Privacy, in plain language.

Your current status

The latest value of each signal you've turned on, like your place label, whether you're driving, or busy/free, with when it was observed and when it expires. Expired values are deleted automatically.

Precise location

Only if you turn it on. Sharing exact coordinates with anyone is a separate permission that expires after 24 hours by default.

Your account

Your sign-in email, handle, and display name; your connections and permissions; agents you've connected; automations; and push tokens.

The access log

A record of every read of your status by a person or agent: who, which categories, and when. It exists for you.

For weather, the server rounds your location to a shared cell about 10 km wide before asking a weather provider. No account details go with it.

Only what you approve. An invite carries the sharing its sender offered, and the person accepting sees exactly what that is before saying yes. What they share back is their own choice. Every grant names specific categories at a precision you pick: presence only, approximate, or exact. Grants can run on a schedule or expire.

Checked on every read. Permissions are enforced on the server each time someone asks, and values are reduced to the precision you granted. Revoke a grant and the next request no longer sees it.

Health is opt-in, one category at a time. Presets never include health, coordinates, or exact precision.

Go Dark pauses everything your devices sense. They stop sending updates, what's already shared is marked stale, and people and agents see that you're paused, never why or until when. You're never shown as reachable while paused. Things you set by hand, like “open to coffee,” stay visible until you clear them.

The app can send product analytics (PostHog) and crash reports (Sentry). Analytics use an opaque ID and categorical events only, with autocapture and session replay off. Both are scrubbed of signal values, coordinates, health values, email addresses, and credentials before they leave the app.

Deep doesn't use your context for advertising.

Export or delete your account any time in the app under Account → Your data, or in the web app. Deletion is confirmed with a six-digit code sent to your email.

This site sets no cookies, runs no analytics, and loads no third-party scripts or fonts. If you join the waitlist we store one thing, your email address, normalized to lowercase. It isn't linked to an account and is only used to tell you when you can get in.