PrausLegal and privacy

Privacy policy

Effective October 29, 2026

Effective Date: October 29, 2026

Praus AI LLC ("Praus," "we," "us," or "our") operates praus.ai and the Praus applications. This policy explains our handling of personal information in our websites, iOS and other applications, chat, Notes Assistant, Deep Research, reports, projects, family and collaboration features, and related support and billing services (the "Services"). Features vary by platform, plan and availability.

This policy covers personal and family accounts and information we handle for our own account administration, security and business operations. Where we process an organization's content on its instructions under a separate agreement, that agreement and any applicable data processing addendum also govern that processing. Contact the organization about its own practices.

At a glance: AI runs on servers, so using Praus is not the same as keeping information only on your device. Information you choose to share can become available to other participants. Temporary Chat is not a promise of anonymous, offline or zero-retention processing. We do not sell personal information or use conversations for advertising. Model-training choices, retention and your rights are explained below.

Questions or requests: support@ortelan.com.

1. Information we collect

Account and family information. Name, email address, authentication identifiers, optional phone number and profile image, account status, plan, preferences, family relationships and invitations, and age information you provide. Sign-in service providers supply the identifiers and profile information needed for the sign-in method you choose.

Content. Prompts, responses, conversation history, notes and edits, research questions and plans, reports and summaries, saved memories, custom instructions, project information, attachments, images, documents, recordings or transcripts you submit, and feedback or support correspondence. Shared content also includes membership and collaboration information needed to provide those features.

Sensitive information. Faith or religious preferences and information you put in your content may reveal religious beliefs, health, finances or other sensitive matters. We process these to provide the features you request and as otherwise described here. Avoid submitting passwords, payment-card details, government identifiers, or another person's sensitive information without authority. The Services are not offered under a HIPAA business associate agreement unless we expressly sign one.

Technical and usage information. IP address, device/browser and operating-system information, timestamps, request and account identifiers, feature use, diagnostics, performance and error information. Approximate location may be inferred from network information. When you enable Use current location and grant device permission, the mobile app can send precise latitude and longitude with your request, for example for weather or local search. Location included in a request may also inform external search queries as described below. Logs and support reports can contain submitted content or contextual information needed to investigate a failure; do not assume they are anonymous.

Billing information. Subscription status, billing identifiers, transaction and invoice information, and payment confirmations. Payment service providers process web payments. We do not store full payment-card numbers. If a purchase is offered through an app store, the store processes that payment and provides relevant purchase information under its own policy.

2. How your information is used

We use information to authenticate you; provide and synchronize chat, notes, projects and reports; retrieve relevant context; apply your settings; process subscriptions; deliver requested communications; investigate errors and abuse; secure accounts; respond to requests; and comply with legal obligations.

Generating a response can require your current input, relevant conversation history, selected note or project content, attachments, saved memories and instructions, and applicable family or content settings. Those features are not separate data silos: when you ask an assistant to work with a note or project, relevant content may be supplied as context.

We also use feedback, diagnostics and service-use information to evaluate and improve reliability, usability and safety, subject to the model-training restrictions below. We may review relevant content to resolve support requests, investigate abuse or security incidents, or comply with law. This is not continuous human monitoring and is not an emergency response service.

3. AI processing, models and web research

Server processing. Praus uses a third-party cloud inference provider for cloud text, image and OCR inference, and our voice processing provider for voice transcription and cloud read-aloud, subject to processing choices and eligibility as described in Section 3a. Our proprietary orchestration applies routing and safety controls across these resources, which include models licensed from other developers. A model's developer is not necessarily the recipient of your prompts. Model inference uses cloud providers unless a feature expressly says processing occurs on your device. Account storage, hosting, payments and other functions still use providers described below.

Search, Deep Research and document retrieval. Praus uses a third-party search and retrieval provider for web search, research, image-related searches and some document processing. Search requests are sent from Praus's servers using Praus's service credentials. We do not attach your Praus account ID or account email address to search requests as separate identifying fields. Our search and retrieval provider receives queries generated from your question and relevant context, which may include prior messages, notes, project or document text, image descriptions, and location when included. This does not make a search anonymous: queries may still contain personal information from the content you provide. It also receives page and document URLs; when it retrieves a document, it can access and process that document's contents. This processing finds sources, retrieves information and extracts text for your answer. Our search and retrieval provider retrieves sources; our cloud inference provider generates the model answer. Following a source link contacts that website under its own practices. Do not include confidential information in research instructions unless you are authorized to have it processed this way.

