eidetic

Eidetic · Legal & privacy

Privacy policy

Your family’s information should come with a clear explanation. Here is what eidetic collects, why it is used, and the choices you have.

Effective October 20, 2026 · Publisher: Brandon Jones

Who we are

Eidetic is a household document-memory app published and operated by Brandon Jones. Contact brandon@paperplanes.digital with privacy questions or requests. This policy covers the eidetic mobile app, its beta versions, and this website.

The app is intended for adult parents and household administrators. Children do not need their own accounts.

Information we handle

  • Account information: your sign-in identifier, name or email supplied by your chosen provider, and authentication/session records.
  • Household information: household details, child names you provide, and your time zone.
  • Photos and records: document photos you select and consent to upload; extracted text, Memory Packets, suggested actions, related-record links, and date/location details.
  • Service records: consent choices and versions, job identifiers, processing states, usage allowances, security/audit records, and calendar confirmation receipts, including destination calendar and event identifiers.
  • Support information: messages and contact details you send when you ask for help.
  • Website operation: the hosting provider may process IP addresses, browser/device metadata, and request logs to deliver and protect the site.

The current beta does not use advertising, advertising identifiers, third-party app analytics integrations, purchases, or push notifications. This website includes no advertising or analytics scripts and sets no application cookies.

Why we use it

We use this information to authenticate you, organize the records you ask us to process, maintain household access controls, generate useful summaries and related-record links, save events you confirm, measure allowances, prevent abuse, troubleshoot failures, respond to requests, and comply with applicable obligations.

We do not sell personal information or use uploaded family documents for advertising. We disclose information to the service providers described below as needed to operate eidetic.

Photo selection and AI processing

This beta uses manual photo selection and does not scan your camera roll in the background. You choose a photo and accept a separate AI-processing disclosure before upload. Sample preview mode does not upload images or create calendar events.

A selected JPEG or PNG is stored in private cloud storage provided by Supabase. OpenAI receives the selected image through a temporary link, household child names, and the household time zone to extract useful details. The extracted result is also sent to OpenAI to create an embedding, a numerical representation used to relate household records.

OpenAI’s API data controls describe its default handling: API data is not used for model training unless the customer opts in; abuse-monitoring logs may retain content for up to 30 days, subject to legal and safety exceptions. Response storage and image safety review can have separate retention rules. We do not promise zero retention by the AI provider.

AI may misread or invent details. Review dates, time zones, names, and locations against the source before acting. Avoid uploading unnecessary sensitive information.

Service providers and sharing

Household records are available to authorized household members. New beta onboarding creates a single-owner household; invitations are not offered in this version. Existing shared households may contain records visible to their members. We may disclose information where required by law, to protect rights and safety, or to service providers supporting those obligations.

Providers may process information outside your country. Processing is subject to the applicable provider arrangements and laws; this policy does not promise that all data stays in one country.

Device permissions and calendar events

Photo access lets you select a document. Calendar access is used when you choose to save a reviewed event to a writable calendar. You can change permissions in your device settings.

Deleting an uploaded source or an account does not delete the original photo from your device. Events already created in your device calendar remain there; remove them in the calendar app if you no longer want them.

Retention and deletion

Account, household, uploaded-photo, and packet records are kept while you use the service, until you delete the relevant records or account. Failed processing, consent, usage, and security records can remain associated with the household while it exists to support retries, allowance enforcement, and security. They are included in household deletion where they are household records. Support correspondence is retained as needed to address the request and relevant legal or security obligations; ask us to remove it when no longer needed.

Deleting a packet or processing-history item revokes that photo’s consent and starts removal of its stored photo and associated packet records. A previously issued read link can remain valid for up to three minutes. A model request already sent cannot be recalled; its result is prevented from recreating deleted records. An outstanding upload token can also outlive a deletion request. Cleanup retries remove late uploads after tokens expire.

Abandoned uploads are eligible for cleanup after 24 hours. Cleanup depends on the service’s scheduled processing and may be delayed by failures. Deletion failures require retry or support rather than an assumption that cleanup is complete.

Deletion from the active service does not immediately erase restricted provider backups, security logs, or data a provider must retain for legal or safety reasons. These copies are subject to the provider’s retention and overwrite practices; we do not currently promise a fixed backup-erasure date or zero-retention processing. Contact us for questions about a specific deletion request.

Your choices and privacy requests

  • Choose whether to upload each photo and accept AI processing.
  • Correct packet details before calendar confirmation.
  • Use packet or processing-history deletion to remove a selected source and its records.
  • Use Privacy & account to export accessible household records as JSON. The export excludes original image files; larger exports may require support.
  • Use Delete account & household after a fresh sign-in, or follow the account-deletion request instructions without reinstalling the app.
  • Email us to request access, correction, deletion, or other rights available under applicable law. We verify identity and household authority before disclosing or deleting data.

Account deletion removes the owner’s household records and can affect every member of an existing shared household. Shared or multiple-household cases require support. We do not ask for your password, family photos, API keys, or image links by email.

Children’s information and security

Eidetic is for adults, not for children to create accounts or use independently. Adults should provide only child information they are authorized to share and that is needed for the requested feature. If you believe a child has created an account or information was provided without authority, contact us so we can investigate and address it.

The service uses authenticated household access controls, private source storage, and encrypted network connections. No service can guarantee absolute security. Keep your sign-in account and device secure, and avoid sending sensitive source documents with support messages.

Changes and contact

We may update this policy as the service changes. The effective date identifies the current version. Material changes to photo processing will be reflected in the app’s disclosure and consent flow where required.

Publisher: Brandon Jones
Privacy and support: brandon@paperplanes.digital