Skip to content
Legal

Privacy Policy

What Linse stores, how it is used and the controls available to you.

Last updated: November 7, 2026

Scope AGI, Inc. (“we”, “our”, “us”), headquartered in Delaware, provides the Linse service. This Privacy Policy explains how we collect, use and store personal information, and how to exercise your rights under applicable law.

Data We Collect

  • Account information (email, username).
  • Conversations and interactions with Linse.
  • Usage analytics (device type, session data).
  • Your messages, for evaluating and improving Linse, unless you turn off “Improve Linse with my data” (on by default once we have told you about it; only what you write after that).

How We Use Your Data

  • To provide and operate Linse.
  • To maintain security and prevent abuse.
  • To comply with legal obligations.

“Improve Linse with my data” (Settings → Data) is on by default. Once we have told you about it — in Linse, or when you sign up — the messages you write from then on may be used to evaluate and improve Linse, including its memory, and to train models. Nothing you wrote before that is used. For that use your messages are processed by the AI providers Linse already uses (listed under Third-Party Services) and reviewed by the Linse team. They are never sold. Never used, whatever the setting: incognito chats, conversations while your memory or learning is off, health and other sensitive topics, clinical (medical) Spaces, Spaces that belong to a business or organization, deleted conversations, and data obtained through Google Workspace APIs. You can turn it off at any time in Settings → Data: from then on your messages are left out of every evaluation and any training; evaluations already done keep what they used. Messages used this way are kept for at most 2 years. Deleting a conversation or your account removes it from every future evaluation and training set. Models already trained are not retrained to remove what they learned before. Notice version 2026-10-23.

Your rights and requests

For access, correction, export or deletion requests, write to privacy@scopeagi.com. We may need to verify account ownership. Requests are handled under applicable law; these product controls do not limit your rights.

Request Access

View all personal data we hold about you.

Request Deletion

Request deletion of your account and personal data, and confirmation of any retention that still applies.

Request Export

Download a copy of your data.

Withdraw Consent

Turn off “Improve Linse with my data” in Settings → Data at any time: your messages are left out of evaluation, improvement and model training from then on.

Data Storage

Conversations, saved memories and uploaded files are separate parts of your data. The controls below explain what you can manage in Linse and when to contact us for help.

Third-Party Services

We may use the following AI model providers depending on the request type and routing decisions:

  • Anthropic (Claude): for code and reasoning requests
  • OpenAI (GPT): for vision, math, and tool-use requests
  • Google (Gemini): for vision, long-context documents, and Workspace integration
  • Groq: for fast text responses
  • Fireworks AI: for reading your messages for facts to remember (memory), and for building web pages and animations
  • Replicate: for drawing images and illustrations, and for making 3D models, including a 3D model from a photo you send
  • Perplexity: for web search and current information queries
  • ElevenLabs: for voice synthesis (text-to-speech) in voice mode
  • Inworld: for voice transcription (speech-to-text) in voice mode and dictation, and for voice synthesis when ElevenLabs is unavailable
  • LiveKit: for telling when you have finished speaking in voice mode, from the audio of your turn

A request can send relevant conversation content or files to the provider that processes it. Processing and retention depend on the service and its applicable terms; completion of a response does not mean that every provider copy is immediately deleted. Contact us for details about a particular service.

We have turned off training on your data with each of these providers: they use it only to provide their service to Linse, with the same protection of your data that this policy describes. The Linse app for iPhone and iPad asks your permission before it sends your data to them.

For cloud infrastructure, we use Amazon Web Services (AWS) and Google Cloud Platform (GCP) for storage, compute and bandwidth. Data may be processed outside your country of residence. Contact us for details about processing locations and safeguards relevant to your use.

Voice & Audio Processing

Linse offers a voice mode where you can speak to Linse directly. When you use voice mode, your audio is processed in real time by the following services:

What happens when you speak

  1. 1.Your audio is transmitted to the voice service for processing.
  2. 2.Audio is sent to Inworld for transcription. When the end of your turn is unclear, the audio of that turn is also sent to LiveKit to tell whether you have finished speaking.
  3. 3.The transcribed text is processed by our AI model providers (per Third-Party Services above) to generate a response.
  4. 4.The response text is converted back to speech by ElevenLabs, or by Inworld when ElevenLabs is unavailable.
  5. 5.The synthesized audio is streamed back to you in real time.

What we do with your voice data

  • Live voice audio is processed in real time rather than saved as a recording in your conversation history. Audio files you upload separately are handled as attachments.
  • Transcribed text becomes part of your conversation history. The conversation and deletion controls below apply to saved transcripts.
  • Voice transmissions are encrypted in transit (TLS).
  • Audio processing by service providers follows their applicable terms and retention settings. Contact us for details about a voice provider.

Voice in sensitive contexts

For users in healthcare, legal, or other professional contexts handling confidential information, we recommend reviewing our HIPAA disclaimer in the Terms of Service before using voice with protected information. Voice mode is not HIPAA-compliant.

Opting out

You can use Linse entirely in text mode without ever activating voice. Voice features are only triggered by your explicit action.

Manage saved memories

When memory is enabled, Linse can extract useful facts from conversations to use across sessions. Open Settings → Data → Memory to review, edit or delete saved memories, or clear them together.

  • Turning memory off disables memory features and new memory extraction. It does not delete existing memories or conversation history. Use the memory deletion controls to remove saved facts.
  • Deleting a conversation and deleting its saved memories are separate actions. Clearing memory does not erase the original messages; deleting a conversation does not clear facts already saved from it.

