Privacy Policy

One Silo, Inc. (“One Silo,” “we,” “us,” or “our”) provides this Privacy Policy for the Silo mobile application and related services that link to this policy (collectively, the “Services”).

Silo exists to enable you to own yourself — and your personal information — when you use AI. Your thoughts shouldn't be someone else's business model. Your data shouldn't be mined, profiled, or sold. Your device shouldn't spy on you. It should serve you.

We do not sell personal information or share your personal information with behavioral advertisers. We do not use your personal information, or data accessed through services you connect to Silo, to train AI models.

We are One Silo, Inc. and we provide this Privacy Policy in connection with our Silo mobile app and any other information services that link to this Privacy Policy. We are committed to protecting the privacy and security of personal information and to transparency about how we process personal information.

If you have any questions regarding this Privacy Policy or our use of your information, please contact us at info@onesilo.com.

Silo handles two distinct categories of information, with different access and storage models:

1. On-device personal context. The personal memory, knowledge, and silo content you create or import is stored in an encrypted repository on your device. This information is not accessible to One Silo. We do not process or transmit it, and we are not technically able to do so.

2. Data from connected services. When you connect a third-party service (such as Google) to Silo, data accessed from that service passes through our control plane only during the active request you initiate. We do not retain copies of connected-service data on our servers except where you have explicitly saved it to a silo.

The remainder of this policy describes how each category is handled.

We limit the collection and processing of personal information to only what we need for our business purposes:

• Users of the Services: Device, usage, and activity information for the purposes of providing Services analysis, improvement, security, and administration. Activity information is strictly limited to events that occur. Silo does not collect or store any information about the content of activities.
• Paying Subscribers: Name, contact information, and payment information to provide access to Services, process payments, and maintain payment records.
• Individuals providing feedback: Content of feedback, suggestions, requests, and other correspondence to consider and respond. This information is not shared with any third parties.

When you connect your Google account to Silo, we request the following OAuth scopes:

• https://www.googleapis.com/auth/drive.readonly — read-only access to files in your Google Drive, used to bring content you select into a silo.
• https://www.googleapis.com/auth/userinfo.email — to identify your Google account.
• https://www.googleapis.com/auth/userinfo.profile — to display your name and avatar within Silo.

How we access and use Google user data. Silo accesses Google user data only to extract content from files you have explicitly chosen to include in a silo, or to identify your account for authentication. Access occurs only during requests you initiate. We do not perform background reads of your Drive.

Storage and retention. Content extracted from Google Drive is written into the silo you have designated, which is stored in an encrypted repository on your device. We do not retain copies of Google user data on our servers beyond what is necessary to complete the active request. Cached request data is purged within 24 hours.

Transfers. When you direct Silo to query an AI model using content from a connected Google account, that content is transmitted to the AI provider you have selected for the duration of that request only. We do not transfer Google user data to any other third party except as required to fulfill your direct request, or as required by law.

Limited Use compliance.Silo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we do not use Google user data to:

• serve advertisements, including retargeted, personalized, or interest-based advertising;
• train, develop, or improve generalized or non-personalized AI or machine learning models;
• sell or transfer Google user data to data brokers, information resellers, or for any other unrelated purpose;
• allow humans to read Google user data, except (a) with your affirmative consent for specific messages or files, (b) as necessary for security purposes such as investigating abuse, (c) when required by law, or (d) where the data has been aggregated and anonymized for internal operations.

Revoking access and deleting Google data.You can disconnect Google from within Silo at Settings > Connections > Google > Disconnect, which removes Silo's access token and purges any cached Google data held by Silo. You can also revoke Silo's access at any time at myaccount.google.com/permissions. Disconnecting does not delete content you have already saved into a silo on your device; you can remove that content separately from within the Silo app.

We may share your personal information with:

• Service providers that provide services to us, such as billing, data storage, and security. We require these service providers by contract to provide the same or equal protection of user data as stated in this Privacy Policy.
• Legal compliance recipients when required by law. However, it is not possible for us to provide the personal context information you store on your device, because we do not have access to that information.
• Successors in connection with a business transaction.

When you use Silo to interact with third-party AI platforms, those platforms may log your interaction in accordance with their privacy policy. Silo does not transmit usernames, identity tokens, or other identifying data to those platforms unless you have explicitly connected an account to that platform within Silo.

Your interactions with other platforms using Silo are stateless from the platform's perspective: the context and history are managed within the Silo app rather than in the third party's platform.

You may connect Silo to AI assistants such as Claude and ChatGPT as a Model Context Protocol (MCP) connector. When you do, the assistant authenticates to Silo using OAuth — you sign in to Silo and choose which of your connected services and silos the connector may reach. The assistant never receives your service credentials; it holds only a token scoped to the access you granted, which you can revoke at any time.

Through the connector, the assistant can read from your silo memory and your connected data and can save or remove items in your silos. Data returned to the assistant is normalized into a provider-blind form: the assistant receives the content you asked for but not the identity of the underlying service that supplied it. Requests pass through Silo's governance pipeline, including PII handling and prompt-injection detection, and are recorded in your activity log. The assistant's own handling of any data it receives is governed by that assistant's privacy policy.

When you enable health data sharing in Silo, your health and fitness information from Apple Health may be shared with the third-party AI provider processing your request. Health data is only transmitted when you explicitly approve each individual request. Your health data is not used to train AI models, is not stored by AI providers beyond the immediate request, and is not used for advertising, marketing, or data mining purposes.

Silo is not a medical application. Health-related responses from AI providers are informational only and should not be considered medical advice.

We use reasonable administrative, technical, and physical safeguards to protect personal information in our possession. When we process your payment card information, we use encryption and comply with PCI standards.

Data accessed through connected services (including Google) is transmitted over TLS, processed in memory only for the duration of the active request, and not written to persistent server storage except for short-lived cache entries that expire within 24 hours.

We retain personal information for as long as necessary for the purposes we use it, or for the time required by law.

Users may revoke consent in the iOS app by navigating to Settings > Privacy Consent. Users may delete their accounts in the iOS app by navigating to Settings > Delete Account. To disconnect a connected service (including Google) and purge any data Silo holds for that service, go to Settings > Connections, select the service, and tap Disconnect. Requests can also be made at any time by contacting us at info@onesilo.com.

Your personal information will be stored and processed in your local region, the United States, and other countries where our operations are located. If we transfer personal information to the United States from another jurisdiction, we will do so in a way that complies with applicable legal requirements.

We do not knowingly process any personal information from those under the age of 13 and we have designed the Services to notify users that those under the age of 13 may not use the Services.

Depending on the law in your legal jurisdiction, your rights may include:

• The right to opt out of targeted advertising, sales, or profiling
• The right to confirm whether we process your personal information and to access a copy
• The right to correction of inaccurate personal information
• The right to deletion of your personal information
• The right not to be discriminated against for exercising any of these rights
• The right to appeal our response to any request

To exercise your rights, please contact us at info@onesilo.com.