Your information, explained
Choosing where Iris keeps your information and choosing who processes it are separate decisions. Here's what that means in practice, in plain English.
Our promises
These hold on every plan.
Iris doesn't show you ads, and nothing you tell it is used to target ads anywhere.
We don't sell or rent your information, or what Iris has learned about you.
We don't train AI models on your conversations or memories.
No business can pay to change what Iris suggests to you.
Where it lives
Local chat and voice are available in the Mac test build for compatible Apple silicon Macs.
Iris for Mac stores its conversations and memory on your Mac. Hosted Iris stores conversations, captures, tasks and memory through its runtime on your selected server. The apps also keep local drafts and caches. Self-hosting gives you control over that server and its backups.
Cloud models receive your message and relevant context, which may include conversation history, memories and attachments. Your server location does not determine the provider’s processing location or retention policy. Provider policies vary by model, endpoint and account. Content may identify you even when your account email is not sent. Check the provider’s terms before sharing sensitive information.
The Iris control plane handles identity, subscriptions, provisioning, usage and connection setup. These functions have their own operational records. For each Mac signed in to your account, that includes its name and when it was first and last seen; signing out on that Mac or removing it in Your Macs deletes that record. Personal chat does not need to pass through the control plane to reach your runtime.
Managed infrastructure and encryption keys are administered by Iris and its infrastructure providers. Encryption at rest protects stored volumes; it does not establish that Iris is technically unable to access data on a running managed server. This is not an end-to-end encrypted service.
Approving a calendar reminder sends its title, details and time to your connected Google Calendar. Other integrations send the information needed for the action you request. Those services keep their own records.
Employer information must stay in the employer environment. Personal Iris does not provide a work-chat proxy in this release. A future employer connection needs its own verified permissions, storage and approval boundary.
Editing or forgetting a memory changes the current memory store. It does not remove the original conversation, a saved capture, a calendar event or a provider’s retained copy. Those records need their own deletion action.
Deleting a server and destroying its encryption key are different operations. Copies, backups, local caches and provider records may have separate retention periods. Iris does not promise instant or universal deletion of every copy.
Account cancellation, refunds and data handling are governed by the published terms and privacy policy. Self-hosted operators also need to manage their own backups and credentials.
When you join early access, we collect the email address you give us, your answers to "Which sounds most like you?" and "Where are you?", the page you signed up from, and the time.
Join early access and we'll let you know as Iris for Mac, the phone apps and the full launch arrive. Made by an independent company in Australia. No ads, no data sales.