Privacy Policy
Last Updated: March 29, 2025
This Privacy Policy describes how Decompute Inc. (“Decompute”, “we”, “us”, or “our”) collects, uses, and discloses information when you use our agentive macOS application BlackBird (the “App”). The App allows users to create on-device AI agents for various domains (legal, technical, finance, general Q&A, voice memos, meetings, research, etc.) and is designed with privacy in mind. All AI inference and fine-tuning of open-source models occur on your device, ensuring your private data is not transferred to our servers or the cloud. We are committed to protecting your privacy and complying with applicable laws and regulations. By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.
Overview: Decompute’s App is built to minimize data collection. Most of your data stays on your device, and we do not collect personal content or send it to our servers. However, we do collect a limited amount of information for specific purposes, as detailed below:
-
User-Generated Content (On-Device): Any content you input into the App – such as text queries, documents, voice memos, meeting notes, or other data for AI processing – remains on your Mac device. This includes any custom AI model data or fine-tuning data generated through your use of the App. Decompute does not receive, collect, or store this content on our servers. All processing (inference and training) is done locally on your device’s hardware. In short, your questions, files, and AI agent data stay with you.
-
Model and Usage Data (On-Device): Similarly, any machine learning model parameters, embeddings, or usage logs generated by the App are stored locally on your device. We do not collect telemetry of your usage of the AI features. The App may save session information (like conversation history or model improvements) on your device to enable functionality, but this information is not transmitted to Decompute.
-
Location Information (Collected Remotely for Eligibility): The only personal data that Decompute collects and stores on its servers is your general location information (such as your country or region). We collect this at the time of app download or registration to verify that you are in a permitted region (currently the United States or India). This location check is done exclusively to enforce geographic restrictions on the App’s distribution in compliance with U.S. regulations. For example, to adhere to U.S. export control laws and other legal requirements, we must limit where the App can be downloaded or used. If you are outside the U.S. or India, you will not be eligible to use the App. We store your location information on our secure servers only to the extent needed to confirm eligibility and for ongoing compliance record-keeping.
-
Google Account Information (Optional Integration): The App offers an optional integration with Google services (such as syncing with your Google Account for accessing Google Drive files or other Google Workspace data). If you choose to connect your Google account within the App, we will receive certain information from Google with your consent:
-
Google OAuth Profile Data: When you sign into Google through the App, we may obtain basic account information like your Google email address or profile name, which is used to link your account in the App.
-
Google Drive and Services Data: If you grant the App permission, it can access content from your Google services (for example, retrieving a document from your Google Drive that you want an AI agent to analyze). This data retrieval is initiated by you and used only to provide the requested functionality (e.g., loading the document into the App for analysis). We do not store copies of your Google Drive files on our own servers; any accessed data is either stored locally on your device (if you choose to save it) or held temporarily in memory to accomplish the task and then discarded.
-
-
We emphasize that connecting your Google account is entirely optional. If you do not use this feature, the App will not access any of your Google data. If you do choose to integrate Google services, Decompute’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements
-
This means we only use your Google data to provide the features you explicitly request, and we do not use it for any other purpose (such as advertising, profiling, or sharing with third parties beyond the integration). You can revoke the App’s Google permissions at any time via your Google account settings or within the App, as described in the Your Rights section below.
-
No Other Personal Data Collected: We do not collect any other personal identifiers or sensitive personal information from your use of the App. For example, we do not collect your name, email (unless you provide it for support or Google integration as noted), address, phone number, contacts, or payment information through the App’s normal usage. The App does not employ third-party analytics frameworks or tracking cookies that report your usage back to us. Any configuration or preference data you set in the App remains on your device. If we ever need to collect additional data to provide or improve our services, we will update this Privacy Policy and, if necessary, obtain your consent.