Cloud media processing. Our cloud inference provider handles eligible image understanding and document reading through its cloud inference routes. Our voice processing provider handles voice transcription and cloud read-aloud. Selected messages, context, image or page bytes and speech text may include identifying or sensitive information. Content is not automatically anonymous or fully redacted. Turning cloud support off blocks future cloud dispatches. Provider handling. Praus does not authorize providers to use your non-public content to train their models. Processing and retention depend on the selected service and its terms; this is not a blanket zero-retention promise. The cloud-support choice applies across your account and does not recall information already transferred.

Web and mobile external-processing choice. On the web, cloud support and external search and documents are on by default unless a saved or explicit refusal applies. To request a change on the web, contact support@ortelan.com. Saved refusals are honored across web and iOS. In updated app versions, the signup screen explains external search and document processing before you choose Agree and continue. This records permission for these features; accepting the privacy policy alone does not do so. Existing opt-outs are preserved. On iOS, you can also enable the feature explicitly using the External search and documents toggle in Settings. Earlier app versions may ask for permission before the first governed request. Permission is specific to the signed-in account and disclosure version on that installation. On iOS, you can withdraw it using the external-processing control in Privacy settings; on the web, contact support@ortelan.com to request withdrawal. Once saved, withdrawal blocks future governed requests. Requests already sent may continue processing; withdrawal does not recall transferred information or delete existing records. Use the deletion process in Section 8 for those records. Saved content and features that do not use external retrieval are separate from this permission; voice chat answers use the search-enabled chat pipeline and require it. Account and content storage through our account storage service is separate from this choice, as are device permissions and any model-training preference. Update older app versions if this control is not available.

Model training. Generating an answer, maintaining memory and saving history are distinct from training a model. We do not permit non-public conversation content to be used for foundation-model training without a separate, informed adult opt-in. A general acceptance of these Terms or this policy is not that opt-in. Audio and video training require the applicable separate choices where offered. We do not use content associated with profiles designated as minors, or Temporary Chats, for model training. Commercial content is governed by the no-training commitment in the applicable commercial agreement. Any use must also respect the notice and commitments in effect when the content was collected; this revision does not expand permission for previously collected content.

An improvement setting records a preference; it is not a representation that a particular training program is operating. Where a training program is offered, its notice must explain the data included and consequences of withdrawal before enrollment. You may change an available preference in Settings or contact support@ortelan.com. Withdrawal stops future inclusion under that permission; any limitations on removing data already used must be disclosed in the program notice. We do not promise that removing names makes free-text content impossible to identify.

Safety review and debugging do not create a separate permission to train on minors' content or bypass an opt-in requirement. We do not authorize outside AI providers to use your non-public content for their independent model training. Material changes in who processes your content or why require the applicable notice and, where required, consent.

3a. Cloud processing and your choices

Praus uses a third-party cloud inference provider for cloud chat, safety screening, classification, image understanding and document reading. Our voice processing provider provides voice transcription and cloud read-aloud. Praus’s orchestration applies routing, product and safety rules. A selected cloud model uses our cloud inference provider’s global serverless service; its processing is not restricted to the United States.

Provider and purpose. Our cloud inference provider processes text for safety screening, classification and answers, and processes eligible images and documents. Our voice processing provider provides voice transcription and cloud read-aloud. Praus's orchestration selects and routes requests and applies account settings, family restrictions and safety controls.

Information sent. Our cloud inference provider receives your messages, relevant conversation history, and any saved memories, instructions or preferences used for the answer. This can include personal or sensitive information, such as faith preferences or location you included. Our voice processing provider receives audio for transcription or text for cloud read-aloud when you use those voice features. This text is not necessarily anonymous: messages and selected context may identify you or someone else.

