Privacy Policy

Equerry is built on a single principle: your memory is yours. This page explains, in plain language, what we collect, what we don't, where it lives, and what control you have over it.

Equerry is operated by Equerry Labs Inc., a Delaware C-Corporation. If you have any questions about this policy, write to support@getequerry.app.

What stays in your iCloud

The content you create in the app — the notes you type, voice memos you record, photos and PDFs you save, and your conversations with Equerry — lives in your iCloud account, on Apple's infrastructure. To make it searchable, the app sends it to our servers: the text of your notes, and your voice memos, photos and PDFs so their text can be read. Recordings, photos and PDF files are processed in memory and never stored on our servers. What we keep is the text, as the searchable excerpts and facts described below. While a note is being processed, its full text also sits in our background job data, normally for under an hour. Your questions and Equerry's answers pass through our servers too, described under "Chat conversations" below.

Email you forward or CC works differently, and we describe it in full below: our email provider keeps each message for 30 days, and we keep its text as searchable excerpts plus a short pointer to it. Your own copy stays in your own mailbox. Your calendar is the other exception, and only if you allow it: Meeting Prep and Morning Brief keep a short, bounded snapshot of your upcoming events on our servers, described below.

Some of your Routines add to your Memory too, and work much like forwarded email: when a Routine keeps its result, the app saves it there as a note, so it syncs to your iCloud and stays until you delete it. Which Routines do that, what the note holds, and what a result can mention, is described in full below.

What we do collect

Account

Your Equerry account is tied to your iCloud account. To recognise you, Apple gives Equerry an identifier that is unique to Equerry — it contains no name or email address, and other apps see a different one. We use it only to recognise your account and never to read anything stored in your iCloud. You can also link your Apple Account with Sign in with Apple, as a second way back in if you ever change iCloud accounts. If you do, we receive a stable identifier from Apple, the email address Apple shares with us (this may be a private relay address you control) and, if you choose to share it on Apple's screen, your name. If iCloud can't be used on your device, you can sign in with Apple instead; an account made that way, or made before Equerry used iCloud to recognise you, is also tied to your iCloud account once iCloud can be used. Without a linked Apple Account, your account has no email address unless you give us one. Otherwise we know your name only if you tell Equerry in the app. Where this page says you sign in, it means any of these ways.

Your time zone

The app sends our servers your device's time zone setting — a region name such as "America/New_York", not your location. It is sent each time you open the app while notifications are allowed, and when you set up a Routine. We keep it with your account and your Routines, and use it so that Routines and notifications, such as the look back at your first month, arrive at the right local time. It is included in your data export and deleted when you delete your account.

Forwarded email content

Each account gets a personal address at mail.getequerry.app. When you forward or CC a message to that address, it arrives at our email provider, Resend. We read the message body, the headers needed to verify delivery, and any attachments, and turn them into the searchable excerpts and facts described below. Resend keeps each message, attachments included, for 30 days after it arrives, and offers no way for us to delete it sooner. Equerry's database never stores the original message. Besides the excerpts and facts, it keeps a short pointer to the message for about 30 days: the subject, a preview of up to 140 characters, and the sender's address and name. The app saves part of that pointer to your iCloud as a note in your Memory, where it syncs like your other notes: the subject as the note's title, the preview as its text, and who sent it — the sender's name if the email carried one, otherwise their email address. The full text loads from our servers each time you open it. If you start a chat about the email, up to five of the facts Equerry remembered from it are saved with that chat in your iCloud, as described under "Chat conversations" below. Attachments are read for their text; we keep no copy of the file, on our servers or in your iCloud. The original stays in your own mailbox, under your control. We keep the list of senders you have approved, including your own address when we have it, so we know whose messages to read. If a message arrives from a sender you haven't approved, we keep only its sender, subject and arrival time while we ask you what to do, and for 30 days after that. If you decline, or don't answer within seven days, we never read it.

