Privacy, in plain English

Who we are

couldbe.email is a free, just-for-fun side project run by Jordan Cable, an individual in the UK. That makes me the “controller” of your data under UK data protection law. Questions or requests: privacy@couldbe.email.

What we collect, and why

• Your meeting description

  Sent to our AI provider so Enid can give a verdict, then thrown away. We never store it, unless you choose to include it when reporting a verdict. Why: to give you the verdict you asked for.

• Enid's verdicts

  Shown to you, not stored on our servers. If you're signed in, a short history (verdict type and headline) is kept in your browser so your dashboard can show recent checks.

• Your account (optional)

  Your email address, and the numbers behind each save you log: verdict type, meeting length, headcount, how many meetings, whose meeting it was, and the date. Never meeting descriptions or anything Enid wrote. Why: to keep your tally and sync it across your devices.

• Share cards

  When you share, we create a public page holding numbers only: time saved, whose meeting it was and the verdict type. Anyone with the link can see it. Why: because you asked to share.

• Fair-use counters

  To limit daily AI checks and stop abuse, we count requests using a scrambled code made from your IP address and a random browser ID. The code changes every day, can't be turned back into your IP, and is deleted after two days. Why: to keep the service free, affordable and safe.

• Reports

  If you report a verdict, we keep what Enid wrote, your reason and note, and your meeting description only if you tick the box. Why: to check Enid is behaving.

• Visit counts

  Which page you opened, the site that sent you, and your rough location (country and city), device type and browser, counted by Vercel without cookies. Visitors are told apart by a scrambled code that's thrown away after 24 hours, and IP addresses aren't stored. Sign-in pages aren't counted, and anything after the “?” in an address is dropped first. Why: to see which pages get used and where people hear about us.

• Stamps (tips)

  When you tip through Ko-fi, Ko-fi tells us the amount, currency and date, which tops up Enid's daily AI budget. We don't keep names, emails or messages. Ko-fi's own privacy policy covers your payment.

On your device

No tracking cookies, no ads, and nothing stored on your device to count visits. That's why there's no cookie banner. We only use:

• Sign-in cookies, only if you sign in, to keep you signed in.
• Browser storage for your light or dark choice, a random browser ID for fair-use limits, a copy of your saves when signed in, and whether you've hidden the sign-up strip.

Who helps us

These companies process data for us, only to run the service:

• Anthropic: the AI behind Enid's verdicts. It doesn't use your data to train its models.
• Supabase: our database and sign-in.
• Resend: sends sign-in emails.
• Vercel: hosts the website and counts visits.
• Ko-fi: handles tips.

Some of these are based in the US. When data leaves the UK, it's protected by legal safeguards such as the UK International Data Transfer Addendum or the UK-US data bridge.

How long we keep things

• Meeting descriptions: not kept, only for the seconds Enid is thinking.
• Fair-use counters: two days.
• Visit counts: the scrambled visitor code goes after 24 hours, leaving anonymous totals.
• Your account and saves: until you delete your account.
• Share cards: kept so the links keep working. Email us to have one removed.
• Reports: until reviewed, and no longer than 90 days.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. Signed in? The Delete my data button on your dashboard deletes your account and every save straight away. For anything else, email privacy@couldbe.email and we'll reply within a month. Not signed in? Clearing this site's data in your browser removes everything we keep on your device.

If you're not happy with how we handle your data, you can complain to the Information Commissioner's Office.

The small print

couldbe.email is for working adults. If this policy changes, we'll update this page and the date at the top.