Data Controls
Effective date: March 18, 2026. This page explains exactly where data lives, what can leave your device in the current release, and what choices you control.
Default behavior (local-first)
- Workspace state is stored on your device or browser.
- Divergify does not silently upload tasks, notes, habits, chat history, or settings.
- No ad-tracking cookies or cross-context behavioral advertising.
- No automatic account sync or background backup in this release.
What requires explicit permission
- Submitting the contact or waitlist form on the website.
- Opening third-party links or integrations such as Google Calendar, Waze, email, or external web pages.
- Triggering optional assist in Sidekicks, Magic Tasks, or Lab while Tin Foil Hat is off.
- Exporting local data and choosing to share that file elsewhere.
Tin Foil Hat mode
Tin Foil Hat is the current privacy-first mode in the app. When it is on, optional assist calls are blocked and embed-style content is hidden.
Tin Foil Hat is a product control, not a promise of full operating-system or network-level blocking.
AI data boundary
Optional assist is user-triggered. When available and when you explicitly use it, Divergify sends only the minimum text and context needed to respond to that specific request.
If Tin Foil Hat is on, or if assist is unavailable, these flows fall back to local behavior.
Medical and legal boundary
Divergify is a productivity environment, not a medical provider. We do not diagnose, treat, or provide clinical care. The tools can be used by people with or without formal diagnoses.
If we launch regulated healthcare features in the future, we will add the required compliance controls first.
Permissions in the current Android app
- The current Android manifest requests internet access only.
- This release does not declare microphone, camera, or location permission.
- Exports and external links happen only because you trigger them.
Public web inference risk
Public pages can still be indexed and observed at the network or browser level. That means third parties may infer topic interest from visited URLs even when workspace data stays local.
We reduce this risk by avoiding ad trackers and keeping workspace content local by default.
Your controls right now
- Clear browser or app storage to remove local workspace state and settings.
- Use Shades, Low Stim, Tinfoil Hat, and support check-ins locally in the app.
- Use contact-form consent intentionally before you submit website forms.
- Export JSON only when you want a file outside the app.
- Email privacy requests to chaoscontrol@divergify.app.
State-law alignment
Divergify is built to support consent-first handling and local-first minimization across US state privacy frameworks. Where laws differ by state, we aim to apply the stricter operational standard and update controls as requirements evolve.
For legal details, see Privacy Policy and Terms of Service.