Calendar snapshot (only if you allow it)

Meeting Prep and Morning Brief need to know what is on your calendar. Equerry asks for calendar permission only when you save a Routine that needs it, never at sign-in, and everything works without it except those briefs. If you allow it, the app uploads a snapshot of your events from today through the next 14 days (at most 200 events): the event title, start and end time, location, attendee display names, and whether the event is all-day or recurring. We deliberately do not upload event notes, attendee or organizer email addresses, meeting links, attachments, or your calendar names, and a location that is a web link is blanked before it is stored. Each upload replaces the previous snapshot in full, so our servers only ever hold the current two-week window, never a history of your calendar. The snapshot is used for exactly two things: composing your Morning Brief and preparing you for upcoming meetings, which includes sending the relevant events to the AI providers named below as part of that brief. It is not used to extract facts, build a contact list, or for anything else. The brief or the prep it produces is saved to your archive as a note and stays until you delete it, as described under "Routine results" below. You can withdraw calendar permission at any time in iOS Settings → Privacy & Security → Calendars; Equerry then stops uploading, the last snapshot remains until it is replaced or your account is deleted, and you can ask us to clear it sooner at support@getequerry.app. Deleting your account deletes it immediately.

Routine results

When a Routine keeps its result — a Meeting Prep always does; a Morning Brief does unless you turn its Note switch off, and a Watcher does when you turn that switch on — Equerry saves that result to your archive as a note, so you can find it later, ask about it, and keep it as a record. The app saves that note to your iCloud, where it syncs like your other notes: the Routine's name as the note's title, and a preview of up to 140 characters as its text. The full result loads from our servers each time you open it, and is copied into your iCloud only if you start a chat about it or its Routine, as described under "Chat conversations" below. Because a result is written from what you have already given Equerry — your calendar, the email you forward, the notes you save — it can name other people: who is in a meeting, or the sender and subject of an email you forwarded. Deleting the note removes it from your iCloud and from your other devices, and removes the result and everything drawn from it from our servers. A chat you started about it keeps its own copy of the result until you delete that chat. Your Routine itself keeps running, and its next run writes a new note. Separately from that note — and whatever the Note switch says — we keep a short preview of each run's result, up to 140 characters, so your Routines list can show what each Routine last did. Those previews are kept for up to 90 days, and they go when you delete the Routine.

Memory derivatives

To make your content searchable and answerable, we generate text excerpts (chunks), vector embeddings, structured facts (for example: "your dad's cardiologist is Dr. Lee"), and other short text drawn from it, such as questions you might ask about a note. These derivatives live on our servers. Every extracted fact is visible to you in Settings → Your Memory, and you can delete any of them with one tap. If you start a chat about a forwarded email, up to five of its facts are also saved with that chat in your iCloud, and stay there until you delete the chat, even if you have deleted the facts themselves.

Chat conversations

Your conversations with Equerry are stored in your iCloud account, so they appear on all your devices, and you can delete them in the app at any time. Each question you ask is sent to our servers to be answered. After each answer, the question and answer also sit in our background job data, normally for under an hour, while we note facts for your memory.

Our servers also keep a copy of each answer's text for one reason: so the answer can still reach you if you leave the app while it is being written. The copy is deleted as soon as your device confirms it has saved the answer. Without that confirmation, an answer delivered while you were in the app is deleted after at most 1 hour, and any other answer after at most 24 hours. The copy does not include the excerpts the answer quotes from your notes. Deleting the chat on your device deletes the copy. We keep it out of our database exports, and a copy can remain in one of our disk snapshots until that snapshot ages out, within 40 days.

You can also start a chat about a Routine, one of its results, or a forwarded email, with Chat about this or Open in chat. That chat opens with a first message from Equerry about its subject. For a Routine, that is the full text of one of the results it kept — the one you started from, or the latest — or, for a Reminder, what the Reminder says. For a forwarded email, it is up to five of the facts Equerry remembered from it, each up to 280 characters, and never the email's own text. That first message is saved with the chat in your iCloud once you send something in that chat; if you leave without sending anything, nothing is saved. The chat also records which Routine or note it is about, so you can pick it up again on any of your devices. The chat and its first message stay until you delete the chat, even if you have since deleted the note, the facts or the Routine they came from. Each time you ask something in that chat, its first message is sent through our servers to the AI providers named below, as part of the conversation.

