Privacy

Not signed in: your conversations are never stored — they exist only in this moment.

Signed in: your conversations and progress are saved to your account so your companion can remember your journey. You can see and delete everything, anytime.

Confessional: flip the seal on any conversation and it works the old way — nothing saved, nothing remembered.

40days.ai is growing — some of what's described below arrives in stages. At every stage, nothing more than what's listed here is ever stored.

What's stored, if you're signed in

Today, two things. Your profile — the handle and display name you chose, your track, season of life, and timezone. And the conversations you choose to save — signed in, a conversation is saved to your account as you have it, unless you flip the Confessional seal. Both live in our Postgres database, scoped to your account — nobody else's access reaches it.

As the Desert 40 challenge and guided prayer arrive, your check-ins and prayer completions will be saved too — under the same promise: visible to you, deletable by you. Your companion will also keep a small memory of your journey — a set of distilled entries drawn from your conversations, not full transcripts — and you'll be able to see and delete every one of those entries yourself.

What's never stored

• Confessional conversations — no row, no metadata, nothing at all, for any account.
• Anonymous (signed-out) conversations — same as always.
• Raw voice audio — in every tier, voice audio is never recorded or stored.

A voice honesty note

Voice sessions run directly between your browser and our voice provider — we don't sit in the middle of the audio stream. When companion memory arrives, signed-in voice sessions will include a digest of your own memory in the instructions handed to that provider, so your companion can speak with the same continuity it has in text. That digest is your own data, going to your own session.

Who processes what

Conversations are processed by xAI (Grok) to generate replies. Account data — your profile today, and the saved conversations, check-ins, and memories described above as they arrive — lives in Supabase (Postgres). We don't run analytics on the content of what you say, and we don't run ads or sell your data.

If you sign in with Apple using "Hide My Email," Apple creates a distinct relay address for you. If you later sign in again with a different email or provider, it may resolve to a separate account rather than the same one.

Your rights

You can delete your whole account, today — Settings → Delete account — which removes everything tied to it in one cascade. That one is irreversible. You can delete any saved conversation, whole and immediately, from your dashboard. As companion memory arrives, every memory entry will be visible and removable one by one.

Questions

Reach Robert at @robertinwriting on X.