Conversation history and archiving

Conversations remain in your account until deleted. Archiving only removes a conversation from the active list; it keeps its history. You can find archived sessions in Settings → Data.

  • There is currently no setting to automatically expire conversations after 7, 30 or 90 days. Temporary processing caches can expire without deleting your saved conversation history.

Export a copy

Settings → Data → Export Data downloads a JSON file with non-archived conversations returned by the service and your data-improvement preference.

  • The current export is partial: conversation retrieval is limited to 1,000 messages per conversation, and the memory export can contain up to 200 records with incomplete fields. Archived conversations and the original attachment files are not included.
  • For an access request or a more complete copy, including saved memory content, contact privacy@scopeagi.com. The in-app export is not a complete account backup.

Delete your account

Settings → Data → Delete All Data starts account deletion, including removal of associated personal conversations and saved memories and cancellation of scheduled follow-ups. This action deletes the account, not just its history.

  • If you own an organization with other members, resolve its membership or contact support first. Shared organization content is not erased by deleting one member’s account.
  • Deletion is processed across several systems. Original uploaded files, backups and some operational records can remain after the account is removed. There is no single guaranteed completion period for every copy; contact privacy@scopeagi.com to request removal of remaining files or confirmation of a deletion request.
  • Deleting Linse data does not recall sent emails or remove content already created in a connected service. Manage that content with the provider.

How information is stored

Linse uses separate storage for account information, conversations, saved memories and files. Conversation and Space records are stored in MongoDB; account records and integration credentials in PostgreSQL; saved memories and search records in Elasticsearch; temporary caches in Redis; and files in cloud object storage.

  • A cache expiring is not the same as deleting a conversation, a saved memory or an original file. Integration access tokens are stored encrypted. Storage and processing by service providers are described in the Privacy Policy.

Google User Data

Linse integrates with Google services (Gmail, Google Calendar, Google Drive, Google Contacts) through OAuth to provide features you explicitly authorize. When you connect a Google account, we access only the data covered by the scopes you approve.

What Google User Data We Access

  • Gmail (gmail.send): permission to send emails on your behalf. We do not read, store, or index your inbox.
  • Google Calendar (calendar.readonly, calendar.events): to view and create events when you ask Linse to schedule or check availability.
  • Google Drive (drive.file): limited to files you explicitly select via the Google Picker. We cannot access other files in your Drive.
  • Google Tasks (tasks): to list, create, complete and delete tasks when you ask Linse.
  • Google Contacts (contacts): to find a contact, and to save, change or delete one when you ask Linse.
  • Basic profile (openid, userinfo.email, userinfo.profile): to identify your account.

How We Use Google User Data

Google user data is used solely to provide the features you explicitly request within Linse. We do not use Google user data for advertising, profiling, or any purpose unrelated to the feature you invoked.

With Whom We Share Google User Data

We do not sell, rent, or trade Google user data. We share Google user data only with the following categories of service providers, and only to the minimum extent needed to operate the feature you requested:

  • Cloud infrastructure providers (Amazon Web Services, Google Cloud) for storage and compute needed to operate the requested feature.
  • AI model providers (OpenAI, Anthropic, Google, Groq, Fireworks AI) only when processing a specific user request that requires it, including the step that reads a conversation for facts to remember (memory), subject to the Google user data restrictions below. Provider processing does not imply immediate deletion of every copy.
  • Legal compliance: only if required by valid legal process.

We do not share Google user data with advertisers, data brokers, or any third party for marketing purposes.

AI and Machine Learning Model Training

Linse does not use Google Workspace APIs data to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models, including foundational models.

Google user data obtained through Workspace APIs (Gmail, Google Calendar, Google Drive, Google Contacts) is used only to execute user-facing features you explicitly invoke. It is not retained for model training, is not used to build aggregated datasets for AI/ML research, and is not shared with third parties for those purposes.

Any "Improve Linse with my data" opt-in setting in our product explicitly excludes data obtained through Google Workspace APIs.

How We Protect Google User Data

We protect Google user data, and the other personal data in your account, with these measures:

  • Encryption in transit: Linse is served only over HTTPS (TLS), and our servers reach Google's APIs over TLS.
  • Encrypted access tokens: the tokens that let Linse act on a Google account you connected are encrypted before they are stored (Fernet: AES-128 with an HMAC-SHA256 integrity check). The key is kept in Google Cloud Secret Manager, never in our code.
  • Encryption at rest: our databases and file storage run on cloud providers (Google Cloud, Amazon Web Services) that encrypt the data they store.
  • Access control: every request is authenticated and reads only the data of your own account. Access to production systems is limited to the Scope AGI personnel who operate the service.
  • Logs without content: our logs record that an operation happened and whether it worked, not the text of your messages, emails, events or contacts. Automated tests check this.
  • You approve changes: Linse acts on your Google account only when you ask. Before it deletes an event, a task or a contact, or changes a contact, it shows you the change and waits for your approval.

Limited Use Compliance

Linse's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and Revocation

Google user data is retained only as long as needed to deliver the feature you requested. You can revoke Linse's access at any time at https://myaccount.google.com/permissions, which prevents new access through that authorization. Revoking access does not delete information already saved in your conversations, memories or files. You can request deletion of stored Google user data by emailing privacy@scopeagi.com.

Children

Linse is not intended for children under 13.

Contact