Subscription and billing

Apple handles all billing. We never see your credit card number. Our subscription provider, RevenueCat, verifies your purchase with Apple and tells us whether your subscription is active, and when it renews or ends, along with the anonymous transaction identifier needed to honor refunds.

Product analytics (you can turn this off)

The app and our servers record how Equerry is used — for example, that a Routine ran — so we can improve the app and measure our advertising. These records go to Amplitude, our analytics provider. Each record carries a random account identifier, a random analytics identifier for your device, what happened, and details about your device and its settings, such as app version, operating system version, device make and model, language, text size and platform. If you came from an Apple Ads ad, it also says which campaign, ad group and search keyword it was, and whether it was a first download or a re-download. Records also say which of our App Store pages you installed from, when we know it; we keep that with your account too. If you came from another ad that AppsFlyer matched to your download (described under "Ad measurement in the app" below), it says which ad network, campaign, ad set and ad it was, by name and number. Records also include your answer to Apple's tracking question (whether you allowed Equerry to track). Amplitude also receives your device's IP address and uses it to work out your approximate location: city, region, metro area and country. Records never include your notes, emails, chats, files, name or email address. Amplitude does not receive Apple's advertising identifier, and we do not collect your mobile carrier. The analytics identifier for your device is not Apple's advertising identifier or vendor identifier, and it is replaced with a new one when you sign out or delete your account. Analytics sharing is on unless you turn it off in the app under Settings → Privacy → Privacy Choices → Analytics sharing. Turning it off stops new records straight away; records already waiting on your device may still be sent, and if your device can't tell us right away, the records we make for your account stop the next time you open the app. We keep these records at Amplitude for as long as your account exists. When you delete your account, we ask Amplitude to erase them, which it does within 30 days.

Crash reports

When the app or our servers hit an error, a crash or error report goes to Sentry, our error-monitoring provider. We remove your content from these reports. A report can still name the account involved and the item being worked on when the error happened — for example a forwarded email's identifier, and the identifier our email provider gave that message — never what the message said. Sentry keeps each report under its own retention rules. We do not ask it to delete one, and this page does not promise a date by which a report is gone.

Help messages

When you write to us from Help in the app, a person at Equerry reads your message and replies. Before you sign in, the conversation is tied only to the app on your device; once you sign in, it is linked to your account. The person replying sees basic details alongside it, such as your app version and country and, once you are signed in, whether you are subscribed and how far you got in setting up. Replies reach you as notifications, sent through Apple's push notification service. Help messages are never sent to AI providers. A conversation that is not linked to an account is deleted 90 days after its last message; a linked one is deleted when you delete your account; either is gone from our backups within 40 days. You can also ask in the conversation to have it deleted.

Apple Ads attribution

If you downloaded Equerry after tapping an ad on the App Store, Apple can tell us which ad it was. After you sign in, and only once we have your privacy choices, the app asks Apple for a one-time token. The token itself contains no advertising identifier. The app sends the token to RevenueCat and to our server only while Analytics sharing is on and Opt out of ad measurement sharing, in the same Privacy Choices section, is off. If you change either of those — or sign out — while the app is open, our side stops at once, but RevenueCat can still receive the token until the next time you open Equerry. Our server exchanges the token with Apple and stores the campaign, ad group, keyword and ad, where the ad was shown, the country or region, the date you tapped or saw the ad, and whether this was a first download or a re-download. That detailed record is deleted after 180 days. A short summary (campaign, ad group, keyword and date) stays with your account until you delete it. If you didn't come from an Apple ad, Apple tells us only that. Separately, the AppsFlyer measurement code in the app asks Apple for the same kind of token itself, as described next.

Ad measurement in the app (AppsFlyer)

To learn which of our ads bring people to Equerry — on Facebook and Instagram, on the App Store, and elsewhere — the app includes measurement code from AppsFlyer, which works for us as our attribution provider. It never sees your notes, emails, chats, files, name or email address.

