Privacy Policy

Eigin is built local-first. You own your data. Our goal is to know as little about you as technically possible.

1. Who we are

The data controller is Eigin ApS, CVR 46428765, Denmark. Contact: hello@eigin.ai.

2. Your data stays on your device

Your chats, knowledge, and settings are stored locally on your device. We have no access to them and no copy. The app contains no advertising, tracking, or analytics.

Access to your calendar, location, or microphone goes through the operating system's permission system. That data is used locally and never sent to us.

3. You choose where AI runs

• Local models. Downloaded through the app, run on your device. Inference transmits nothing.
• Your own AI inference provider. With your own API key, requests go directly to that provider. We never see them. Their privacy policy applies.
• The Eigin Relay. Our optional European proxy, described below.

Tools you connect yourself, such as MCP servers, exchange data directly with those services under their own terms.

4. The Eigin Relay

The Relay provides AI inference and web search. It is only contacted when you use it.

• No accounts. Credit wallets are identified by a hash of a purchase transaction, not by you.
• No prompt storage. Prompt and response content is never logged or stored. Only token counts are recorded, for billing.
• Zero data retention upstream. Requests are forwarded to European-owned AI providers: Berget AI (Sweden), Mistral (France), and TensorX (Ireland). None retain your prompts or use them for training.
• Search. Queries are forwarded to Mojeek (United Kingdom) and not stored.
• Abuse prevention. Rate limits apply per IP address and per purchase. IP addresses are processed transiently for this purpose only.

The Relay is hosted with Scaleway in the EU. Our legal basis under the GDPR is the performance of our contract with you and our legitimate interest in operating the service.

5. Google user data (Gmail)

You can connect your Gmail account to Eigin. This is optional. If you never connect Gmail, none of this section applies to you.

What we access

When you connect Gmail, Eigin requests two Google OAuth scopes:

• Read your email (gmail.readonly). Eigin reads your email messages, including their content, headers, and metadata.
• Send email on your behalf (gmail.send). Eigin sends email messages from your account.

Gmail data is fetched by the app on your device, directly from Google's API. It is never stored on Eigin's servers, and we hold no copy of it.

How we use it

Gmail data is used only to provide features you invoke in the app:

• Reading email in chat. When you ask, the assistant reads and searches your email to answer questions and write summaries.
• Drafting and sending email. The assistant composes messages for you. You review a message before it is sent.

We do not use Google user data for advertising. We do not use it to train AI models. We do not sell it. No human at Eigin reads it, and it is never stored on our servers.

How we share it

We do not share, transfer, or disclose Google user data to any third party, with one exception that you control. When you ask the AI about your email, the relevant email content becomes part of your prompt. That prompt goes to the AI inference provider you chose:

• Local models. Nothing leaves your device.
• Your own AI inference provider. The prompt goes directly to that provider under its privacy policy.
• The Eigin Relay. The prompt passes through the Relay under the terms described in the Relay section above.

This transfer happens only when you initiate it. Email is never sent to any AI provider in the background.

How we protect it

• Encryption in transit. All connections to Google's API, to AI providers, and to the Relay use TLS.
• Token storage. Your Google OAuth tokens are stored in your device's Keychain, protected by the operating system. They are never sent to Eigin's servers.
• No server-side storage. Eigin's servers never store your Gmail messages, metadata, or tokens.
• Revoking access. You can disconnect Gmail in the app at any time. You can also revoke Eigin's access from your Google account security settings. Disconnecting removes the tokens from your device.

Limited Use

Eigin's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Purchases

AI credits are bought through Apple in-app purchase. Apple processes the payment under its own privacy policy. We receive only a transaction identifier, whose hash identifies your wallet. Credits do not expire.

7. Diagnostics and website

We run no analytics. During the alpha, Apple's TestFlight may share aggregate crash logs with us, subject to your device settings. We use them only to fix bugs.

eigin.ai sets no cookies and uses no tracking.

8. Retention

Prompts, responses, and search queries are never stored. Billing records are kept as long as Danish bookkeeping law requires, then deleted.

9. Your rights

Under the GDPR you can request access, correction, erasure, restriction, and portability of data we hold. Most of your data lives on your device, where you control it directly.

Relay wallets are pseudonymous, so we may ask for your transaction information to locate any wallet data. Complaints can go to Datatilsynet (datatilsynet.dk).

10. Age requirement

Eigin is for adults. You must be at least 18 years old to use it.

11. Changes

We may update this policy as Eigin evolves. The date at the top reflects the current version.