-
We use the limited information we collect for the following purposes:
-
To Provide and Improve the App’s Services: Your on-device data (queries, documents, etc.) is used by the App locally to generate AI responses and perform the functions you request. While this data is not sent to us, it is processed on your device to provide you with results. Any remote location data we collect is used to confirm you are authorized to use the App in your region. This ensures we comply with export laws and deliver the service only to approved jurisdictions. We may also use non-identifying, aggregate information (such as the fact of how many users are in a given region, without any personal details) to improve our distribution strategy and ensure the App functions properly for permitted users.
-
To Enforce Geographic Restrictions (Compliance Purposes): As noted, we use your stored location information exclusively to enforce our geographic distribution rules. This may include checking your location at account creation or periodically to prevent unauthorized use from restricted regions. This use is essential for legal compliance with U.S. regulations that govern the export and distribution of certain software and AI technology.
-
To Facilitate Google Services Integration: If you connect your Google account, we use the Google account data solely to provide the features you have enabled. For example, if you ask an AI agent to analyze a file from your Google Drive, the App will use your Google API credentials to fetch that file and process it on your device. We may temporarily cache credentials or file data on your device’s local storage to improve performance (for instance, storing an access token or a recently accessed file so you don’t have to re-download it), but we do not use your Google data for any purpose other than providing you with the requested functionality. We comply with Google’s policies in this usage (see Google Integration section above).
-
To Communicate with You: Generally, the App itself does not require you to create a Decompute account or provide contact information for routine use. However, if you voluntarily contact us for support, provide feedback, or if the App offers an option to sign up for newsletters or updates, we would use your contact information (e.g., email address) only to respond to your inquiries or send such updates with your consent. We do not send unsolicited marketing communications, and we will not use any contact information for marketing unless you explicitly opt-in. You may unsubscribe or opt-out at any time.
-
To Comply with Legal Obligations and Protect Rights: We may use or preserve information as needed to comply with applicable laws, regulations, legal processes, or governmental requests. For instance, if we receive a lawful subpoena or an order relating to a user (e.g., requiring us to confirm whether a user is in an allowed region), we may use stored data (like location records) to respond. Additionally, we will use information as necessary to investigate and enforce our Terms of Service, to detect or prevent fraud, abuse, or security issues, and to protect the rights, property, and safety of Decompute, our users, or others. This could include using location data to prevent access to the App from prohibited jurisdictions or using minimal device identifiers to troubleshoot issues.
-
We do not use personal data for any form of advertising or profiling unrelated to the App’s core functionality. Because nearly all user content stays on your device, Decompute has no access to analyze or monetize your content. Any use of data is narrowly tailored to the purposes above.
-
As described, our App may interact with third-party services only when you choose to enable such integration. In particular, when syncing with Google services:
-
Google API Services User Data Policy Compliance: Decompute adheres to Google’s policies for user data obtained through Google APIs. Our use of information received from Google APIs will comply with Google’s API Services User Data Policy, including the “Limited Use” requirements. “Limited Use” means we will only use the Google data to provide or improve user-facing features in the App (for example, letting you open or save a document from Google Drive within the App interface), and for no other secondary purposes. We do not allow humans (Decompute employees or others) to read your Google data unless you have given us your affirmative permission for a specific purpose (for instance, if you request support that requires our team to review a specific file, and even then, only with your explicit consent). We do not use any data from Google for advertising, nor do we share it with third parties except as needed to provide the service (and never outside the bounds of Google’s policy). This tight control ensures your Google-synced information remains private.
-
Revoking Google Access: You have control over the Google account integration. You may disconnect your Google account from our App at any time. This can typically be done through the App’s settings or through your Google Account’s security settings (under “Third-party apps with account access”). Once disconnected, the App will no longer have access to your Google information. Additionally, you can delete any files that were imported to your device from Google if you no longer want them stored locally. If you have any issues revoking access, please contact us for assistance.
-
Other Third-Party Services: Aside from Google, our App currently does not integrate with other third-party APIs or services that collect personal data. If in the future we introduce additional integrations (for example, syncing with other cloud storage or calendar services), we will update this Privacy Policy accordingly and ensure any such integration meets relevant privacy requirements (including obtaining any necessary user consents). We will always require that any third-party integration used is governed by strong privacy protections similar to those of Google’s Limited Use policy.