• What AppsFlyer receives from the app. Your device's vendor identifier (an identifier Apple gives each app maker for your device), your IP address, the short technical description your device sends with each connection (its user agent), your device model and operating system version, the app version, and when the app was installed and opened. If you allow tracking when Apple asks, it also receives Apple's advertising identifier. The AppsFlyer code also asks Apple for the Apple Ads token described above, so it can tell whether you came from an Apple ad. After you sign in, it receives the random identifier of your Equerry account, so that its records, ours and RevenueCat's refer to the same person. The app also tells it when you finish setting up.
• From RevenueCat. RevenueCat, our subscription provider, tells AppsFlyer when you start a free trial, subscribe, renew, cancel or make a purchase, with the amount paid, using AppsFlyer's identifier for your installation. For this, the app gives RevenueCat that AppsFlyer identifier, your device's vendor identifier, your IP address and, if you allowed tracking, Apple's advertising identifier.
• Before you have an account. The measurement code can start before you sign in: ten minutes into the first time you open the app, or the next time you open it. Before sign-in it sends the device details above and the Apple Ads token, but not Apple's advertising identifier and no account identifier, and it can do so before Apple asks whether Equerry may track you. If you never sign in, you are never asked. Until you have an account there is no switch in the app for this; Apple's tracking setting does not stop it either, because it only covers the advertising identifier. Deleting the app stops it. When you sign in, the record of your installation is linked to your account.
• Apple's own install reports. When you install Equerry after seeing an ad, Apple itself may report the install to the ad network, through its privacy-preserving ad attribution system, and send a copy of that report to AppsFlyer for us. Apple writes these reports; they contain no identifier for you or your device.
• What we keep. AppsFlyer tells our server where your installation came from: the ad network, campaign, ad set and ad, by name and number, and the install time, or that it came from no ad. We keep that detailed record for 180 days; a short summary stays with your account until you delete it. We keep it only while Analytics sharing is on and Opt out of ad measurement sharing is off. Changing either stops new records but does not delete ones already kept. We also keep your answer to Apple's tracking question with your account.
• What goes to Meta. AppsFlyer passes some of this on to Meta, described under "Advertising: what we share with Meta" below.
• Your choices. Apple's tracking question, and later iOS Settings → Privacy & Security → Tracking, decide whether the advertising identifier is used. Once you have an account, Opt out of ad measurement sharing or turning off Analytics sharing (Settings → Privacy → Privacy Choices) stops the AppsFlyer code straight away, and RevenueCat stops passing your subscription events to AppsFlyer shortly after, the next time the app updates it. If you opt out and then sign out, the opt-out stays in force on that device.

Website waitlist (closed)

The waitlist is closed. There is no longer a form on this website, and we collect no email address here at all. While it was open, it kept the email address, the time of joining, the address of the page joined from, any campaign tags in the link (including Meta's click identifier), the country detected from the connection, and the browser type. The only sign-ups it ever received were our own tests. Those records have been deleted, and no launch email was sent.

What this website stores on your device

One cookie of our own, and only once you have answered. Where telling Meta about an App Store tap needs your permission first — the places listed under "Advertising: what we share with Meta" below — this website asks you, and keeps your answer in a single cookie of its own; Do Not Sell or Share My Personal Information, at the bottom of every page, keeps a "no" the same way, wherever you are. The cookie holds your answer and the date you gave it, and nothing else: no identifier of any kind — everyone who gives the same answer on the same day holds exactly the same cookie, so it cannot single you out. It is a preference, not a profile, and no outside consent service is involved. Your answer reaches this website once, when you give it, and comes straight back to your browser as the cookie; after that your browser sends the cookie along with its requests here, as browsers do, and we read it only when you tap an App Store button. We keep no copy of it and no record of who answered, or how. A yes lasts six months and a no thirteen. When it expires, or if you clear this website's cookies in your browser, you are back where you started: where we ask first, nothing is sent until you answer again, and anywhere else a report can be sent again until you say no. You can change your answer at any time with that link or the buttons below. Apart from that one cookie, this website adds nothing of its own to your device. Cloudflare, which serves this website and protects it from attack, may set a cookie of its own to do that — to tell a person from an automated visitor, or to slow down a flood of requests — and may keep short-lived records of the connection. That cookie and those records are Cloudflare's, not ours, and are described under "Who else sees your data" below.

