What stays on your device, and what does not

The short version

• Email text never goes to Quilt's own AI. The app refuses to send it there. Features that read your mail use your own Claude key, or stay off.
• Stored on your devices: your calendar, your meeting notes, Q's memory, and an index of your mail with who wrote, the subject and a short preview. Full messages are fetched from your mail provider when needed.
• Encrypted before it syncs: when your devices sync with each other, the data is encrypted on your device first. Our servers see the kind of item, its size and timing, not content. A short list below says what is not encrypted.
• Sent only when needed: when Q uses a cloud model, the context for that request goes to the model provider. That is a real transfer of text, and we do not hide it.
• Approved by you: Q can draft and propose. It cannot send, pay, post or delete. You press send, and inbox changes apply when you tap.
• One switch turns off all cloud AI: On this device only on iPhone, and Privacy Max on Windows, where it is shown as On this computer.

Cloud models plan. Quilt acts.

Understanding a request takes a language model. By default, Q plans on a Claude model from Anthropic. The model reads the context Q hands it and suggests the next step. Quilt runs that step on your device. The model has no tool to send, pay, post or delete, so it cannot. How it works shows the steps.

For one request, the context can include:

• subjects and short previews of matching mail and chat messages,
• calendar events,
• facts about the people you name,
• notes from meetings that match, including decisions, to-dos and what you wrote,
• the facts Q remembers that apply,
• and whatever Q reads while working on the request, such as a full message it opens.

Q builds this on your device for each request. It does not upload your whole mailbox.

Email text never goes to Quilt's own AI

Every AI call is checked on your device before it is sent. A call that could carry your mail is refused if it would go to Quilt's own AI account, and a new kind of call counts as carrying mail until we decide it does not. The only calls that use Quilt's own AI account carry no mail: the support chat, whose text is cleaned first, and on Windows a short spoken instruction when you use voice commands. Features that read your mail use your own Claude key, which sends the request straight from your device to Anthropic. Without a key, those features stay off.

Which calls can use cloud AI, and who controls it

You choose in Settings, under Q's brain. You can switch at any time. During the alpha, bring your own Claude key to use Hey Q.

If the app cannot read this switch, it counts as on. A phone follows the stricter of its own setting and your computer's. Your morning note is written on your computer unless you turn on cloud writing. Q in the background is off until you turn it on.

Q's memory

Q's memory is stored on your computer and is never uploaded to our servers. That includes the notes about people, topics and decisions that Q builds. In Settings, under Q's brain, What Q remembers lists each fact with where it came from. You can confirm what Q picked up from a message, and make Q forget any fact. When a fact applies to your request, it goes along with that request, like any other context.

Meeting notes

On Windows, Q listens to the call on your computer, and nothing joins it. Before each meeting it asks first. The audio is turned into text on your computer, and the summary, decisions and to-dos are worked out there too, with no cloud model. Notes are kept in the database on your computer. Audio is deleted once the text is saved, unless you choose to keep it. If you later ask Q about a meeting, the notes can go along with that request like other context.

Protecting the data on your computer

Quilt's data on your computer is protected by your Windows sign-in. Quilt does not add a separate lock of its own to it.

We recommend turning on BitLocker device encryption, so the data is also protected if the computer is lost or stolen. In Windows, open Settings, then Privacy & security, then Device encryption. If you do not see it there, your computer may not support it.

What is encrypted before it leaves your device

These are scrambled on your device with a key only your devices hold. Quilt's servers store the scrambled bytes and cannot open them.

• Mail and chat items: sender, subject, a short preview and Slack message text.
• Calendar events: title, place and attendees.
• To-dos, your morning brief, Today pages and drafts.
• People: names, email addresses, phone numbers, addresses, birthdays, organization and title.
• Your sign-in keys for connected accounts such as Google, Microsoft and Slack.
• How you told Q to sort your mail, in your own words, and what was decided for each message.
• Your master key, locked by your passphrase and your recovery key.

Even encrypted items show our servers a few facts: the kind of item, an ID, its size and when it was sent. IDs can include a mail provider's own message ID, a Slack channel ID or the day of a Today page. In app versions from October 2026 on they never include a name or an email address. Older test builds named a sign-in key after the connected email address. Those builds are being phased out.

What Quilt's servers can read

• Your account email, so you can sign in.
• The accounts you connected, if you use an older test build. Test builds from before October 2026 tell our server which accounts you connected, including the email address, so they can show the list. App versions from October 2026 on keep that list on your device and send nothing. We are phasing the older builds out and will delete these addresses from our server.
• Your email and invite code for billing, and your plan.
• Your device name, shown in your list of linked devices. The phone sends only its model, such as iPhone. The computer sends Quilt on Windows or Quilt on Mac unless you type another name.
• Your phone's notification address, so the server can send a short note such as You have 3 things due. It has no names or message text.
• What you type into support chat or the Something's off form. Something's off removes names, addresses and links first, as well as it can.
• Your waitlist or invite email, if you gave us one.
• Daily usage counts for the support chat.
• Crash and usage diagnostics only if you turn them on in Settings, under Privacy. They exclude message content, and Privacy Max keeps them off.

What passes through Quilt's servers and is not kept

• Sign-in codes when you connect Google, Microsoft, Slack, Notion, LinkedIn or Meta. Quilt's server adds its client secret to finish the connection. It keeps a short log with no content.
• Dictated voice commands, up to 500 characters, go to Quilt's AI account (Anthropic) to become a command. Privacy Max blocks this.
• Support chat questions are answered by Quilt's AI account (Anthropic).
• The remote tool connection, only if you turn it on for another AI app. That app asks your computer a question and the answer passes through Quilt's server in readable form, in memory. It can include to-dos, people, decisions and Q's memory notes. Quilt keeps only the tool name, the time and the size. It is off by default, and Privacy Max blocks it.
• Your account address when you disconnect an account, so the server can delete any always-on copy of the sign-in. It is used for that and is not stored.

What stays only on your computer or phone

• Q's memory, including facts about people and topics, and the notes about people, topics and decisions. They are not uploaded.
• Meeting notes, person notes on the phone, compose drafts and signatures.
• Your own AI keys and the database on your computer.
• Full messages. They are fetched from your mail provider when needed and never uploaded.
• Phone drafts, summaries and questions, which run on the phone with Apple Intelligence.

Like any website, our hosting providers see visitors' IP addresses. They never see your calendar, names or messages.

What we commit to

What we do not claim

Read the details

The privacy policy is the legal document. We are updating it with counsel so that it matches this page. Questions: hello@joinquilt.app.