Security and AI

Cloud processing

Your audio, text and saved context leave your iPhone. They are processed for speech recognition, AI replies, memory and search. The Privacy Policy and the Service Providers page name every recipient.

Encryption

Connections to our services are encrypted in transit, and Supabase stores our database encrypted at rest. HeadOS is not end-to-end encrypted, because the services that run Cleo must read your content.

Full diagnostic records in the beta

Every conversation is recorded in full in LangSmith for 14 days so that we can find faults and improve Cleo. You agree to this before your first conversation.

Human access restriction

Lasse Kumm is the only person with access to production data. He reads conversation records only when investigating a fault or checking quality. We do not monitor conversations continuously.

Onboarding progress

We save your setup progress, the first time each page was shown and continued, and how often it was visited or left with Back. We use this to see where setup fails. It is not a screen recording, and it is linked to your account.

No training

We do not train AI models with your content. We do change Cleo's written instructions based on what we learn from diagnostic records.

Limits

Cleo is not a human, a therapist, a healthcare provider or an emergency service. HeadOS is for reflection and organisation. It does not diagnose or treat anything. Cleo is instructed to point to help when a conversation sounds like a crisis, but nobody watches your conversations, and Cleo cannot contact anyone. In an emergency, call 112. In Germany, the Telefonseelsorge is available day and night at 0800 111 0 111.

Cleo's tone can feel personal, but generated empathy is not human understanding. A confident answer can still be wrong. You can disagree with, edit or reject any suggestion.

Your control

You can delete individual content in the app and request account deletion under Settings. We get back to you within 24 hours, delete your account within 14 days and confirm by email. Files in your own folder and your own backups need separate deletion.

Security reports

Report a suspected vulnerability to privacy@heados.app with the subject “Security report”. Describe the affected feature and how to reproduce the issue with your own test data. Do not send passwords, access tokens or another person's private content, and do not test against other accounts.

We have no independent security certification. If an incident affects your data, we inform the supervisory authority and you as the law requires.