Telling Meta about an App Store tap

Allow Don't allow

How your content is processed

To answer your questions and run your Routines, Equerry sends relevant excerpts of your content to large language model (LLM) vendors. The full breakdown — which vendors, what they see, and what they retain — is on our AI Disclosure page. Briefly:

• Vendors process your content under enterprise terms that prohibit training on your data. Exa, which runs web searches, never receives your stored content; under its own terms it may keep the search queries and web addresses it receives and use them to train its models.
• Vendors retain inference logs for short periods (typically up to 30 days) to detect abuse.
• Equerry retains a debug log of vendor calls for 30 days, then automatically deletes it.

Who else sees your data

We share data only with the parties needed to operate the service, and with Meta for advertising as described in the next section:

• Apple — sign-in, billing, push notifications, CloudKit sync of your iCloud-stored content, Apple Ads attribution, and Apple's own install reports to ad networks.
• Anthropic (Claude models, hosted on Amazon Bedrock) — chat answers, reasoning, and extracting facts from the content you save.
• OpenAI — the text embeddings that make your archive searchable, and a backup model when the primary is unavailable.
• Google (Gemini models) — understanding images and PDFs, and transcribing voice notes.
• Exa — web search for chat answers and Routines, and reading the web pages of links you save. Exa receives the search query or the web address you ask Equerry to read — never your stored content — and under its own terms may keep it and use it to improve and train its models.
• Amazon Web Services — hosts our servers, our database and its encrypted backups, and the Bedrock model infrastructure above.
• RevenueCat — subscription entitlement processing. Receives your subscription state, an anonymous user identifier and, when you allow it, Apple's ad attribution token, which it exchanges with Apple and keeps against your subscription as the campaign, ad group and search keyword you arrived from. While ad measurement is allowed, it also receives AppsFlyer's identifier for your installation, your device's vendor identifier, your IP address and, if you allowed tracking, Apple's advertising identifier, and passes your trial, subscription, renewal, cancellation and purchase events, with the amount paid, to AppsFlyer. If you opt out or delete your account, RevenueCat keeps the device identifiers it has already received (Apple's advertising identifier if you allowed tracking, your device's vendor identifier and your IP address) with the subscription records it holds for billing, because they cannot be removed from those records separately; what stops is the passing of your events to AppsFlyer. Never your content.
• AppsFlyer — ad attribution. Receives the device details, install and app events, account identifier and subscription events described under "Ad measurement in the app", and copies of Apple's install reports; passes some of them to Meta as described below. Never your content.
• Amplitude — product analytics. Receives the usage records described above and keeps them for as long as your account exists; never your content.
• Resend — email infrastructure. Receives the messages you forward to your Equerry address, keeps them for 30 days, and delivers the limited emails listed below.
• Sentry — error monitoring. Receives crash and error reports, which can name the account involved but never your content, and keeps them under its own retention rules.
• Cloudflare — serves this website, carries the app's connections to our servers, and protects both from attack. As the company carrying those connections, Cloudflare handles details such as your IP address and the address of the page you asked for, including any campaign tags in the link you arrived on. To do that work, and to report this website's traffic to us, it may set a cookie of its own in your browser and may keep short-lived records of the connections it carries. We add no analytics script to this site and no visitor identifier of our own.
• Meta — advertising measurement, from this website and, through AppsFlyer, from the app, described below.

Each provider other than Meta and Exa processes your data solely to deliver its function to us, under agreements that require protection equal to or stronger than this policy, and none of them may use your data for their own purposes, including training AI models. Meta and Exa are the exceptions. Meta receives the reports described below — from this website, and from the app through AppsFlyer — as an independent company, and uses them under its own terms. Exa receives only search queries and web addresses, as described above, and under its own terms may keep them and use them to improve and train its models. We never train AI models on what you save.

