Privacy
The short version. We collect what you tell us when you apply, what you tell our application buddy, and what Stripe needs to take payment. No sale of your data, no cookies, no analytics. Your buddy runs on your own machine; its memory is yours.
What we collect, at each moment
1 · When you apply here. The form asks your name (optional), your email (required), and one line on what you know. Our server also records the time and your browser's user-agent string. It does not record your IP address. That is the whole record. Cloudflare stores it; a copy is emailed to jonah@radicalsimplicity.ai so a person reads it.
2 · When you talk to the application buddy. If we send you a private link, the conversation is kept: what you want to build, facts about your business, your contact details, anything else you type or say. It is a working record for deciding whether we can help — not published, not sold, not training data.
3 · When you pay. Before Stripe's page we show the price, your first charge date, that it renews until you cancel, and how to cancel; you tick two boxes — renewal terms, and licence and acceptable use. We record that you ticked them, with your name, email, the time, your IP address, your user-agent string, the terms version on screen, the charge date shown, and the share link you arrived on, if any. That proves we told you the price before you paid; it is the only place on this site we record an IP address. The payment runs on Stripe's hosted page: we never see or hold your card number. Stripe returns your email, the amounts, the dates and a reference.
4 · When your buddy is installed. It runs on your machine. The conversations, the memory, your files and its work are yours (Licence §4.2). We do not copy them, and have no channel that would. You sign into your own Anthropic and OpenAI accounts at handover — we never ask for, receive or store those credentials, and you must not give them to us (Licence §5.6). With voice on, audio goes from your machine to Deepgram to become text, under the key on your box.
Why, and on what basis
To answer your application, agree terms, take payment, install and support your buddy, keep tax records, and defend ourselves in a dispute. Where the UK or EU GDPR applies, our bases are Art. 6(1)(b) — steps you asked for before a contract, then the contract; Art. 6(1)(c) — legal obligation, for tax and payment records; Art. 6(1)(f) — our legitimate interest in security, fraud prevention and a record of what was agreed. We do not profile you for marketing, and no decision about you is made by a machine.
Who else touches it
Cloudflare (US, servers worldwide) serves this site, stores applications and routes our mail. Deepgram (US) turns voice into text, if you switch it on. Telegram and Signal carry the messages between us and your buddy. GitHub (Microsoft, US) holds a private backup of your buddy's configuration and memory. Contabo and Hetzner host the machines. Those are all of them, and we will tell you before we add another.
Anthropic, OpenAI and any other model provider are your accounts under your own agreement with them. We are not a party to it, and do not pay for, resell or intermediate it.
How long we keep it
| What | How long |
|---|---|
| Your application and intake conversation | 24 months from our last contact |
| The email your application became | body 180 days, header row 24 months |
| Your ticked-consent record | 3 years, or 1 year after the agreement ends, whichever is later |
| Payment and tax records | as long as tax law requires |
| Your buddy's memory | yours, on your machine, as long as you keep it |
If the licence ends — for any reason, including unpaid invoice or suspension — you have 30 days to export your data, and we help (§9.4, §9.8). We will not hold it hostage.
Your rights, and who to write to
Ask us for a copy of what we hold, a correction, a deletion, an export, or ask us to stop. Write to jonah@radicalsimplicity.ai — it reaches the owner. We answer within 30 days and say what we did. Under the GDPR you may also complain to your national authority; in California the same address serves your CCPA rights. We will not treat you differently for asking.
Cookies, and no sale
This site sets no cookies. No analytics, no advertising tag, no third-party script — checked against the live site on 27 August 2026. Cloudflare reports network errors to itself to keep the site up; those reports carry no name, no email, nothing you typed.
We have never sold, rented or traded personal data, and we do not share it for advertising. If that changed, this page would say so first.
Children, changes, abuse
This is not for anyone under 18, we do not knowingly collect anything about a child, and the Acceptable Use Policy forbids pointing a buddy at children (§2.16). If you think we hold a child's data, tell us and we delete it.
If this notice changes, the date above changes and we keep the old version. To report a buddy being misused, use the abuse address in the Licence — we acknowledge within two business days and a named person, not an AI, reviews it (§9.9).
The agreement itself is at /terms, the full text at /licence, and acceptable use at /acceptable-use.