Privacy Policy

MyMe is a personal AI assistant application operated by Anatole Vasco Limited, a private limited company incorporated in England and Wales (company number: 17160433), trading as MyMe. Registered office: 55 Brompton Park Crescent, London, England, SW6 1SW. For the purposes of UK GDPR, Anatole Vasco Limited is the data controller responsible for your personal data.

MyMe is registered with the Information Commissioner's Office (ICO) as a data controller.

MyMe is intended for users aged 18 and over. By creating an account, you confirm that you are at least 18 years old. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a user is under 18, we will delete their account and all associated data promptly.

We collect the following categories of personal data:

Account data

• Your name and email address, provided when you create an account
• Your password, stored in encrypted form — we never store passwords in plain text

Content data

• Folder names and folder types you create within MyMe
• Blocks of text you save into folders, including notes you write directly and text saved from conversations
• Conversation history — the messages you send to MyMe and the responses you receive
• Any other content you choose to store within the application

Technical data

• Basic usage data such as login timestamps, necessary for the secure operation of your account
• We currently use privacy-friendly analytics that collect only anonymous, aggregated data about how the service is used. We do not use advertising trackers or third party tracking technologies. If we introduce any new analytics tools that collect personal data, we will update this policy and notify you in advance.
• We use essential cookies to keep you signed in. Any non-essential cookies — for example analytics — are only set with your consent, which you can give or withdraw at any time. See Section 13 for details.

We use your personal data only for the following purposes:

• To create and manage your MyMe account
• To provide the MyMe service — including storing your folders and blocks, running AI conversations, and injecting your saved context into conversations
• To send you transactional emails related to your account, such as password reset emails, via our email provider Resend
• To maintain the security and performance of the service
• To comply with our legal obligations

We do not use your personal data for advertising. We do not sell your data. We do not use your data to train AI models. MyMe is an ad-free product.

Under UK GDPR, we process your personal data on the following legal bases:

• Contract performance — processing your account data and content data is necessary to provide the MyMe service you have signed up for
• Legitimate interests — we process basic technical data to maintain the security and proper functioning of the service
• Legal obligation — we may process data where required to comply with applicable law

To provide the MyMe service, we share data with the following third party providers. Each provider is bound by appropriate data processing terms.

AI model providers

MyMe uses third party AI model providers to generate responses. Depending on your subscription tier, different AI models may be used to power your conversations. All AI providers we work with are bound by appropriate data processing terms and operate on paid commercial tiers that do not use your data to train their AI models.

Full details of our current AI providers are available on request by emailing cardellavince@gmail.com.

Supabase — database and storage

Your account data, folders, blocks, and conversation history are stored in a PostgreSQL database hosted by Supabase. Data is encrypted at rest and in transit. Supabase is compliant with GDPR and SOC 2 Type II standards.

Vercel — hosting and deployment

The MyMe web application is hosted and deployed on Vercel's infrastructure. Vercel processes technical data required to serve the application to your browser.

Resend — transactional email

We use Resend to send transactional emails such as account verification and password reset emails. Resend receives your email address for the sole purpose of delivering these emails.

Stripe — payment processing

Paid subscriptions are processed through Stripe. MyMe does not store your payment card details. All payment data is handled directly by Stripe in accordance with PCI DSS standards.

We do not share your data with any other third parties. We do not sell or rent your data to anyone.

Some of our third party providers process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the relevant data protection authorities, to protect your data to the same standard required under UK GDPR.

We retain your personal data for as long as your account is active. If you delete your account, all your personal data — including your folders, blocks, and conversation history — will be permanently deleted within 30 days.

Accounts that are inactive for an extended period may be subject to deletion. If we plan to delete an inactive account, we will email you in advance so you have the opportunity to keep it active.

We may retain certain minimal data for longer where required by law or for the purpose of resolving disputes.

We take the security of your personal data seriously. The following measures are in place:

• All data is encrypted in transit using HTTPS
• All data is encrypted at rest in Supabase's database infrastructure
• Passwords are stored using industry-standard encryption and are never stored in plain text
• Access to production data is strictly limited

No system is completely secure. If you believe your account has been compromised, please contact us immediately at cardellavince@gmail.com.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your personal data at any time by deleting your account within MyMe
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances
• Right to data portability — you can request your data in a structured, commonly used format by emailing cardellavince@gmail.com
• Right to object — you can object to processing based on legitimate interests
• Rights related to automated decision making — you have the right not to be subject to solely automated decisions that produce significant legal effects on you

To exercise any of these rights, please contact us at cardellavince@gmail.com. We will respond within one month of receiving your request.

MyMe allows you to store notes and context about other people in your life. This data is stored solely for your personal use, is only accessible by you, and is never used commercially or shared with anyone. This is legally equivalent to keeping a personal diary.

You are responsible for ensuring that any data you store about other people is handled appropriately and in line with applicable law. You should not store sensitive personal data about others beyond what is reasonably necessary for your personal use.

When you send a message to MyMe, your message and any folder context you have added to the conversation are sent to a third party AI provider to generate a response. This is necessary to provide the core functionality of the service. The specific AI model used depends on your subscription tier.

Our AI providers do not use data processed through their paid API tiers to train their AI models. MyMe does not use your data to train any AI models.

You should not send sensitive personal data — such as financial account details, medical records, or government identification numbers — through MyMe.

MyMe uses cookies to keep the app working and, only with your consent, to understand how the service is used. When you first visit, a banner lets you Accept all, Reject all, or Customise your choices by category. You can change your mind at any time from "Cookie settings" in the footer or in Settings.

Strictly necessary (always on)

These cookies are required for MyMe to function and cannot be switched off. They are never used for advertising or tracking.

• myme_session — keeps you signed in. Deleted when you log out or it expires (7 days).
• myme_google_oauth — secures the Google sign-in flow. Expires after 10 minutes.
• myme_cookie_consent — remembers your cookie choices. Kept for 12 months.

Analytics (off unless you opt in)

If enabled, analytics help us understand how the service is used in aggregate. We currently use privacy-friendly analytics that are cookieless and do not identify individual users. If we ever introduce analytics that rely on cookies or collect personal data, they will only run if you have switched this category on.

Your consent choice is stored for 12 months, after which — or whenever this policy's cookie categories change — we will ask again.

MyMe is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us at cardellavince@gmail.com and we will delete the account immediately.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this document and, where the changes are significant, notify you by email. Your continued use of MyMe after any changes constitutes your acceptance of the updated policy.

If you have a concern about how we handle your personal data, please contact us first at cardellavince@gmail.com and we will do our best to resolve it.

If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Company: Anatole Vasco Limited, trading as MyMe

Company number: 17160433

Email: cardellavince@gmail.com

Registered office: 55 Brompton Park Crescent, London, England, SW6 1SW