Enck OS

Privacy Policy

Last updated July 31, 2026

Enck OS is a private, owner-gated personal operating system — a single calm place to run your tasks, messages, calendar, and everyday admin. This policy explains what we collect, why, which service providers may receive it, and the choices you have.

Who we are

Enck OS is operated by Dakota Enck (“we”, “us”). The iOS app is a native shell around the Enck OS web product hosted at app.enck.ai.

Information we collect

• Account & contact info — your name and email address, used to create and secure your account. Sign-in uses a passwordless magic link or Google sign-in.
• Your content — the tasks, notes, inbox items, calendar entries, and other content you create or connect inside Enck OS, including mail and calendar metadata and content, finance records, and any device sources you explicitly enable.
• Identifiers — an account/user identifier used to associate your data with your account.
• Billing status — Stripe customer, subscription, price, renewal, and status identifiers used to provide monthly access. Enck OS does not store your full card number.
• Product interaction — basic, aggregated usage such as which features are opened, used to understand and improve the product.
• Diagnostics — crash logs and performance data used to keep the app stable.
• AI inputs and outputs — prompts, search queries, relevant records supplied as context, and generated responses when you use an AI-powered feature.

How we use it

We use your information only to provide and operate Enck OS: to authenticate you, store and sync your content, keep the service reliable, and improve it. Account info, content, identifiers, and product-interaction data are linked to your account. Crash and performance diagnostics are not linked to your identity. Sensitive device sources are off by default and are processed only after you enable the corresponding control.

What we do not do

• We do not sell your personal information.
• We do not use your data for third-party advertising.
• We do not track you across other companies’ apps and websites for advertising or measurement.

Service providers

We use the following processors when the relevant feature is configured or used. They receive only the data needed for that purpose:

• Supabase — authentication, account metadata, and application storage.
• Vercel — application hosting, request processing, and AI Gateway routing.
• Stripe — subscription checkout, payment processing, invoices, and the customer billing portal.
• Composio — connection credentials and mail/calendar requests used to synchronize or act on connected Google and Microsoft accounts.
• Google and Microsoft — sign-in and connected mail/calendar services you choose to authorize.
• OpenAI through Vercel AI Gateway — prompts, queries, and selected context needed to provide AI search, extraction, or operator responses.
• Monarch Money — connected financial records and reconciliation.
• PostHog — limited feature-event and reliability metadata; operator prompt content is not included in the telemetry event.
• Resend, Twilio, Apple Push Notification service, and web-push providers — notification destination and message content when you enable that delivery channel.

These providers may process data in the United States or other countries where they operate. We do not use your content to train an Enck OS model, sell it, or provide it for advertising.

AI processing and controls

AI processing occurs when you use an AI-powered operator, search, extraction, or categorization feature. Enck OS sends the prompt and the minimum selected context needed for that request through Vercel AI Gateway to the configured model provider. Automated proposals remain subject to the product’s review and automation controls; sensitive device sources remain off until enabled. You can avoid AI processing by not using those features and can contact us to request deletion of stored inputs or outputs.

Data retention

We keep application content while your account is active, unless you delete it earlier. Native sign-in exchange credentials expire after five minutes and are deleted when used or by scheduled cleanup. Account deletion removes application content and the authentication account. We may retain a limited operational deletion-block identifier to prevent stale devices or integrations from recreating a deleted account, plus records required for security or legal obligations. Connected providers may retain their own copies under their policies.

Your choices

You can access, correct, export, or delete your information from the Privacy controls or by contacting us. You can disconnect providers and disable device sources independently. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor those requests.

Children

Enck OS is not directed to children under 13, and we do not knowingly collect their personal information.

Changes

If we make material changes to this policy, we will update the date above and, where appropriate, notify you in the app.

Contact

Questions or requests? Email enckeg@gmail.com.