Identifier masking. Before forwarding selected text through this eligible cloud route, Praus replaces common email addresses, formatted US phone numbers and Social Security numbers, and matches to your account ID and email, with temporary placeholders. The request's mapping stays temporarily inside Praus and is used to restore matching identifiers in returned text. This filter does not make content anonymous or guarantee removal of every name, address, account detail or other identifying information. Its scope is this text route; it is not a promise that other features or every category of account data are masked.

Limited text scope. This covers AI features that use our cloud inference routes, including eligible text chats and related workspace text where enabled. It does not cover external web search or retrieval, which are described separately in the Privacy Policy. This permission does not enable every account or feature: cloud availability also depends on Praus's eligibility and capacity controls.

Selected Notes and Projects text. Where Praus offers a separate choice to include workspace text, you may also allow selected notes, project instructions and selected document text already extracted in Praus to be processed through this cloud route. An earlier chat-only choice does not grant this additional permission. Praus verifies access to the selected content and applies its routing, safety and identifier-masking controls. This additional choice does not authorize raw file uploads or extraction, images, audio, external search or model training. Availability still depends on Praus's eligibility and capacity controls.

Processing locations. US cloud processing is restricted to the United States. This restriction applies to routes designated as US cloud. Separate global cloud routes may process eligible text, images and documents outside the United States. This is not a promise that every Praus feature, operational record or service provider operates only in the United States.

Storage and temporary caching. For the open-model Chat Completions service used by this route, the provider states that prompts and answers are not written to persistent storage by default. Content is processed in volatile memory. Prompt caching can retain prompt data in memory for minutes to hours, depending on the model, load and configuration. The provider retains operational metadata, such as token counts. Praus separately stores saved conversations through its account storage service, under the account storage and deletion practices in this policy. This is not a promise that no processing or retention occurs.

Access and training. The provider's published security practices limit personnel access to production systems and log that access; they do not establish that no person could ever access information. Its published privacy notice says it does not use prompts or API inputs to train or improve its models without explicit opt-in. Praus does not enable provider training or optional prompt logging for this route. This processing is only for answering your requests. It does not opt you into training or change your existing training preferences.

Your choice. On the web, Cloud support and external search and documents are on by default unless you have saved or explicitly sent a refusal. To request a change, contact the privacy address in our Privacy Policy. A saved no is honored across web and iOS; switching platforms does not reset it. iOS retains its processing choices. Account eligibility and family restrictions still apply. A refusal does not select a Studio or other model fallback.

Cloud media processing. Our cloud inference provider handles eligible image understanding and document reading through its cloud inference routes. Our voice processing provider handles voice transcription and cloud read-aloud. Selected messages, context, image or page bytes and speech text may include identifying or sensitive information. Content is not automatically anonymous or fully redacted. Turning cloud support off blocks future cloud dispatches.

Provider handling. Praus does not authorize providers to use your non-public content to train their models. Processing and retention depend on the selected service and its terms; this is not a blanket zero-retention promise.

Media permission and limits. This additional choice is separate from search and model-training preferences. An earlier text-only cloud choice does not grant media processing. Praus records the version accepted and checks permission before each new cloud media request. You may withdraw it in iOS Privacy settings or contact support@ortelan.com. Withdrawal stops future requests after it is saved, but cannot recall content already sent. Account usage allowances apply across chat and cloud media processing.

Withdrawal. You can request withdrawal through the privacy contact in our Privacy Policy. Once saved, withdrawal applies to future cloud attempts across your account. It cannot recall information already sent or stop an already-running provider request. To request withdrawal of external search and document permission, contact support@ortelan.com. Saved refusals apply across web and iOS; web defaults never override a saved or explicit no. Withdrawing is separate from deleting saved conversations or account records; Section 8 explains those controls.

4. Voice, uploads, device permissions and notifications

If you choose dictation, voice conversation, recording, transcription or attachment features, the audio, transcript, image or file needed for that feature is processed. Depending on the feature, processing can take place on your device, on our servers, or through the permitted cloud media services described in Section 3a. Uploaded audio is sent to our voice processing provider for transcription when that feature is enabled. A transcript or content you save or send becomes subject to the same storage and sharing rules as other content.

The app requests device permissions when needed, such as microphone or photo access. You may revoke them in device settings; affected features may then stop working. You are responsible for obtaining any consent required before recording or uploading someone else's voice, image or information.

