost and time. Never the content | Charging metered voice, your statements, the safety limit, abuse prevention |
| Relay traffic counters | Per computer: number of messages and bytes, file transfer sizes, push count | Running the relay, capacity, abuse prevention |
| Coding-agent usage (optional) | If your computer reports it: which coding agent, model, tokens and cost, which you pay to your own provider | Showing you your own usage. Never charged by us |
| Web top-ups (optional, where offered) | If you buy credit on the web: the Stripe payment id, amount and, if you choose auto top-up, a reference to the card saved at Stripe. Stripe holds the card details, we do not | Credit, refunds, auto top-up |
| Support emails | What you write to us and our replies | Helping you |
| Server logs | Method, route, status, account id, a shortened device id, timing. Never message bodies, never credentials. IP addresses are used in memory for rate limiting [VERIFY: whether the hosting provider's logs keep IP addresses] | Security, debugging |
3. Content that only passes through
Some things travel through our servers on their way somewhere else. We do not store them.
- Messages between your iPhone and your computer (cards, approvals, screenshots, files) are end-to-end encrypted. Our relay sees only encrypted data. If your phone or computer is offline, the relay holds encrypted messages in memory for up to 24 hours. Encrypted file transfers are deleted when they expire or have been downloaded.
- Talking to Compi on the iPhone. Your phone connects straight to OpenAI's realtime voice service with a short-lived key our cloud issues for that call. Your voice, its transcript and Compi's spoken answers go between your phone and OpenAI and do not pass through our servers. To charge voice credit, our cloud follows the call's usage figures (tokens and minutes) from OpenAI; it ignores the rest of what the call contains and never logs or stores it. Only the usage numbers in section 2 are recorded. [VERIFY: OpenAI data retention for Realtime API calls on our account (zero data retention or the default 30 days)]
- Native voice. When Compi answers in a language with a native voice (for example Spanish), your phone sends the text of each sentence Compi says to our cloud, which passes it to Google Cloud Text-to-Speech in memory and returns the audio. The text is never logged or stored.
- Web searches during a call go from your phone to our cloud and on to OpenAI's web search (with
store: false), in memory. Queries and answers are never logged or stored. - What you ask Compi to do on your computer during a call travels end-to-end encrypted through the relay, like other messages. Everything the agent does there (planning, browsing, typed chat, coding) uses your own keys, as in section 1.
- Push notifications go through Apple's push service. Their visible text is generic, and the details are encrypted so only your iPhone can read them. Live Activity updates (the task status on your Lock Screen) carry no task text.
4. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and running your account, the iPhone app, the relay, calls and the voice gateway | Performance of our contract with you (Art. 6(1)(b)) |
| Subscriptions, credit, metering and statements | Performance of the contract (Art. 6(1)(b)) |
| Keeping accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Security, preventing fraud and abuse, rate limits, the safety spending limit | Our legitimate interest in keeping the service safe and you and us from unexpected costs (Art. 6(1)(f)) |
| Answering support requests | Contract (Art. 6(1)(b)) or our legitimate interest in helping you (Art. 6(1)(f)) |
| Anything else we would need your permission for | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
We do not use your data for advertising, profiling or automated decisions with legal or similarly significant effects.
5. How long we keep it
- Account data: while your account exists. When you delete your account in the app we delete it at once (by email: within 30 days).
- Accounting records (invoices for web top-ups we sell ourselves): up to 6 years, as Spanish commercial and tax law requires (Código de Comercio art. 30, Ley General Tributaria), then deleted. App Store purchases are sold by Apple, which keeps their records. [VERIFY: lawyer to confirm which records we must keep ourselves]
- Usage records: while your account exists, and those needed as accounting records as above.
- Sign-in codes: 10 minutes.
- Server logs: [LOG RETENTION].
- Backups: deleted data leaves our backups within [BACKUP RETENTION].