By using the Google integration features, you understand that Google’s own Privacy Policy and terms will apply to the data Google receives (e.g., your authentication and any data stored in Google’s cloud). We encourage you to review Google’s Privacy Policy for how Google treats your information. Decompute is not responsible for Google’s services, but we only interact with them in ways you authorize and as described here.
-
As described, our App may interact with third-party services only when you choose to enable such integration. In particular, when syncing with Google services:
-
We do not sell or rent your personal information to third parties. We also do not share your personal data with third parties for their own commercial or marketing purposes. Because our App processes most data on your device, routine use of the App results in virtually no personal data being transmitted to us that could be shared. In the limited circumstances where we do hold data (such as your location for eligibility, or an email address if you contacted us), we disclose it only as described below:
-
Service Providers (Processors): We may use trusted third-party service providers to assist us in operating our business or providing our services. For example, we might use cloud infrastructure providers or data storage services to securely store the limited data we hold (like location information) on our behalf. If we do so, these providers will only access your data for the purposes of performing specific tasks in accordance with our instructions and under obligations equivalent to this Privacy Policy. They are not permitted to use your data for any other purposes. We ensure any service providers implement adequate security measures to protect your information.
-
Legal Compliance and Protection: We may disclose information we have (which, again, is very minimal) when required to do so by law or legal process. This includes responding to lawful requests by public authorities (e.g., a court order, subpoena, or government demand), or to meet national security or law enforcement requirements. We may also disclose information if we believe in good faith that such disclosure is necessary to:
-
Comply with a legal obligation or enforceable governmental request.
-
Protect and defend the rights, safety, or property of Decompute, our users, or the public. This could include investigating potential violations of our Terms of Service, fraud, or security issues.
-
Act in urgent circumstances to protect the personal safety of users of the App or the public.
-
Business Transfers: If Decompute Inc. is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, user information may be transferred as part of that transaction. In such an event, your information would remain subject to the protections of this Privacy Policy (unless you are notified otherwise and consent to any new policy). We will provide notice to users if their personal information is to be transferred and becomes subject to a different privacy policy.
-
With Your Consent: Apart from the situations above, we will only share your personal information with third parties when we have your explicit consent to do so. For example, if in the future we offer an integration with a third-party service that requires sending certain data off-device, we will only do so with your knowledge and permission. You are in control of such decisions. We do not do any sharing by default that would require you to “opt-out”; the default is that your data stays private.
-
No Third-Party Advertising or Analytics Sharing: We do not disclose your information to advertisers or ad networks, and we do not use third-party analytics platforms that collect data about you. You will not receive third-party advertisements within our App based on your personal data, and we do not share your information for advertising purposes.
-
In summary, outside of necessary service providers and legal circumstances, Decompute will not share your personal data with any third party. Your information is yours, and our philosophy and practice is to keep it that way.
-
Data Security: We take the security of your data seriously and implement reasonable and appropriate measures to protect it.
-
Data Security: We take the security of your data seriously and implement reasonable and appropriate measures to protect it.
-
On-Device Security: The sensitive data and AI models processed by the App reside on your device. We rely on you to maintain the security of your device (e.g., by using strong passwords or Touch ID/Face ID, keeping your macOS up to date, and enabling disk encryption such as FileVault on Mac). The App stores data locally in the secure storage of your device; it does not transmit this data over the internet. We design the App to use secure protocols when communicating (for example, when you authorize with Google or when the App checks your location eligibility, those network communications are encrypted via HTTPS/TLS). No other users or Decompute staff have access to the personal content on your device, unless you choose to export or share it.
