Privacy Policy

Who is responsible

This Privacy Policy explains how we collect, use and protect personal data when you use Pure (the "Service"): the desktop app, your account and our website withpure.ai.

Pure is operated by Pure - Monteiro Personal AI, a Swiss sole proprietorship (Einzelunternehmen) owned by João Araujo Monteiro, Via da Bos-cha 5, 7513 Silvaplana, Switzerland ("we", "us"). "Pure" is the brand name under which it offers the Service. We are the controller of your personal data under the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU and UK General Data Protection Regulation (GDPR). You can reach us about anything in this policy at [email protected].

Information we collect

Account information: your name, email address and sign-in details (or your Google/Microsoft account identifier, if you sign in that way). Passwords are stored only as a one-way hash.

Conversations and memory: what you say or type to your assistant, its replies, and anything you've asked it to remember, so it can hold a conversation and recall context you've given it.

Voice audio: while you speak to your assistant, your microphone audio is converted to text, and replies are converted to speech. Audio is used only for that and is not stored by us.

Screen and device content: only when you ask for or allow it, the assistant may look at your screen or files, or control your mouse and keyboard, to do what you asked. What it sees is used for that request.

Device and usage information: device identifiers, connection status, feature usage and the Pure Intelligence usage figure shown in the app, used to run the Service and apply plan limits.

Integrations you connect: if you connect another service (for example music, email or calendar), we exchange the minimum information needed for the actions you ask for. The sign-in keys for those services are stored encrypted.

Payment information: paid plans are billed by a payment processor. We never see or store your full card details.

Why we use it and on what basis

To provide the Service you asked for: answering you, remembering what you told it to, carrying out actions you request or approve, and running your account. (GDPR: performance of our contract with you.)

To keep the Service secure and working: preventing abuse, fraud and attacks, fixing faults and applying usage limits. (GDPR: our legitimate interest in a safe, reliable service.)

To understand how our website is used, anonymously (see "Our website" below). (GDPR: our legitimate interest; no cookies, no personal profile.)

To meet legal obligations, for example keeping billing records. (GDPR: legal obligation.)

We do not sell your personal data, we do not use it for advertising, and we do not use your conversations to train artificial intelligence models.

How the assistant processes your requests

Pure is an artificial intelligence system. To produce a reply or carry out an action, the relevant parts of your request are processed by computing infrastructure, including carefully selected service providers that process data only on our instructions and under data-processing agreements. We don't name the specific models or providers we use, as that is confidential to how the Service is built; the categories of recipients and the countries involved are listed below.

AI-generated replies can be wrong or incomplete. See the Terms & Conditions for what this means for anything you rely on or act on.

Who receives data

Hosting and database providers (where the Service runs); providers of speech recognition, speech generation and AI language processing (to understand you and reply); a network and security provider (to deliver the Service quickly and protect it from attacks); a payment processor (for paid plans); and email delivery (for account messages).

All of them are bound by contracts that only allow them to process data for us, to keep it confidential and secure, and (for AI providers) not to train their models on your content. We can give you the current list of provider categories and countries on request.

Services you connect yourself receive what's needed for the actions you ask for, under their own terms and privacy policies.

Authorities, only where the law requires us to, and advisers bound to confidentiality, where needed to protect our rights.

Where your data is processed

Our servers are in Switzerland or the European Union. Some service providers process data in other countries, mainly the United States and other countries of the European Economic Area.

Transfers to countries whose data-protection laws are not recognised as adequate by Switzerland or the EU are protected with the safeguards the law provides, such as the Swiss-U.S. and EU-U.S. Data Privacy Framework for certified recipients, or the standard contractual clauses approved by the European Commission and recognised by the Swiss Federal Data Protection and Information Commissioner.

Data security

We protect your data with strong measures: encrypted connections, encryption of sensitive stored data (such as the sign-in keys of services you connect), strict separation between accounts, limited access and regular updates.

No system is perfectly secure. If a breach puts your rights at high risk, we'll inform you and the authorities as the law requires. Please keep your own sign-in details safe.

How long we keep it

We keep account data, conversations and memory while your account exists. You can delete conversations, clear what the assistant remembers, download your data or delete your account at any time in Account > Privacy.

Deleting your account is final. It permanently erases your profile, assistant settings, conversation history, memory, tasks, schedules, preferences, permissions, connected-service keys, devices and sign-ins from our live systems at once, stops any paid plan so it can never be charged again, removes your customer record at our payment processor, and (where the service allows it) revokes the access you gave to connected services. Encrypted backups are overwritten within 30 days, and nothing is restored from them for you afterwards. We send you an email to confirm it was done.

The only things we keep are records the law requires us to keep, for example invoices and payment records (generally 10 years under Swiss law), and, if needed, a minimal note that an account was deleted, so we can prove we honoured your request. They are used for nothing else.

If you can't sign in, write to [email protected] from the email address of your account and we will delete the account for you, within 30 days.

Security logs are kept for a short time (normally no longer than 30 days) unless needed to investigate an incident.

Your rights

Wherever you live, you can: ask what personal data we hold about you and get a copy in a common format (access and portability); have it corrected; have it deleted; object to or restrict certain processing; and withdraw any consent you gave, at any time, without it affecting what happened before. These rights come from the Swiss FADP, the GDPR and UK GDPR, and similar laws such as the California Consumer Privacy Act (CCPA/CPRA), Brazil's LGPD, Canada's PIPEDA and other US state laws. We give them to everyone, in every country.

We do not sell or share your personal data (as those words are defined in California law), we don't use it for advertising, and we will never treat you worse for using your rights.

Most of this you can do yourself in Account > Privacy: download all your data, clear your conversations or memory, or delete your account. For anything else, write to [email protected]. We'll answer within 30 days (or sooner where the law says so). We may need to confirm your identity first. If someone acts for you, we may ask for proof that they may.

You can also complain to a data-protection authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU/EEA the authority of the country where you live or work, in the UK the Information Commissioner's Office, and elsewhere the authority of your own country or state.

Automated decisions

We don't make decisions about you that have legal or similarly significant effects based solely on automated processing. The assistant's replies and actions are carried out for you, at your request.

Children

Pure is not meant for children. You must be at least 16 to use it. We don't knowingly collect data from anyone younger. If you believe a child has given us personal data, contact us and we'll delete it.

Our website

The app stores some preferences on your device (for example in local storage) so it remembers them between sessions. This isn't used for tracking or advertising.

Our website (withpure.ai) uses no cookies. With your permission, which the website asks for once, it counts your visit anonymously so we can see how the site is used: which pages are viewed, which parts of a page are seen, which buttons are pressed, how long a page is open, whether Pure is downloaded, the referring website, and the general type of device, system, browser and country. To tell visits apart within a single day, we combine your network address and browser with a random value that changes every day and is deleted after two days; your network address itself is never stored, and visits can't be linked across days or back to you.

If you choose "No thanks", or if your browser sends a "Do Not Track" or "Global Privacy Control" signal, nothing about your visit is recorded. If you download Pure, the download is counted only as a number, with nothing about you. Your choice is saved in your own browser (in its local storage, not as a cookie, and never sent to us), and you can change it at any time with "Privacy choices" at the bottom of every page.

Like any website, our network provider briefly processes technical data such as your network address to deliver the pages and protect them from attacks.

Changes to this policy

We may update this policy. If a change matters, we'll tell you in the app before it takes effect. The effective date above shows the current version.

Contact

Pure - Monteiro Personal AI, Via da Bos-cha 5, 7513 Silvaplana, Switzerland. Email: [email protected].