Data Controls

Effective date: March 18, 2026. This page explains exactly where data lives, what can leave your device in the current release, and what choices you control.

Default behavior (local-first)

What requires explicit permission

Tin Foil Hat mode

Tin Foil Hat is the current privacy-first mode in the app. When it is on, optional assist calls are blocked and embed-style content is hidden.

Tin Foil Hat is a product control, not a promise of full operating-system or network-level blocking.

AI data boundary

Optional assist is user-triggered. When available and when you explicitly use it, Divergify sends only the minimum text and context needed to respond to that specific request.

If Tin Foil Hat is on, or if assist is unavailable, these flows fall back to local behavior.

Medical and legal boundary

Divergify is a productivity environment, not a medical provider. We do not diagnose, treat, or provide clinical care. The tools can be used by people with or without formal diagnoses.

If we launch regulated healthcare features in the future, we will add the required compliance controls first.

Permissions in the current Android app

Public web inference risk

Public pages can still be indexed and observed at the network or browser level. That means third parties may infer topic interest from visited URLs even when workspace data stays local.

We reduce this risk by avoiding ad trackers and keeping workspace content local by default.

Your controls right now

State-law alignment

Divergify is built to support consent-first handling and local-first minimization across US state privacy frameworks. Where laws differ by state, we aim to apply the stricter operational standard and update controls as requirements evolve.

For legal details, see Privacy Policy and Terms of Service.