Privacy policy.

01Where your data lives

All of your notes, links, images, and collections are stored in an embedded database on your device, encrypted at rest. ReticulOS works fully offline: an internet connection is never required for day-to-day use.

02Analytics and tracking

We never see your content. The ReticulOS app has no analytics scripts, crash reporters or tracking pixels. If anonymous usage statistics are ever added to the app, they will be opt-in and off by default.

This website counts its own visits, so we can tell whether people find it and what brought them. We do it ourselves: no cookies, and no analytics or advertising company is involved. When you open a page, your browser tells our account service which page it was and which site sent you, as just that site's name (such as google or x.com) or the source named in the link you followed. When you click a download button, it says which file. Cloudflare, which carries the connection, tells us which country you're in.

To count each visitor once a day, our service mixes your IP address and your browser's name with a random value made fresh each day, and keeps only the result, in memory. That value and the results are thrown away when the day ends (UTC) and never go into our database or its backups, so they can't be traced back to you or matched to another day. What we keep is daily totals: visitors, pages viewed, where visitors came from, countries and downloads. None of it is linked to your account, even when you're signed in.

If your browser sends Global Privacy Control or Do Not Track, nothing is counted. Blocking it with a tracker blocker is fine too.

The film on the home page is hosted on YouTube. Nothing is loaded from YouTube until you press play. It then plays in YouTube's privacy-enhanced mode, and what YouTube collects while it plays is covered by Google's privacy policy.

03What the app sends, and when

The app connects to the internet only for these things:

• Update checks. About a minute after it starts, and every six hours after that, the app asks download.reticulos.com whether there is a new version. The request carries nothing about you or your notes.
• The search model. Soon after you first save something, the app downloads the model it uses to search your notes from Hugging Face, once. Building and searching that index then happens on your computer.
• Your account. If you sign in, the app talks to our account service to sign you in and check your plan. See Accounts.
• AI answers. Only when you ask for one. See AI features.
• Cloud backup. Only if you turn it on, and always encrypted first. See Cloud backup.
• Links you open. Opening a saved link opens it in your browser, like any other link.

04AI features

ReticulOS searches your notes on your computer. Nothing is sent to an AI model until you ask for something: a question to Ret, a summary of a day, or a form filled from your notes. Then the app sends what that request needs: what you asked, the conversation so far, and the notes it found relevant, including any pictures, PDF pages or video frames among them, and the screenshot of a form if you asked it to read one.

Where it goes depends on the AI you choose in Ret's settings:

• Ret AI (the standard choice, which needs you to sign in): the request goes through our account service to Google's Gemini API. Our service passes it on and keeps none of it. It records only how many answers and how much processing your account used each month, so it can apply your plan's allowance. We use Google's paid service, under which Google doesn't use prompts or responses to improve its products, and keeps them for a limited time only to detect misuse.
• Your ChatGPT plan, if you sign in with ChatGPT: the request goes from your computer straight to OpenAI, under the terms of your ChatGPT plan. It doesn't pass through us, and we never see it. Your ChatGPT sign-in is stored on your computer, encrypted. On this route Ret can also search the web; the searches are run by OpenAI.
• A provider you set up with your own API key (earlier versions offered this): the request goes from your computer to that provider, under your key and its terms.

If you turn on Connect AI apps, which is off by default, AI apps on your computer that you give the access token to can search and read your notes, and can ask to change them; every change waits for you to approve it. What those apps then send to their own AI services is governed by their policies, not ours.

05Accounts

You can use ReticulOS without an account. If you sign in, which you do with your Google account, we keep:

• your email address;
• when your account was created and when you last signed in;
• for each app or browser you’re signed in on, when it signed in and when it was last used, so you can see them on your account page and sign any of them out;
• if you use Ret AI, the number of answers and the amount of processing your account used each month.

We don’t receive your Google password, and signing in doesn’t send us anything you’ve saved in ReticulOS. Signing in on this website sets one cookie, which keeps your browser signed in.

06Purchases

Payments are processed by Dodo Payments, which acts as the merchant of record. Your card details go to them, not to us. We keep the email address you bought with, the plan you bought, the date, and Dodo’s reference for the payment, so that signing in with that address gives you your plan. We keep this record even if you delete your account, because it’s our record that you paid; signing in again with the same address restores your plan. Refunds are covered by our refund policy; a refund is added to the same record.

07Cloud backup

Cloud backup is part of Pro and is off until you turn it on. When you do, the app creates a backup key on your computer and shows you a recovery key, once. Your library is encrypted on your computer with the backup key before anything is uploaded. We store a copy of the backup key locked with your recovery key, which we never receive, so we can't read your backups, and nobody can restore them without your recovery key. If you lose it, your backups can't be recovered by anyone, including us.

A backup holds your whole library, including your files and your vault (which stays locked with your vault password as well). It leaves out the AI search index, which your computer rebuilds after a restore. Backups are stored with Cloudflare. Our service sees only what it needs to manage them: how big each piece is, when it was uploaded, and an identifier for each of your computers. It keeps the latest backup of each of the last seven days and of the last four weeks, and deletes older ones.

You can delete all your backups from the Backup section of your account page in the app, and deleting your account deletes them too. Sync between your computers is planned; this policy will describe it before it ships.

08Export and deletion

Because your data lives on your device, you have complete control over it. You can export your data at any time, or delete the local database to permanently erase all your saved items.

If you have an account, you can delete it from your account page. That removes your account, its AI usage counts and its backups, and signs out every app and browser. The purchase record described above is kept.

09Services we use

The parts of ReticulOS that need a server rely on a few providers:

• Google, to let you sign in, and its Gemini API, which writes Ret AI's answers.
• OpenAI, only if you sign in with ChatGPT.
• Hugging Face, from which the app downloads its search model.
• Amazon Web Services, which runs our account service.
• Cloudflare, which carries connections to our account service, serves downloads and updates, and stores encrypted backups.
• Dodo Payments, to take payments.
• Resend, to send emails about your account and purchases.
• Vercel, which hosts this website.

10Contact us

Have questions about your privacy? Write to contact@reticulos.com or visit Help & Support.