A window, not a camera.

Three lists, no small print.

Only what the window needs.

• Your account. Your email address, and the ID of the Google or GitHub account you sign in with, so we know it's you coming back. Aware takes those two things only: no name, no photo, no contacts. It also notes when you joined and the last time you used it, updated at most once an hour.
• Places. Your home, and any place you or your agent saved, such as "uni" (ten at most, with home). Each is a name, coordinates rounded to about 1 km, and a timezone. Aware doesn't follow your device, so it never learns where you are. It only knows the places you named.
• Your settings. Which sources are on, your units, the news outlets, feeds and keyword topics you chose, the models you follow, the dates you gave it (an exam, a birthday) and the watches your agent set.
• A daily note. One short note a day, taken after 06:00 your time, for as long as you've used Aware in the last two weeks: the weather, daylight and air quality at home, how the services Aware checks are doing, and the top three headlines if you turned news on. A note is also saved when your agent runs a world check. It's how your agent can say "it's been grey all week". Each note is deleted after 35 days.
• Which app looked, and when. For each app or key you've connected: its name, and the time it last asked for the brief. That's one time, replaced on every look, not a history. Separately, the time of each world check is logged and deleted after 35 days.
• Headlines already shown. A short fingerprint of each headline your agent has been shown, so it doesn't repeat itself. Kept for 7 days.
• Keys and sign-ins. Your Aware key is kept only as a one-way hash, with its first few characters so you can recognise it. Apps you connect get tokens, also kept as hashes. Keys you add for other services (see below) are encrypted with AES-256-GCM, using a key worked out separately for your account from a secret that only the running service holds. Aware decrypts one only to make a request to that service for you.

Most things go when you do.

• Account, places, settings, dates, saved keys, the last-looked timeUntil you delete your account.Until deleted
• Daily notes and the world-check logDeleted by a nightly clean-up.35 days
• Watches that fired or expired, and what they caughtActive watches last until they expire, 30 days unless your agent said otherwise.35 days
• Headlines already shown7 days
• Website sign-inThe one cookie. See below.7 days
• An app's sign-inAn access token lasts 1 hour and the refresh token 30 days. Some expired records stay, as hashes, until you delete your account.30 days
• Your IP address, to slow down sign-in attemptsNothing else uses it.1 hour
• Quick copies of your settings and sign-in checksSo Aware answers fast.15 minutes
• Shared lookups: weather at a place, holidays, service status, place namesKept once for everyone, not linked to you.Up to 30 days

Things it will not do.

• Track where you are. It uses the places you gave it, and nothing from your phone or browser.
• Read your messages or files. Your agent talks to Aware. Aware can't see your conversation, or anything else in the app.
• Sell your data. Nothing is sold, rented or passed to advertisers. The only outsiders involved are the services named below, each for the job listed.
• Show your keys to your agent. Keys for other services can be added or removed only on the website. Your agent can see whether one is saved, never the key.
• Watch you on the page. There's one cookie, aware_session, set when you sign in (HttpOnly, Secure, SameSite=Lax). No analytics, no advertising cookies.

You can always change, export and delete.

• Change. Switch any source off, or change your home, places, dates, watches and outlets, on the website or by asking your agent.
• Take access back. Disconnect Aware in the app, or replace your key under Agents and keys. The old key stops working at once.
• Export. Download what Aware holds about you as a file: your account, settings, daily notes, watches and the list of apps. For keys you added, it says only that they're saved, not what they are.
• Delete. One button on your account page deletes your account and everything in it, at once, including your saved keys, notes and watches. The short-lived copies in the cache clear themselves within minutes.

The services behind it.

Aware uses a few outside services. Each has one job, and Aware sends it only what that job needs.

• CloudflareHosting. Aware runs on Cloudflare, which handles every request (including the IP address it came from) and holds the database.Hosting
• GoogleSign-in. We receive your email address and Google account ID, and nothing else.Sign-in
• GitHubSign-in, if you choose it. We receive your verified email address and GitHub account ID, and nothing else. GitHub's access token is thrown away straight after.Sign-in
• Google FontsThe typefaces on these pages. Your browser asks Google's servers for them, so Google sees that request.Fonts
• Open-MeteoWeather, air quality, pollen and place search. We send coordinates rounded to about 1 km, and place names you or your agent look up, such as "Cardiff". No name, no email, no account.Weather
• Nager.DatePublic holidays. We send a country code.Holidays
• Status pagesAnthropic, OpenAI, Cloudflare, AWS, GitHub, Discord and npm. We read their public status pages. Nothing about you is sent.Status
• News feedsThe outlets you chose, any feed addresses you added, and Hacker News if you picked it. Aware fetches the public feed, not your device. Nothing about you is sent.News
• Google NewsOnly if you set keyword topics: the topic words go in a search.News
• Model providers' pagesAnthropic, OpenAI, Google, AWS, Microsoft, Mistral and xAI publish when models leave. We read their public pages. Nothing about you is sent.Models
• Services you add a key forOnly if you choose. NewsData, YouTube and X get the topic words or accounts your agent asks about. Finnhub and FRED get stock symbols. OpenWeatherMap gets coordinates. Each request carries your own key.Your key

The app you connect, such as Claude or ChatGPT, is run by someone else. What it does with the brief Aware sends is covered by that app's own policy. The person who runs Aware can see an account list (a masked email, how you signed in, when you joined and last looked, your home place's name and how many sources are on) to keep the service running.

Write to us.

About your data, or anything on this page: mary@codependentai.co.

If this page changes what Aware keeps or does, the changelog says so. See also the terms.