Privacy

Your account: your name, email address and a securely hashed version of your password. We never store your password itself. If you log in with Google, we receive your name, email address and profile picture from Google, and no password.

What you add: the original text, PDFs and images you add, exactly as you added them, and what our AI understood from them (titles, summaries, actions, dates, events and key details), plus whether you've marked actions as done.

Basic usage: daily counts of how often you use AI features, so we can apply fair-use limits, and technical logs used to fix errors.

Your account and information are stored with Cloudflare, in data centres located in the European Union. Uploaded files are kept in private storage and are only ever shown to you after you log in.

To understand what you add, to answer your search questions and to run the assistant, the relevant content (including what you type to the assistant) is sent to Anthropic, the company that makes the Claude AI models. Anthropic processes it to produce a result and does not use it to train its models. It may keep it for a limited period for safety and abuse monitoring.

AI results are always shown next to your original so you can check them.

If you use “Something's wrong?” to report a mistake, we keep the item's title, what kind of mistake it was and your note, to improve how information is read. The rest of the item stays private.

The assistant can look things up and make changes in your account when you ask it to (for example adding an event or ticking something off). It only ever works with your own information. Your chats with it are saved in your account so you can come back to them; you can delete any chat, and deleting your account deletes them all. Pictures and PDFs you send in a chat are passed to the AI to answer you and are not kept; the chat only remembers their file names.

Voice messages are sent to Cloudflare's speech-to-text service (Workers AI) to be turned into text, which appears in the message box for you to check before sending. The recording itself is not stored.

If you have connected email, the assistant can also search your mailbox when you ask it something, and read an email it finds. That is read-only, like importing, and an email is only saved to Elsewhere when you or the assistant choose to save it.

If you choose to connect Gmail or Outlook (including Microsoft 365), Elsewhere gets read-only access: it can never send, change or delete email. It imports only the emails that match the rule you set (for example, emails from your school), including their PDF and image attachments, and stores them like anything else you add.

If Google's sign-in isn't available to you, you can connect Gmail with an app password that you create in your Google account. Google can't restrict such a password to reading only, but Elsewhere uses it only to read the emails that match your rule. It is stored encrypted, and you can delete it in your Google account at any time.

The access key the email provider gives us is stored encrypted. You can disconnect at any time in Settings, which deletes that key and ends our access. For Gmail we also ask Google to cancel it; for Outlook you can additionally remove Elsewhere from the apps list in your Microsoft account. Emails already imported stay until you delete them.

Elsewhere's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Imported email is used only to provide the features you see, and is not used for advertising or to train AI models.

Elsewhere sends three kinds of email, to the address you signed up with: a link to confirm that address, a link to choose a new password when you ask for one, and, once your address is confirmed, a morning reminder on days when something is due. Reminder emails are not sent if you have phone reminders on, and you can stop them with the link in each one or in Settings.

Emails are delivered by Resend, an email delivery company, which receives your address and the email's contents in order to deliver it. We don't send marketing email and don't track whether you open an email or press a link.

If you connect Teams, Elsewhere reads your class assignments (titles, instructions and due dates) and the names of your classes, and adds new assignments to your homework. It can't see grades, post or submit anything, or read other people's work. The access key is stored encrypted, and disconnecting in Settings deletes it. Homework already added stays until you delete it.

If you create a calendar link to show your events in another calendar app, anyone who has that link can see your events and deadlines. Keep it private. You can replace it or turn it off at any time on the Calendar page.

We don't show advertising, we don't sell your information, and we don't share it with anyone except the service providers above that are needed to run Elsewhere.

We only use the cookies needed to keep you logged in. There are no advertising or tracking cookies.

To see how the app is used and to fix problems, we count page views per page and per day, and record error messages from browsers. These counts contain nothing that identifies you: no cookies, no IP address, no account.

If you turn on reminders, your browser gives us an address at its notification service (Google, Apple, Mozilla or Microsoft) to send a signal to. The signal carries no content: your device then asks Elsewhere for the reminder text directly, so the notification service never sees what is due.

You can delete any item from its page. You can delete your whole account in Settings. This immediately and permanently erases your account, everything you've added, uploaded files and search history. Copies may remain in encrypted backups for a short time before they are overwritten.

Questions about your data: send us a message from Help → Contact us in the app, and we'll reply by email.