Your data, in plain English.

The short version

• Albert runs on your computer. Your files, meeting recordings and passwords are kept there.
• AI models are used to do the work. The words of each task are sent to an AI company to be processed. Which ones, and what they keep, is listed below.
• Personal details are hidden from AI models. Email addresses, phone numbers, card, ID and bank numbers, passwords and keys are swapped for tags on your computer before text is sent.
• Some things are not hidden. Names, pictures, sound, web searches, and files Claude Code opens for itself. Read "What is not hidden" before you rely on this.
• Albert asks before he sends. Emails, posts and messages to other people wait for your yes.
• Or keep the AI at home. Private mode runs Albert's AI on your own computer.

Who keeps what, at a glance

Every company, what it receives, how long it keeps it and whether it trains AI on it, in one table: Where your data goes. None of them claims to own your work.

What stays on your computer

Albert is a desktop app for Mac and Windows. These stay on your machine unless you choose to share them: your code and repositories, meeting recordings and full transcripts, your notes, your saved passwords and API keys, and the emails in a mailbox you connect. By default, your speech is turned into text on your computer too.

"Stays on your computer" means Albert does not upload it whole. When a task needs part of it, that part is sent to an AI model as described below.

Who receives what

• Anthropic (Claude and Claude Code). Conversation with Albert, builds, plans and meeting write-ups. This runs on your own Claude account, under your own agreement with Anthropic, and Anthropic keeps data according to that agreement. On a Claude Pro or Max plan, check that "Help improve Claude" is off in claude.ai → Settings → Privacy if you do not want your chats used for training.
• OpenRouter, and the AI providers it routes to. Albert's helpers: quick answers in meetings, email summaries, reading a shared screen, small decisions and pictures. Albert asks OpenRouter to use only providers that keep nothing (zero data retention) and never train on it, and a request that no such provider can serve is not sent at all. That is why the backup talking voice (used when you have no Gemini key) is off while this is on: Albert answers with his standard voice instead. Providers that train are also switched off on our OpenRouter account. Each company is responsible for keeping to its own policy; we have not audited them.
• Google (Gemini), only if you add your own key. The live voice then runs under your agreement with Google, and what you say to it is sent as sound.
• Microsoft (Edge speech). When Albert speaks, the words of his reply are sent to Microsoft's speech service to be turned into sound. Personal details are replaced first ("the email address").
• Search services and websites. When Albert looks something up, what he searches for goes to the search service you set up, and the pages he opens are fetched from those websites.
• Telegram, only if you connect it. Messages between you and Albert on Telegram pass through Telegram.

How personal details are hidden

Before text is sent to an AI model, Albert finds personal details on your computer and swaps each one for a tag. The AI works with the tags; the real values are put back when the answer arrives, so what you see, and any email Albert sends, has the real details. If Albert cannot hide the details in a request, the request is not sent.

Hidden: email addresses; phone numbers; card numbers and card security codes; South African ID numbers and US social security numbers; IBANs; bank account, passport and tax numbers when they are labelled as such; passwords, PINs and one-time codes; API keys, access tokens and private keys.

Voices and pictures cannot work with tags, so a voice or picture service is told what a detail is ("the email address"), never the detail itself.

What is not hidden

• Names and street addresses, and anything else written in ordinary words, such as a person's health, salary or legal matter.
• Numbers without a label that do not look like a phone, card, ID or bank number, and details written in an unusual way.
• Your computer's user name where it appears in a file path.
• Pictures and sound. A screen or camera you share with Albert, a photo you give him, and what you say to a live voice are sent as they are. Anything visible or audible in them is not hidden.
• Files Claude Code opens for itself. When Albert builds, or Claude Code looks through your project or a document you attach, it reads and writes the files directly. The build task and those files go to Anthropic as they are.
• Web searches and pages Albert opens.
• Services you connect yourself, such as a memory service, a tool server or another app, receive what Albert sends them as it is.
• Two features that run on our servers, not on your computer. When a client chats about a plan you shared with them, and when you ask Albert to draft board jobs from shared meetings, the plan or meeting notes and the client's messages are sent from our servers to an AI model through OpenRouter as they are. These two do not yet hide personal details or ask for zero data retention.
• What Albert sends for you. An email or message you approve is delivered with its real content to the people it is addressed to, through your email or messaging account.

Please keep in mind

• Detection is automatic, and it is not perfect. Albert recognises details by their shape. We test it against many common formats, but an unusual format may be missed. Do not rely on it as your only protection for information you are not allowed to share.
• For work that must never leave your computer, use private mode, and do not ask Albert to build, plan or write up meetings with Claude Code while working on it.
• The protections can be switched off in Settings → Privacy. When one is off, this page does not apply to that part.
• AI answers can be wrong. Check what Albert writes, plans and builds before you rely on it or send it to a client.
• Your agreements with the AI companies matter. What Anthropic, OpenAI and Google may do with your data is set by your own account and their terms, not by Albert.

Albert asks before he sends

When Albert is about to send an email, post online, or message someone on your behalf, the app shows you what he wants to send and to whom. Nothing goes until you press Send, and if nobody answers, it is not sent. It covers the ways Albert sends things that he recognises: email, posts and direct messages on connected services, calendar invites and file shares.

It does not cover: jobs you have scheduled yourself (they run as scheduled), messages Albert sends to you (such as a meeting summary emailed to your own address), or a sending method he does not recognise. Meeting notes are held for your review before they are shared with your team.

Private mode: AI on your own computer

Turn on private mode and Albert's conversation and helpers use an AI model running on your computer (through Ollama, which you install), and any request to an AI on the internet is refused. It is slower and less capable than the cloud, and needs a computer with enough memory (about 3 GB free for the recommended model). While it is on, pictures and screen reading are switched off.

Still online in private mode: Claude Code, for builds, plans and meeting write-ups; Albert's speaking voice; web searches; and anything you send yourself.

What we store in your account

Your account lives on our servers (hosted by Supabase). What is stored there is stored as written, not as tags, so your team sees the real details. We store:

• Your email address, name, team and the people in it.
• On a team plan: planning boards, shared with your team automatically; meeting notes you choose to share after the review; emails and designs you choose to share.
• On a paid plan: a backup of your designs, so they follow your account.
• The board: tasks, who they are assigned to, comments and progress.
• A usage record: what kind of work was done, and its cost where it is metered.
• What you share with a client: the plan, and the designs, progress and screenshots you leave switched on. The client signs in with the email address you invited, and their messages are stored with the plan.

Payments are handled by Paystack on its own page; we do not receive your card number.

Changes and questions

When what Albert sends changes, we update this page and its date. Every protection on this page is on by default and is a switch in the app under Settings → Privacy. Questions, or a request to delete your account data? Write to hello@swiftnextech.com.