-
Server Security: The only user information stored on Decompute servers (like location data and possibly minimal account info if any) is protected using industry-standard security practices. We restrict access to this data on a need-to-know basis – only authorized Decompute personnel or contractors (who are bound by strict confidentiality and security obligations) can access it, and only for the purposes outlined in this Policy. We implement administrative, technical, and physical safeguards to protect the limited personal data we hold against unauthorized access, alteration, disclosure, or destruction. For example, our databases are protected by firewalls, encryption, and regular security audits. We also monitor our systems for potential vulnerabilities and attacks, and we will update our safeguards as needed to address new threats.
-
Data in Transit: Whenever our App or backend systems transmit information (such as verifying your location or connecting to Google’s APIs), we use encrypted connections (HTTPS) to prevent eavesdropping. Your Google OAuth tokens and any data fetched from Google are transmitted securely and are not exposed to unauthorized parties.
-
While we strive to protect your information, please note that no system can be 100% secure. The security of data on your own device also depends on your safe use of the App and your device. If you have reason to believe that your interaction with us or the App is no longer secure (for example, if you suspect your device or account has been compromised), please immediately contact us using the information in the Contact Us section below so we can help address the issue.
-
Data Retention: We retain personal information only for as long as necessary to fulfill the purposes for which we collected it, or as required by law. Because our default practice is not to collect most data, the main retention considerations are:
-
On Your Device: Any personal content or data you generate in the App stays on your device until you choose to delete it. You have full control over how long that data is kept. If you wish to remove your queries, documents, or AI model data, you can delete them through the App interface (if such an option exists for specific data) or by uninstalling the App (which should remove its local data storage). We do not have the ability to retrieve or delete on-device data for you. Important: If you want to ensure all local data is removed, you may need to manually delete any files the App created on your device (for example, in its application support folder), as simply discontinuing use will leave data in place on your machine.
-
Location Data (and Eligibility Records): We retain the location information collected for regional eligibility for as long as you are a user of the App and it remains necessary for compliance with our legal obligations. Typically, this means we will keep a record that a user (identified perhaps by a device ID or installation ID) was verified to be in an allowed country. If you cease using the App or request deletion of this data, we will delete or anonymize your location information, except to the extent we are required to retain it for legal compliance. For example, we might need to keep a log of regional checks for a certain period to demonstrate compliance with export regulations or to defend against any legal claims. Once such retention is no longer necessary, we will securely erase the data.
-
Google Integration Data: The App does not store your Google data on our servers. Any tokens or cached data are generally stored on your device. If in some cases a minimal token or identifier is stored on our side (for instance, to facilitate the OAuth process), we will retain it only as long as needed for the integration to function. If you disconnect your Google account, any associated tokens on our servers (if any) will be deleted. Additionally, Google may provide us with an ID to identify your account’s connection to our App; we retain this only as long as your Google integration is active.
-
Contact and Support Information: If you contacted us for support or provided an email for updates, we may retain those communications and your contact details as long as necessary to address your request or provide you with the subscription/service you signed up for. For example, if you emailed us a question, we might keep that email to track support history. You can request that we delete old support emails if desired, unless we need to retain them for legal reasons.
-
Backup and Archival Copies: Due to the nature of computer systems, residual copies of your personal information might temporarily exist in our backups. If we delete your information from our active systems upon request or as per our policy, we will also ensure that, over time, backups are overwritten or rendered inaccessible/use deleted as well. We maintain backup data only for recovery in case of emergencies and protect it with the same security measures.
-
When we no longer have a legitimate business need or legal requirement to retain your personal information, we will securely dispose of it. In all cases, the criteria we use to determine retention periods include the quantity, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, and applicable legal requirements.
-
We believe in user empowerment and comply with applicable U.S. privacy laws that grant you rights over your personal information. Depending on your state of residence (for example, California, Virginia, Colorado, and other states with privacy laws), you may have some or all of the following rights. Decompute extends these rights to all users of the App where feasible, so that you have control over your data:
-
Right to Access / Know: You have the right to request confirmation of whether we are processing your personal information, and to access or receive a copy of the personal information that we hold about you. Because we collect very limited data, this typically means you can ask us to confirm what information we have associated with you (for instance, your country location record, or any contact info you provided). Upon verified request, we will provide you with the information we have, in a portable and readily usable format (to the extent required by law).
