Privacy

Your life stays on your Mac.

Last updated 25 September 2026

Igdrasil is a personal AI that runs on your own Mac. Everything it knows about your life — your chats, memory, projects, calendar and mail — lives there, not with us. This page says exactly what does reach us, and why.

Who we are

Igdrasil ("we") makes the Igdrasil apps and runs its services, from Richmond, Texas. Questions about this policy or your data: privacy@igdrasil.app.

What stays on your devices

• Your conversations, Igdrasil's memory of you, your projects and their records live in a folder on your Mac. We cannot read them and do not receive them.
• Connections you set up — for example Gmail — are authorized by you, and their keys are kept on your Mac. Calendar, reminders and contacts are read on the Mac with the permissions macOS asks you for.
• The iPhone and Apple Watch apps keep a local copy of recent chats and projects so they open fast, and talk to your own Mac.

Your AI provider

Igdrasil thinks with an AI model you choose and sign in to yourself — by default Anthropic's Claude, under your own Claude account; optionally OpenAI Codex or xAI Grok. What you ask Igdrasil, and the parts of your data it needs to answer (for example a calendar entry, an email it is summarizing, or what is on screen when you ask it to use your computer), are sent from your Mac to that provider under your account and that provider's terms and privacy policy. If you turn on location-aware help on your iPhone, your approximate location goes to your Mac and, when relevant, to that provider. We do not see any of it.

What reaches us

Your Igdrasil account (accounts.igdrasil.app), if you create one:

• your email address, and your name if you give it or your sign-in provider shares it;
• how you sign in — Apple, Google, or a one-time email code — and the account identifier Apple or Google gives us (never your password; we ask Google only for your name and email);
• your devices: their names (like "Kitchen Mac"), their kind, a public key each, and when each was added and last active;
• which of your phones are paired with which of your Macs.

We keep sign-in sessions only as one-way fingerprints, and sign-in codes only as keyed hashes that expire in minutes. We do not keep your IP address. We never receive anything about your life through the account.

The relay (relay.igdrasil.app) connects your iPhone to your Mac when you are away from home. What passes through it is end-to-end encrypted between your devices; the relay cannot read it. It keeps an anonymous identifier for your Mac and each paired device, fingerprints of their access keys, when they connected, and your iPhone's push-notification token so it can tell you if your Mac goes quiet. At home, your iPhone talks to your Mac directly.

Sign-in emails. One-time codes are sent from codes@igdrasil.app through Cloudflare. Cloudflare keeps each email's recipient and subject for up to 31 days for delivery analytics; the code itself is only in the message body.

Notifications. Alerts from your Mac to your iPhone are delivered by Apple's push service, which today carries the notification's text. We are moving these to encrypted notifications that only your iPhone can read.

Updates and our websites. The Mac app checks get.igdrasil.app for updates without sending any identifier. Our websites use no cookies, analytics or third-party scripts. Like any website host, Cloudflare sees the address your request comes from.

Who helps us run it

• Cloudflare — hosts the account service and its databases, sends sign-in emails, serves our websites, and sits in front of the relay.
• DigitalOcean — hosts the relay server (in the United States).
• Apple and Google — if you sign in with them; Apple also delivers notifications and the App Store.

We do not sell your data, share it for advertising, or use it to train AI models.

How long we keep it

• Your account and device list: until you delete your account. A device whose sign-ins have all expired (after 180 days unused) drops off.
• Short-lived sign-in material (codes, requests): minutes to days, then swept daily.
• After you delete your account, a random identifier (no email) is kept for 35 days so a restore from backup cannot bring it back; ended pairings for 180 days; our database backups roll over within 30 days.

Your choices

• Delete your account from any signed-in device. This signs out every device and unpairs your phones from your Macs through the account. What is on your Mac stays on your Mac — it is yours to keep or remove.
• Remove a device, including a lost phone, from any other signed-in device.
• A copy of your account data — email us at privacy@igdrasil.app and we will send it. There is no button for this yet.
• Disconnect Gmail or any other connection on your Mac at any time.

Children

Igdrasil accounts are for adults. We do not knowingly create accounts for children under 13.

Changes

If we change what we collect, we will update this page and its date before the change takes effect, and tell you in the app for anything significant.