Privacy Policy
How we collect, use, and protect personal data in the AI knowledge-map service.
Last updated: 2026-11-01
Overview
This Privacy Policy explains how the Service collects, uses, and protects personal data when you use our AI knowledge-map service. By using the Service, you agree to this policy.
Information we collect
- Account information — your name, email address, and profile image provided when you sign in with Google or create an email/password account.
- Content you create — the questions you ask, the maps and concepts generated for you, node details, and any text you submit.
- Usage data — actions such as creating a map, expanding a node, generating a detail, credit balance changes, and basic diagnostic logs.
- Payment data — purchases are processed by Waffo Pancake, our merchant of record. We receive order status, amount, currency, and the email associated with the purchase. We do not receive or store full card numbers.
- Technical data — IP address, browser and device type, and cookies needed for authentication, locale, and security.
How we use information
We use personal data to provide and operate the Service, generate maps and explanations, manage credits and purchases, prevent abuse, troubleshoot errors, comply with legal obligations, and improve the product.
AI processing
To generate a map or a node explanation, your question and the relevant map context (such as node titles and summaries) are sent to a third-party AI model provider. Do not submit sensitive personal, financial, or health information in prompts. We do not use your content to train AI models.
Service providers
We share data only with providers that help us operate the Service, under appropriate safeguards:
- Cloudflare — hosting, CDN, and security.
- Neon — database hosting.
- Google — sign-in with Google.
- Waffo Pancake — payment processing and merchant-of-record services.
- AI model providers — generating maps and explanations.
We do not sell personal data.
Cookies
We use essential cookies for authentication, locale selection, and security. If analytics or marketing cookies are enabled, we ask for consent where required.
Retention
We keep account data and maps while your account is active, and for a reasonable period afterwards where needed for backups, dispute resolution, or legal obligations. You can delete individual maps in the app or request account deletion by emailing support@concepttrail.app.
Your rights
Depending on your location, you may have the right to access, correct, export, or delete personal data, or to object to certain processing. Contact us to exercise these rights. You may also lodge a complaint with your local data-protection authority.
Security
We use encryption in transit, access controls, and least-privilege practices. No internet service is completely secure; please use a strong, unique password and protect your account.
Children
The Service is not intended for children under the age required by local law to consent to data processing. Contact us if you believe a child has provided personal data.
Changes
We may update this policy from time to time. Material changes will be reflected by the date above and, where appropriate, an in-app notice.
Contact
For privacy questions or requests, email us at support@concepttrail.app.