Where device notifications are enabled, device or notification-routing identifiers and notification content may be handled by the platform's notification service. Email and SMS features use the relevant delivery provider. A device lock screen, shared inbox or shared phone may expose notification content to others. Delivery can be delayed or fail; notifications are not emergency monitoring. Notification permissions and communication preferences are separate from deleting your account.

5. Sharing, families, groups and exports

Your choices. Participants and collaborators can access information shared with them through group chats, projects, invitations, reports or other sharing features. Recipients can keep copies, screenshots or exports. Deleting your copy or leaving a group does not necessarily delete a recipient's independent copy. Check recipients and sharing settings before sending. Sharing a report also shares the personal information and sources it contains.

Family accounts. A parent or guardian managing a minor's profile may access activity, settings or safety information made available by the family features. These tools have limits and are not a guarantee that all activity will be visible or every concern detected. An adult family member's data is not automatically subject to unrestricted parental access. Rights depend on account roles, permissions and applicable law.

Organizations. If you join an organization-managed workspace, its administrators may have the access disclosed for that workspace and its agreement. Using an organization email address alone is not consent to silently transfer your personal account or its content to that organization.

Exports. Downloaded reports, copied answers, shared files and device backups can remain outside Praus's control. Protect those copies and use the receiving service's controls to manage them.

6. Providers and other disclosures

We use service providers for functions such as cloud inference, search, account services, hosting, payments and communications. Depending on the features you use, we disclose the information needed for these functions:

Providers acting on our behalf receive information for their service functions, subject to applicable arrangements and law. A provider may also act independently for its own payment, account, fraud-prevention or legal obligations; review its policy when you use that provider directly. Contact support@ortelan.com for information about the providers applicable to your use.

We may disclose information to professional advisers; to comply with valid legal process or reporting obligations; to investigate fraud or misuse; or where legally permitted and reasonably necessary to protect people, rights or security. We may transfer information in a merger, financing, reorganization or sale, subject to applicable notice, law and existing privacy commitments.

We do not sell personal information or share it for cross-context behavioral advertising. We do not provide conversations to advertisers or data brokers. This does not prevent the service-related disclosures explained in this policy.

7. Memory, Temporary Chat and local storage

Memory and history are separate features. Disabling memory does not itself delete past conversations or saved memories. Use available controls to review or delete saved information, or submit a privacy request. Saved preferences, cached content and session information may also be stored on your device.

Temporary Chat is designed to keep that conversation out of normal saved history and memory. It still requires processing to deliver the response. Necessary operational records, security information, feedback you submit, independently saved or shared material, and information retained under a legal obligation may remain. Temporary Chat is not anonymity, end-to-end encryption, an offline mode or a guarantee that nothing is retained. Deleting the app or clearing browser storage does not delete information held in your account or by recipients.

8. Retention and deletion

We retain information for the purpose for which it was collected, taking account of whether you keep an active account, choose to save content, request deletion, need support, or have an outstanding billing, safety, fraud or legal matter. Account records support account administration; saved chats, notes, projects and reports support your chosen history and content features; diagnostics support investigation and security; billing records support transactions, accounting and legal requirements. Retention must be limited to what is reasonably necessary for those purposes.

You can initiate account deletion through the available Settings > Account > Delete Account control, or request help at support@ortelan.com. You can also request access, correction or deletion of particular information. We may need to verify identity or authority. Disabling account access, signing out, or removing an item from view is not confirmation that every copy has been erased. We will handle a verified request within applicable legal deadlines and explain any lawful exception or extension.

Some information may need to remain for legal obligations, tax/accounting, disputes, security or fraud prevention, or to respect other users' rights. Backup copies may require a separate deletion cycle and must remain protected and limited in use pending deletion. Copies retained independently by collaborators, export recipients or third-party services are subject to their own controls. Contact us for the status and scope of a deletion request, including remaining categories and reasons for retention.

Earlier commitments remain applicable. This revision does not extend retention of information covered by an earlier deletion commitment, withdraw an outstanding deletion request, or excuse a missed legal or contractual deadline. Deleting an account also does not, by itself, confirm that a subscription has been canceled; check the applicable billing provider as described in the Terms.