- Support emails: up to 2 years after the conversation ends. [OWNER DECISION: confirm]
6. Who processes data for us
We use these providers (processors) to run Compi. Each one gets only what its job needs.
| Provider | What it does | Where |
|---|---|---|
| Fly.io | Hosts Compi Cloud and the relay | Paris, France |
| Supabase | Hosts our database | Paris, France (EU) |
| OpenAI | The realtime voice of iPhone calls (straight from your phone), their transcription, and web searches during calls | United States |
| Google Cloud Text-to-Speech | Speaks Compi's answers in a native voice (the text of each sentence) | [VERIFY: region of the Google Cloud project compi-512521] |
| Resend | Sends sign-in emails, beta invitations and beta welcome emails | United States [VERIFY: EU region available] |
| Apple | App Store payments, push notifications | United States and worldwide |
| Stripe | Optional web top-ups | EU and United States |
| Expo (EAS) | Builds and submits the iPhone app. Receives no user data from the app | United States |
| Vercel | Hosts this website | Global network |
Apple is also an independent controller for App Store purchases, under its own privacy policy.
Providers you connect yourself are not our processors. The agent's models run on your own OpenRouter key: what the agent sends them (your requests and what it needs from your computer) goes from your computer to OpenRouter and the model hosts it routes to, for example DeepSeek, under your own agreement with OpenRouter. We do not receive it. Those hosts are in the United States and other countries, which can include China for DeepSeek's own service; OpenRouter lets you choose which hosts to allow. [VERIFY: which hosts OpenRouter routes Compi's default models to, and the zero-data-retention setting the app requests]
7. International transfers
Some providers are outside the European Economic Area, mainly in the United States. When data goes there, we rely on the EU-US Data Privacy Framework for providers certified under it, and on the European Commission's Standard Contractual Clauses otherwise, with additional safeguards where needed. [VERIFY: DPF status of each provider] You can ask us for a copy of the safeguards at hello@quetzaltech.es.
8. Your rights
You can ask us to:
- give you a copy of your data (access);
- correct it (rectification);
- delete it (erasure);
- limit how we use it (restriction);
- send it to you or another service in a machine-readable format (portability);
- stop using it where we rely on legitimate interest (objection);
- and you can withdraw consent at any time, where we asked for it.
Write to hello@quetzaltech.es from the email of your account, or use the Account screen in the app. Say which right you want to use; if we cannot tell that the request comes from the account holder, we will ask you to confirm it before acting. We answer within one month. Using these rights is free, and withdrawing consent does not affect processing already carried out. If you are not happy with our answer, you can complain to the Spanish data protection authority, the AEPD (www.aepd.es), or to the authority where you live or work.
9. Deleting your account
You can delete your account at any time. See Delete your account for the steps and what we keep.
10. Children
Compi is not for anyone under 18. The agent can act and pay on your behalf, and the iPhone app is a paid subscription. We do not knowingly collect data from children. If you think a child has given us data, write to hello@quetzaltech.es and we will delete it.
11. Security
Messages between your devices are end-to-end encrypted, tokens and codes are stored only as keyed hashes, provider keys never leave our servers, and our servers never log message bodies or credentials. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
12. If you live in the United States
We do not sell or share your personal information for cross-context behavioural advertising, and we do not use it for targeted ads. You have the rights described in section 8, including under the California Consumer Privacy Act and similar state laws. We will not treat you differently for using them. The categories of data we collect and why are in sections 2 to 4.
13. If you live in the United Kingdom
UK GDPR gives you the same rights as section 8. You can complain to the Information Commissioner's Office (ico.org.uk). Our UK representative is [UK REPRESENTATIVE].
14. Brazil and other countries
If you live in Brazil, the LGPD gives you rights similar to those in section 8 (including confirmation of processing, access, correction, anonymisation, portability and deletion), and you can contact the ANPD. Wherever you live, you can use the rights in section 8 and we will answer in line with your local law.
15. Changes to this policy
If we change this policy, we will update the date at the top. If a change matters, we will tell you in the app or by email before it applies.
Contact
Quetzal Tech, S.L. (Sociedad Unipersonal), Alameda Principal, 24, planta 1ª, puerta 3, 29005 Málaga, Spain. CIF B93928919. Email: hello@quetzaltech.es.
Highlighted text in square brackets is a placeholder that will be filled in before launch.