Privacy Policy
Last updated October 15, 2026
This policy explains what Iris collects when you use this website and the Iris app, which is in private beta; why; who else handles it; how long it is kept; and what you can do about it. We write it in plain words. If something is unclear, write to us.
Who is responsible
Iris is published by the Iris project (the company is being formed), which decides how the data described here is used. For any question or request about your data, write to iris.app000@gmail.com.
We keep only what Iris needs to work. We do not sell your data, and we do not share it with anyone for advertising.
This website
This website has no cookies, no analytics and no advertising. It stores nothing in your browser. You can read every page without giving anything.
The waitlist
When you join the waitlist, we keep your email address and the computer you use (Mac or Windows). We use them to tell you when there is room for you. You can ask us to remove your address at any time.
Requests with a code
When you enter a code, we keep your email address, your computer, the language of the site you used, the status of your request and, once it is approved, how many times your download link has been used. We use them to review your request, send you a download link and create your Iris account with that email address. To stop people from guessing codes, the number of attempts is limited, including per network address.
Technical logs
Like any website, this one is delivered by servers that receive your IP address and the details of each request. Our host and our database provider keep these logs for a short time, to run and protect their service.
The Iris app
Your account
Your email address, which you use to sign in with a code; your @handle; the name and picture you choose; and your settings. Your profile is private unless you choose to show parts of it.
What you create
Your tasks, projects, notes, files, sessions, widgets and messages are stored so that they are there on each of your computers, and so that the people you choose can see what you share with them. The text of your one-to-one messages is end-to-end encrypted. When you call @iris or ask for reply ideas in a conversation, the messages Iris needs are sent to the model to answer.
In a shared session, the files you drop in and your conversation with Iris are deleted once the last person has left.
Connected services
When you connect a service such as Gmail, Google Calendar, Google Drive or Notion, Iris accesses it with the permission you grant, to show you that information and to answer your questions about it. You can turn a service off for the Brief or a project, and disconnect it at any time; the service’s own privacy terms continue to apply.
Questions to Iris
When you ask Iris something, in the Brief, a session, a project or a conversation, your question and the context needed to answer it are sent to the provider of the model that answers. The answer is stored with your conversation. If you use your own Anthropic key, your requests are made with that key.
We do not use your content to train AI models, and we do not sell your data or use it for advertising.
Health reports and usage data
To keep Iris working, the app always sends a few reports: that it started, how long it took to be ready, that it crashed or failed at a step, or that it reached a limit. These reports carry the app’s version and technical details, never your tasks, messages, files, project names or the text of your errors.
Usage data, such as product events, session times and the names of the apps you use during a session, is sent only if you turn on Share usage data in the app’s privacy settings. It is off by default. Turning it off stops the sending at once and deletes what was collected.
When you use Report a problem, we receive what you write and, if you choose to add it, a screenshot of the Iris window.
Who else handles your data
We rely on a few providers, each only for what it does for Iris:
- Supabase: database, sign-in, file storage and server functions, in the European Union (Ireland).
- Resend: sending the emails from Iris, such as sign-in codes and download links.
- Vercel: hosting of this website.
- Anthropic, OpenAI and Groq: the models that answer your questions to Iris, some of its quick suggestions, and voice.
Some of these providers are based in the United States. Transfers rely on the safeguards they offer, such as the European Commission’s standard contractual clauses.
How long data is kept
- Waitlist entries and code requests: until you ask us to remove them, or until you have an account.
- Download links: they stop working after 14 days or 10 downloads.
- Your account and what you create: as long as your account exists. Deleting your account deletes them.
- Files and Iris conversations of a shared session: until the last person leaves the session.
- Health reports: for the time needed to understand and fix problems.
Your rights
You can ask to see the data we hold about you, correct it, delete it, receive a copy of it, limit its use or object to it. In the app, you can export your account’s data and delete your account from the settings. For anything else, write to iris.app000@gmail.com; we answer within a month.
If you think your data is mishandled, you can also complain to your data protection authority. In France, this is the CNIL.
Iris is not intended for children under 15.
Changes
If we change how Iris uses your data, we update this page and its date. For significant changes, we tell you in the app before they take effect.