Advertising: what we share with Meta

We share limited information with Meta so we can measure our Facebook and Instagram ads. There is no Meta pixel or other Meta code on this website or in the app: our website's server sends the website's reports directly, and the app's reports reach Meta through AppsFlyer.

• From the app, through AppsFlyer. AppsFlyer tells Meta when the app is installed and opened, when you finish setting up, and when you start a free trial, subscribe or make a purchase, with the amount paid. With each report it sends whether you allowed tracking and, if you did, Apple's advertising identifier. If you did not allow tracking, or have not been asked yet, it still sends your IP address, your device's vendor identifier and your device's user agent, so Meta can still measure our ads; this also applies before you sign in. It never sends your name, email address, notes, emails or chats. Once you have an account, Opt out of ad measurement sharing or turning off Analytics sharing stops the app's reports straight away, and subscription reports stop shortly after, as described under "Ad measurement in the app". Before you have an account, there is no switch in the app for this (see that section).
• App Store button taps on this website. If you arrive on this website from Meta and tap an App Store button, our server tells Meta about the tap. It sends the click identifier from the ad link, your IP address, your browser type, the page you were on (without anything after "?" in its address), and our label for the ad campaign. It never sends an email address, hashed or otherwise. No report is sent if your browser sends Global Privacy Control — even if you have said yes on this website — if you have said no, if we can't tell where you are, or for ordinary page visits, link previews and automated visitors. None is sent from the European Economic Area, the UK, Switzerland, Gibraltar, Jersey, Guernsey, the Isle of Man, the Faroe Islands, Greenland, Monaco, San Marino, Vatican City, Andorra or Quebec before you have answered: reporting from those places would need your permission first, so we ask first, and send only if you agree. Wherever you are, Do Not Sell or Share My Personal Information at the bottom of every page stops these reports, and is where you change an answer you have given.
• Waitlist signups, while the waitlist was open. The waitlist was built to tell Meta about each new signup, with a scrambled (SHA-256 hashed) form of the email address, the IP address, the browser type, the address of the page and any ad click identifier. The only signups it ever received were our own tests, so every report it sent Meta was about our own test addresses. The waitlist is now closed.

Your choices. In the app, use Opt out of ad measurement sharing in Settings → Privacy → Privacy Choices; it applies to your account and to the device you set it on. On this website, use Do Not Sell or Share My Personal Information at the bottom of any page and choose Don't allow; it applies to the browser you use it in. This website also honors Global Privacy Control automatically, whether or not you use the link and even if you have said yes. You can also write to support@getequerry.app, but we hold no account for a website visitor, so the link and the browser signal are the routes that work without your having to tell us which visit was yours. If you have a Facebook or Instagram account, you can also control how Meta uses information from other businesses for ads: in Meta's Accounts Center, review the setting called "Activity from other businesses".

There are no ads in Equerry: we show none in the app, and nothing you save, send or ask is used to advertise or sell anything to you. We do not sell your data. Apart from these reports to Meta, we do not share your data with advertisers. We have never received a government request for user data; if we ever do, we will resist it within the limits of the law and notify you unless legally prohibited.

Email we send you

Equerry sends only seven categories of email, all from @getequerry.app, and only to an account that has an email address (see "Account" above):

• Subscription expired (transactional)
• Account deletion confirmed (transactional)
• Data export ready (transactional)
• Privacy policy changes — notice before a material change takes effect
• Promotional offer (lifecycle, opt-out)
• Re-engagement after 30 days of inactivity (lifecycle, opt-out)
• Re-engagement after 90 days of inactivity (lifecycle, opt-out)

Apple — not Equerry — sends all subscription-related emails (billing receipts, refund confirmations, renewal notices).