-
Right to Correction: You have the right to request that we correct or rectify any inaccurate personal information we hold about you. If you believe the location data we recorded is incorrect (or if, for example, your region eligibility changed due to an error), or if any contact information you gave us is outdated, you may contact us to have it updated. We will honor correction requests as required by law and will inform you when the correction is completed. (Note: For most on-device data, since we do not have it, correction would be done by you directly editing or updating the information on your device.)
-
Right to Deletion: You have the right to request that we delete personal information we have collected from you and retained. As noted, the only substantial personal data we might have is your location eligibility info or any contact info. If you want us to delete the data we store about you on our servers (for example, your location record in our system), you can send us a verified deletion request. Unless we have a specific legal reason to retain that data (such as a requirement to keep records for a certain time), we will delete it and confirm to you once completed. Please be aware that deleting your data with us will not delete data stored on your own device (you must do that yourself, as described above). Also, deletion of your location record may mean that if you attempt to use the App in the future, you might need to re-verify your location or you might lose access if still in a restricted region.
-
Right to Withdraw Consent: In situations where our processing of your personal information relies on your consent, you have the right to withdraw that consent at any time. In practice, this applies to features like the Google account integration or any optional data sharing. For example, if you granted the App access to your Google Drive, you can revoke that access (withdrawing consent for us to use your Google data). You can also withdraw consent for any email communications by unsubscribing from our mailing list, if you had signed up. Withdrawing consent will not affect the lawfulness of any processing we already performed based on your previous consent, but it will prevent any further collection or use of the data in question. Note that if you withdraw consent for necessary data (such as location verification), we may not be able to continue providing you the App’s services, since we cannot legally allow access without that verification.
-
Right to Opt-Out of “Sale” or Sharing of Data: Some U.S. state laws (e.g., California’s CCPA/CPRA) give you the right to opt-out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising. Decompute does not sell your personal information, and we do not share it for targeted advertising purposes. Therefore, we do not conduct any “sale” or “sharing” of personal data as defined by those laws. Because we don’t engage in those practices, there is no need for you to opt out—by default your data is not used in that way. Nonetheless, if you have any concerns or if you would like to double-check, you may contact us at any time regarding this right. We will ensure your preference is noted, and we will confirm that we indeed do not sell or share your data.
-
Right to Non-Discrimination: We will never discriminate against you or deny you any services for exercising your privacy rights. Using your rights under this Privacy Policy will not result in any unfair treatment, such as refusal of service or reduced App functionality, beyond what is a direct consequence of honoring your request. (For example, if you request deletion of your location data, the only “consequence” is that we cannot verify your region and therefore may not be able to allow continued use of the App—this is a function of the service, not a punitive action.) We do not charge different prices or provide different quality of service to individuals who exercise their privacy rights.
Exercising Your Rights: To exercise any of the rights above, please contact us using the information provided in the Contact Us section below. Please clearly describe your request – for example, "I am requesting access to my personal data," or "Please delete my location information." We may need to verify your identity before fulfilling certain requests (for instance, for access or deletion), to ensure that we do not disclose or erase the wrong person’s information. Verification may involve confirming an email address, or if you have some account or identifier with us, confirming details of your interaction with the App.
If you are making a request through an authorized agent (in states where this is permitted, like California), we will require sufficient evidence that the agent has authority to act on your behalf, and we may still ask you to verify your identity directly with us.
We aim to respond to valid requests within the timeframe required by law (e.g., generally within 45 days for California requests, with an extension if necessary which we will communicate to you). There is no fee for making a request, though if requests become excessive or manifestly unfounded, applicable law may allow us to charge a reasonable fee or refuse the request (we will never do so without explaining the reason).
Finally, if you have any issues or concerns with how we handle your requests or your rights, please let us know, and we will do our best to resolve them.