9. Cookies and similar technologies

We use cookies, browser/local storage and similar device storage to maintain sessions, secure accounts and remember preferences. Operational diagnostics may record website or app usage. Any optional analytics must follow the choices and notice offered for that use and applicable consent requirements; blocking cookies in a browser is not a substitute for consent where consent is required.

Use the website's cookie controls where offered and your browser/device settings to manage storage. Blocking essential storage can prevent sign-in or saved preferences. We do not use conversations for advertising. Where an applicable law requires recognition of an opt-out preference signal such as Global Privacy Control, that signal must be respected for covered uses. A browser's older Do Not Track signal is not a uniform consent mechanism and does not replace your privacy rights. For help with an opt-out or a cookie choice, contact support@ortelan.com.

10. Age and availability

Praus is available only to adults age 18 and older who live in the United States. Family accounts are for adults; we do not offer teen onboarding. We collect birth month and year and a United States residency confirmation during signup to check eligibility. If you believe a minor has provided personal information, contact privacy@ortelan.com so we can review and address it.

11. Security

We use safeguards designed to protect personal information, including encrypted network connections and account-access controls. No service, device, transmission or storage system is completely secure. Keep your credentials and devices secure and report suspected unauthorized access promptly to support@ortelan.com.

This policy does not represent that messages are end-to-end encrypted, that all records are anonymous, or that a particular audit, certification or security control has been completed. We will provide incident notifications when required by applicable law. Nothing here waives our legal security or privacy obligations.

12. Your rights and choices

Depending on your location and applicable law, you may have rights to know or access the personal information we hold, obtain a portable copy, correct it, delete it, withdraw consent, object to or restrict processing, limit certain uses of sensitive information, and opt out of sale, targeted advertising or certain significant automated decisions. We do not sell personal information or share it for cross-context behavioral advertising. Faith preferences and other sensitive information are used to provide requested features and for permitted purposes described here.

Use available account controls or email support@ortelan.com. We may verify your identity and, for an agent or guardian, their authority, without requesting more information than necessary. Where available, an authorized agent may act for you. We do not unlawfully discriminate or retaliate for exercising rights. If we deny a request, we will explain how to appeal where that right applies. You may also complain to the appropriate regulator.

California residents may have rights under the CCPA/CPRA where applicable, including access, correction, deletion, portability, limits on sensitive-information use, and sale/sharing opt-out rights. Sections 1, 2 and 6 explain the categories, sources, purposes and recipients of information; Section 8 explains retention criteria. Other state laws can provide additional rights. Response deadlines, lawful exceptions and extensions depend on the request and jurisdiction; we will provide any required notice of an extension.

Essential account, billing and security notices may continue when you opt out of promotional messages. Use the unsubscribe link for marketing emails where offered. Device notification permissions, memory settings and training preferences are separate controls.

13. International processing

Praus is based in the United States. Information can be processed in the United States and in locations where our service providers operate. The inference routes described in Section 3a include global processing and are not all restricted to the United States. These cloud routes do not establish a residency commitment for every other feature or data category. A data residency or regulated-processing requirement must be addressed in an express agreement before you submit that information.

If European, UK or other data-protection law applies, the relevant basis for processing depends on the purpose: performing the service contract, legal obligations, legitimate interests such as security and service administration where permitted, or consent where required. Consent to optional processing can be withdrawn without affecting prior lawful processing. Special-category information requires an applicable additional legal condition. Transfers subject to legal restrictions require an appropriate lawful mechanism; this policy alone is not a transfer consent or a representation that a particular contractual safeguard has been executed. Contact support@ortelan.com about applicable safeguards or to exercise rights.

14. Updates and contact

We may update this policy to describe changes in the Services or our practices. We will identify the effective date and provide notice of material changes, including email notice consistent with our prior commitments. Where law or an existing commitment requires consent, we will obtain it before a materially different use; continued use alone is not consent for model training or another processing purpose requiring express consent. This revision does not authorize retroactive use inconsistent with the notice under which information was collected.

Privacy: support@ortelan.com

Privacy contact: privacy@ortelan.com

Support: support@ortelan.com

Legal notices: legal@ortelan.com. Contact us for the current mailing address.

You may request a prior policy version through the privacy contact. See also our Terms of Service.