Your rights and controls

• See what's remembered. Settings → Your Memory lists every fact Equerry has extracted from your content.
• Delete any fact. One tap, immediate, no confirmation theater. If the fact was saved with a chat you started about a forwarded email, that copy stays until you delete the chat.
• Delete any note. Removes the note, and every excerpt, fact, search entry and other text made from it. We keep a record that the note was deleted (its identifier and the time, nothing from its content) for 30 days, so your other devices remove it too. For a forwarded email, Resend's copy expires on its own 30-day schedule. A chat you started about the note keeps the result or facts it opened with until you delete that chat.
• Turn off analytics. Settings → Privacy → Privacy Choices → Analytics sharing. New usage records stop straight away, no Apple Ads token is sent to us, and the AppsFlyer measurement code stops (see the next bullet for RevenueCat); records already waiting on your device may still be sent, and if your device can't tell us right away, the records we make for your account stop the next time you open the app.
• Opt out of ad measurement sharing. Settings → Privacy → Privacy Choices. The AppsFlyer measurement code stops straight away, so nothing more goes from the app to AppsFlyer or, through it, to Meta, and no Apple Ads token is sent to us or to RevenueCat. RevenueCat stops passing your subscription events to AppsFlyer shortly after, the next time the app updates it. If you turn it on — or sign out — while the app is open, our side stops at once, but RevenueCat can still receive the Apple Ads token until the next time you open Equerry. An opt-out stays in force on the device after you sign out. Turning off Analytics sharing has the same effect on ad measurement. Before you have an account these switches are not available; see "Ad measurement in the app".
• Tracking. Settings → Privacy → App Tracking shows your answer to Apple's tracking question and opens iOS Settings, where you can change it at any time.
• Export your data. Settings → Account → Request data export. We email you a single file within 30 days, usually much faster. If your account has no email address, message us in the app's Help chat and tell us where to send it.
• Cancel your subscription. Anytime, through Settings → Subscriptions on your iPhone. No retention calls, no forms.
• Delete your account. Settings → Account → Delete account. Your data is deleted from our live database straight away. We keep a scrambled form of your account's iCloud and Apple identifiers, from which neither can be read back, so that a new account made later with the same iCloud or Apple account does not get the free demo again. We also keep the name part of your Equerry email address, so it is never given out again. We ask Amplitude to erase your analytics records, which it does within 30 days. We ask AppsFlyer to erase its records of you, by its identifier for your installation and by your account identifier, and we remove that AppsFlyer identifier from RevenueCat, so no further subscription events are passed on. Forwarded emails stay with Resend until 30 days after they arrived. The debug log of vendor calls described above stops naming your account at once, and its rows age out on their own 30-day schedule. A crash or error report already sent to Sentry stays there under Sentry's retention rules, and can still name the account it came from. Deleting your account also deletes your Equerry notes and chats from your iCloud account, on all your devices as they sync. If you never created an account, write to support@getequerry.app to have AppsFlyer's records of your installation erased.

Backups. We keep encrypted backups of our database so we can recover from failures. When this policy says data is deleted, it is removed from our live database at that time and is gone from our backups within 40 days.

EU and UK users (GDPR)

Our lawful basis for processing your content is contract — we cannot operate the service you have paid for without it. Crash reports, product analytics, Apple Ads attribution and ad measurement in the app — AppsFlyer, the reports it passes to Meta, and the details RevenueCat passes to AppsFlyer — are processed on the basis of legitimate interest, including in the period before you create an account. Once you have an account, you can object at any time by turning off Analytics sharing, or, for ad measurement alone, by turning on Opt out of ad measurement sharing. Before you have an account, you can object by writing to support@getequerry.app or by deleting the app. Apple's advertising identifier is used only if you allow tracking when Apple asks. Telling Meta about an App Store tap on this website rests on your consent: in the European Economic Area, the UK and Switzerland we ask before anything is sent, and send nothing unless you say yes. You can withdraw that consent at any time, as easily as you gave it — Do Not Sell or Share My Personal Information at the bottom of every page, then Don't allow. Reports stop from that moment; withdrawing cannot recall one already sent. You have rights of access, rectification, erasure, restriction, portability, and objection. Write to support@getequerry.app to exercise any of them.