-
Our App and services are not intended for children under 13 years of age. We do not knowingly solicit or collect personal information from children under 13. If you are under 13, you are not permitted to use the App or provide any personal information to us. We instruct that children under 13 should not download or use the App, and should not provide any information to Decompute through any means.
If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete such information from our records. If a parent or legal guardian becomes aware that their child under 13 has provided us with personal information (for example, if a child manages to download the App and the parent discovers location data was collected), please contact us at once. We will work promptly to remove any such data and terminate the child’s access to the App.
We also do not intentionally market the App to anyone under 13. Users between 13 and 18 years old should only use the App under the supervision of a parent or guardian and in accordance with applicable law. By using the App, you represent that you are at least 13 (and, if under 18, that you have appropriate permission from a parent/guardian).
The App is currently only available to users in the United States and India. If you are using the App from one of these countries, be aware that your data (to the limited extent we hold any) will be stored in the United States. Decompute Inc. is a company based in the U.S., and our servers and infrastructure are located in the U.S. We do not transfer your personal data to other countries, except that if you are in India using the App, your data will still be transmitted to and stored in the United States (because our servers are in the U.S.). By using the App, you acknowledge that any data we collect (like your location info or support communications) will be processed and stored in the U.S., which may have different data protection laws than your home country.
We will handle that information in accordance with this Privacy Policy and applicable U.S. law, regardless of your location. If you are an India-based user, please note that by using the App you consent to the transfer of your personal information to the United States for processing. We will ensure that such transfer is lawful (for instance, via your consent, which you provide by using the service and agreeing to this policy). Since we limit availability to the U.S. and India, compliance with other international data regimes (such as GDPR in Europe) is generally not applicable; however, should an international transfer occur or our availability change, we will implement appropriate safeguards as required by applicable laws.
If in the future we offer the App in other jurisdictions, we will update our practices to ensure compliance with those jurisdictions’ privacy requirements.
We may update or modify this Privacy Policy from time to time. If we make material changes, we will notify you by means of an in-app notification or via another appropriate channel (such as posting the updated policy on our website and updating the “Last Updated” date above). Material changes might include expansion of the data we collect or use, or changes in how your rights are handled.
Any changes will become effective on the date the updated policy is posted (or a later effective date if specified). We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices. If you continue to use the App after a Privacy Policy update takes effect, it will signify your acceptance of the revised terms. However, if any change would materially reduce your rights or our obligations under this Policy, we will seek your consent before applying that change to your information, if and as required by law.
If you have any questions, concerns, or comments about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, please contact us:
Decompute Inc.
10080 N Wolfe Rd., Suite SW3270
Cupertino, CA 95014, USA
Email: hi@decompute.run (for privacy inquiries)
Attn: Privacy OfficerWe take your privacy inquiries seriously and will respond as promptly as we can. When you contact us, please provide sufficient detail about your question or concern, and if applicable, information about your interaction with the App (e.g., the email you used to contact support, or the date you tried to verify location), so we can better assist you.
Complaints: If you believe we have not addressed your privacy-related concern in a satisfactory manner, you have the right to complain to a relevant supervisory authority. Since we are a U.S. company, you may choose to contact a U.S. data protection or consumer protection authority. For example, if you are a California resident and have a complaint, you can reach out to the California Attorney General’s office. If you are in another state, your state’s Attorney General or consumer protection office may handle such complaints. While these options are available, we kindly request that you attempt to resolve any issues with us first, by contacting us directly, so that we can work with you to address your concerns.
This Privacy Policy, its subject matter, and Decompute’s related data practices are governed by the laws of the State of Delaware, USA, without regard to conflict of law principles. By using the App or providing us with information, you acknowledge that this Privacy Policy is subject to Delaware law. Any disputes arising under or relating to this Privacy Policy will be handled in accordance with Delaware law and applicable U.S. federal law. In practice, this means that, to the extent any dispute cannot be resolved amicably and leads to legal proceedings, those proceedings will take place under Delaware’s jurisdiction as specified in our Terms of Service.
