Trust & compliance

Where your data goes, and where it doesn't

Most AI assistants send your words to a US company that keeps them. Alice does not. This page sets out, in plain English, exactly how Alice handles your data — the questions UK and EU buyers ask before they can sign anything off.

Data residency

Hosted in Dorset, answering to UK law

Your prompts never leave the UK

Every model that answers you runs on hardware we own in Dorset, England. There is no US cloud provider, no overseas inference API and no third-party model vendor in the path. Your prompt travels from your browser to our machine and back.

Outside US CLOUD Act reach

Because no US-owned company processes or stores your prompts, there is no US parent that can be compelled under the CLOUD Act to hand them over. Alice is operated by Philip Leach, a UK sole trader, and answers only to UK and EU law.

No onward transfers

We do not ship prompts or replies to any other country, and we use no sub-processor for inference. Payments are handled by Stripe and sign-in by our UK/EU-hosted database — neither ever receives the content of your conversations.

Retention

We do not keep your conversations

Zero prompt retention

Your prompts and Alice's replies are held in memory only for as long as it takes to generate the answer. They are not written to a database, not written to a log file and not kept in a backup.

Never used for training

We do not train, fine-tune, evaluate or improve any model using your conversations. We never sell, share or licence them. No human at Alice reads your chats.

History lives on your device

Your chat history is encrypted with a passphrase only you know (PBKDF2-SHA256 and AES-256-GCM) and stored in your own browser. We could not produce your conversations if we were asked to, because we do not hold them.

What we do hold

Only what an account needs: your email address, your setup preferences, and counts of how many messages you sent each day so plan limits work. Delete your account and those go with it.

Transparency

Honest about what AI can and cannot do

You are talking to a machine

Alice is an AI system, not a person. Every reply is generated by a language model. This is stated in the app as well as here, as EU AI Act transparency rules expect.

AI output can be wrong

Alice can state something confidently and still be mistaken. Check anything that matters — especially legal, medical, financial or safety information — against a reliable source before acting on it.

Keep a human in the loop

Alice is a general-purpose assistant. It is not built or approved for automated decisions about people, such as hiring, credit, benefits, insurance or anything else with a legal or similarly significant effect.

Licensed models, named openly

We run commercially licensed models in-house and tell you which one is answering. Alice and Alice Fast handle general work; Kat Coder is a coding-focused model for Pro and Mega accounts.

GDPR & security

Your rights and our controls

Controller and your rights

Philip Leach, trading from Dorset, UK, is the data controller for your account data. You can access, correct, export or delete it at any time — deleting your account removes it, and clearing your browser removes your chat history.

Lawful basis, plainly

We process your account data to provide the service you asked for, and your payment data to meet our contract and tax obligations. We run no advertising trackers and no profiling.

Safety limits, not surveillance

Requests are checked automatically against safety rules before they reach a model, and per-account rate and daily limits are counted. These checks are automated; they do not involve anyone reading your conversations.

Access is locked down

The machines answering you accept traffic only through an authenticated tunnel, with a fixed list of permitted models, firewalled ports and an API key. Nothing else on our hardware is reachable from the internet.

Need this in writing for procurement?

Our Terms and Privacy pages carry the same commitments as contractual terms, including the seller's legal identity. If your organisation needs a data processing agreement or a completed security questionnaire, ask and we will provide one.

Home · Privacy · Terms · Refunds