California users (CCPA / CPRA)

Within the last 12 months, the categories of personal information we have collected are described above. We do not sell personal information. We do share limited personal information with Meta for advertising, which California law calls "sharing" for cross-context behavioral advertising. The categories shared are identifiers (from this website, the ad click identifier and your IP address; from the app, your IP address, your device's vendor identifier and, if you allowed tracking, Apple's advertising identifier), commercial information (from the app, that you started a free trial, subscribed or made a purchase, and the amount paid) and internet or other electronic network activity (from this website, your browser type, the page you were on and an App Store button tap; from the app, your device's user agent, that the app was installed and opened, and that you finished setting up), as described in "Advertising: what we share with Meta" above. To opt out of this sharing from the app, turn on Opt out of ad measurement sharing in Settings → Privacy → Privacy Choices; before you have an account, write to support@getequerry.app. To opt out on this website, use Do Not Sell or Share My Personal Information at the bottom of every page and choose Don't allow; it applies to the browser you use it in and lasts thirteen months. This website also honors Global Privacy Control automatically, as an opt-out on its own. You have rights to know, access, delete and correct your personal information, to opt out of sharing, and not to be discriminated against for exercising these rights. Write to support@getequerry.app.

Where it comes from, why, and who receives it. The sections above say where each kind of information comes from — from you, from Apple when you sign in or arrive from one of our ads, from your device through the app's ad measurement code, and from your browser when you visit this website — and what we use it for. "Who else sees your data" is the full list of the companies we disclose personal information to in order to run Equerry; "Advertising: what we share with Meta" covers the one case California treats as sharing for cross-context behavioral advertising.

How long we keep it. We keep your account details and the data described above for as long as your account exists — except where a shorter period is given there, and the scrambled identifiers and inbox name kept after deletion, described under "Delete your account" — and delete them when you delete your account or ask us to; the analytics records are kept on the same basis. Some of it is held by the companies described above on their schedules rather than ours: the reports Meta receives, the crash and error reports Sentry receives, the records Cloudflare keeps of the connections it carries, and the subscription records RevenueCat keeps. AppsFlyer keeps the records it holds for us for no more than 24 months, unless we direct otherwise or the law requires it, and erases them sooner when we ask, as we do when you delete your account. The waitlist records have already been deleted. Anything we delete is gone from our backups within 40 days.

Children

Equerry is for adults aged 18 and over and is not directed at children. Where Apple shares an age range from the Apple Account on your device, the app checks it on the device, and if the range is under 18 the app stops and cannot be used. The age range never leaves your device and we never receive it; the app keeps a note on the device of the result, and if it stops the app, one usage record saying so can go to Amplitude while Analytics sharing is on. Apple offers this only on recent versions of iOS and iPadOS, and only where it applies age checks, so on other devices the app has no age range to check. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, contact us and we will delete it.

International transfers

Equerry is operated from the United States. If you use the service from outside the United States, your data will be processed in the United States and other jurisdictions where our LLM vendors and infrastructure providers operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers from the EU and UK. Amplitude processes analytics in the United States; for data from the EU, UK and Switzerland it relies on its certification under the EU-U.S. Data Privacy Framework, the UK Extension and the Swiss-U.S. Data Privacy Framework, with Standard Contractual Clauses as a fallback. AppsFlyer, our ad attribution provider, is based in Israel and the United States; it processes data as our processor, and its hosting providers are listed in the EU. For transfers from the EU and UK it relies on Standard Contractual Clauses (with the UK Addendum), and AppsFlyer Inc. is certified under the EU-U.S. Data Privacy Framework, the UK Extension and the Swiss-U.S. Data Privacy Framework. The advertising reports described above go to Meta in the United States; Meta receives them as an independent company, not as our processor, and handles them under its own terms.

Security

Server-side content is encrypted at rest and in transit. Your account is recognised through your iCloud account or Sign in with Apple — we never see or store passwords. Our infrastructure follows industry-standard practices for access control, key rotation, and secret management. No system is perfectly secure; this is partly why your original recordings, photos and files stay in your iCloud rather than on our servers.

Changes to this policy

If we materially change how we handle your information, we tell you before the change takes effect: by email if your account has an email address, otherwise on this page. The "Effective" date at the top of this page reflects the most recent revision.

Contact

Equerry Labs Inc.
131 Continental Dr, Suite 305, Newark, DE 19713, United States
support@getequerry.app