Privacy Policy

01Who we are

Locul ("Locul", "we", "our" or "us") is operated by Ertiqah LLC. This policy explains what information we collect when you use the Locul desktop app, your Locul account, the Locul cloud connector and the locul.ai website, how we use it, and the choices you have.

Locul is built to keep your notes on your own computer. Most of what this policy covers is the smaller set of information that reaches our servers when you sign in, use Locul's AI, back up your memories, or connect an AI app.

02What stays on your computer

• Your notes. Your notes, documents and other files stay where they are, in the folders you choose. Locul reads them; it does not upload your folders.
• Your memory database. The memories, entities and search index Locul builds are stored in a Locul folder in your home directory on your computer.
• Your AI keys. If you add your own AI provider key, it is stored on your computer, readable only by your user account.
• Local sources. Sources such as your Notion desktop cache and your Contextli transcripts are read from files on your computer.

03How Locul's AI processes your notes

To turn notes into memories, Locul has to run them through an AI model. You choose where that happens in the app's AI settings:

• Locul's managed AI (the default when you are signed in and have not chosen another option). Locul sends the text of the notes being processed to our servers, which extract memories and compute search embeddings using AI models reached through OpenRouter. The note text we receive for this is deleted from our servers after processing, normally within about two hours.
• Your own key. If you add a key for OpenRouter, OpenAI or Anthropic, the app sends note text directly to that provider under your own account and that provider's terms. It does not pass through our servers.
• Local model. If you choose a local model (Ollama or LM Studio), processing happens on your computer and your note text is not sent anywhere.

We do not use your notes or memories to train AI models.

04Cloud backup of your memories

When you are signed in, Locul backs up your memory brain to your Locul account by default. What is backed up is the brain Locul built, not your files: each memory's text, the title and location of the note it came from, and the entities, relationships and topics you have asked Locul to forget. Our servers compute their own search embeddings for the backed-up memories.

The backup is what powers the Locul cloud connector and lets you recall your memories on other devices. You can switch to local-only mode in the app at any time; in that mode your memories stay on your computer. When you delete a memory in the app, it is also removed from the cloud copy.

05AI apps you connect

You can connect AI apps such as Claude, ChatGPT, Cursor or VS Code to Locul over MCP:

• The desktop MCP server runs on your computer. The AI app reads from your local Locul brain through it, within the tools and folders you allow in Locul's AI access settings.
• The cloud connector at team-api.locul.ai/mcp works only after you sign in and approve the connection. It can read the memories in your cloud brain and save new memories you ask it to. It cannot reach your computer or your files.

Whatever an AI app reads from Locul is then handled by that app's provider under their own privacy policy. To stop access, remove the connector in that app.

06Information we collect

Account information

Your email address, name, a securely hashed password if you set one, and your plan and subscription status. If you sign in with Google, the sign-in is handled by Auth0 and we receive your Google account's email and name. You can also add optional profile details, such as a handle and avatar.

App and device information

When you are signed in, the app periodically sends us basic information so we can support you and keep the service working: a random device identifier, your computer's name, the app version and operating system, your AI and backup settings, how many memories your brain holds, your progress through setup, which kinds of sources you have connected, and in-app usage events. This is sent whether or not cloud backup is on. It does not include the content of your notes.

Billing information

Payments are processed by Stripe, which collects your card and billing details. We receive your subscription status from Stripe and never see or store your full card number.

Dictation

If you use dictation, audio streams directly from the app to Deepgram, our speech-to-text provider, using a short-lived token our servers issue. The audio does not pass through our servers.

Optional profile lookups

If you choose to add your LinkedIn profile during setup, our servers look up its public details through a third-party data provider so Locul can learn about your work.

Support requests

When you contact support, we receive your email, your message, and your app version and platform so we can help.

Website visitors

locul.ai uses Google Analytics to understand visits and sign-ups. It sets analytics cookies and records events such as sign-ups and trial starts. The demo booking page embeds a booking calendar from Lunacal, and some pages embed YouTube videos in privacy-enhanced mode, which load only when you play them.

07How we use information

• To run Locul: sign you in, process notes into memories when you use managed AI, back up and restore your brain, and answer AI apps you have connected.
• To manage your subscription, trial and billing.
• To send account and service emails, such as sign-in and verification codes, password resets, trial and billing notices, and setup tips. These are sent through our own email platform.
• To provide support and fix problems.
• To understand how Locul is used and improve it.
• To keep Locul secure, prevent abuse and meet legal obligations.

We do not sell your personal information, and we do not share your notes or memories with anyone for advertising.

08Service providers

We use a small number of providers to run Locul. They process information only to provide their service to us:

• Hetzner: hosts our servers and database.
• Cloudflare: serves the locul.ai website and app downloads.
• OpenRouter and the AI model providers it routes to: extract memories and compute embeddings when you use managed AI.
• Stripe: payments and billing.
• Auth0: Google sign-in.
• Deepgram: speech-to-text for dictation.
• Google Analytics: website analytics.
• A third-party data provider for optional LinkedIn profile lookups.

We may also disclose information if the law requires it, or as part of a merger or sale of the business, in which case this policy continues to apply to it.

09Security and retention

Connections to our servers are encrypted in transit. Passwords are stored as one-way hashes. Access to production systems is restricted. No system is perfectly secure, but we take reasonable steps to protect your information.

We keep your account and cloud backup for as long as your account exists. Note text sent for managed AI processing is deleted after processing, normally within about two hours. Our database backups are kept for 14 days. When you ask us to delete your account, we delete your account and its cloud data, and the remaining copies expire from backups within 14 days. Memories in local-only mode and the files on your computer are under your control and are never on our servers.

10Your choices and rights

• Keep it local. Use local-only mode and a local AI model, and nothing from your notes leaves your computer.
• Access, correct or delete. Email [email protected] from your account email to get a copy of the information we hold about you, correct it, or delete your account and cloud data.
• Disconnect apps. Remove the Locul connector from any AI app to stop its access.
• Emails. If you would rather not get setup tips, email us and we will stop them. Essential account emails, like sign-in codes and billing notices, are part of the service.

Depending on where you live, including the European Economic Area, the UK and California, you may have further rights, such as data portability or the right to object to or restrict processing, and you can complain to your local data protection authority. We will respond to requests within the time the law requires.

11Children

Locul is not meant for children. You must be at least 18 to create an account, and we do not knowingly collect information from anyone younger. If you believe a child has given us information, contact us and we will delete it.

12Changes and contact

If we change this policy, we will update the date at the top and, for material changes, let you know by email or in the app. Questions about privacy? Email [email protected].