Privacy Policy

1. Information You Provide

When you use Enormous, you may provide:

• Account information, such as your email address and authentication information.
• Sources and responses, including text you write, answers you give to follow-up questions, and other context you choose to leave in Enormous.
• Photos, audio, and videos that you choose to upload.
• Shared content, if you choose to use a feature that lets another person access a specific piece of content.

You decide what you leave in Enormous.

2. Information We Collect Automatically

We may collect limited technical and usage information needed to operate, secure, and improve Enormous, such as:

• when certain product actions occur, such as preserving, deleting, or resurfacing a Source;
• whether certain features complete successfully or encounter an error;
• basic technical information generated by our hosting, authentication, database, and security infrastructure.

Our product analytics are designed so that private Source content is not copied into analytics records.

3. How Enormous Uses Artificial Intelligence

Some Enormous features use artificial intelligence to understand the content you choose to leave and to provide experiences such as follow-up questions, transcription, extraction of context, and other forms of reflection.

To provide these features, relevant portions of your content may be sent to AI service providers for processing.

We use AI to operate Enormous features. We do not use your private content for advertising or to build advertising profiles about you.

AI-generated responses may occasionally be incomplete or inaccurate. Enormous is not a substitute for professional medical, legal, financial, or mental-health advice.

4. How We Use Your Information

We use information collected through Enormous to:

• provide and operate the service;
• store and display the Sources you choose to preserve;
• generate follow-up questions and other intelligence features;
• transcribe audio or process media where necessary;
• resurface your own past Sources to you;
• enable features you explicitly choose to use, including sharing;
• maintain security and prevent misuse;
• diagnose errors and improve reliability;
• understand product usage through limited or aggregated product analytics;
• comply with applicable law.

We do not sell your personal information.

We do not use your private Sources for third-party advertising.

5. How Your Content Is Stored

Enormous uses third-party infrastructure providers to host the application and store information.

User content, including uploaded media, is stored using access-controlled infrastructure. Uploaded Source media is stored in private storage rather than through permanently public file URLs.

Temporary signed links may be generated when the product needs to display private media or when you intentionally make a specific piece available through a sharing feature.

No online service can guarantee absolute security, but Enormous is designed to limit access to private user content and to keep user data separated through technical access controls.

6. Service Providers

We use service providers that help us operate Enormous. These may include providers for:

• application hosting and delivery;
• authentication, databases, and file storage;
• artificial intelligence and transcription;
• infrastructure monitoring and security.

Our current infrastructure includes services provided by Supabase, Vercel, and OpenAI.

These providers may process information on our behalf as necessary to provide their services to us, subject to their applicable agreements and privacy obligations.

7. Sharing Your Information

We do not make your Enormous account or private Sources publicly available by default.

We may disclose information:

• when you intentionally choose to share a piece of content;
• to service providers acting on our behalf;
• when required by applicable law, legal process, or valid governmental request;
• when reasonably necessary to protect the security, rights, or integrity of Enormous, our users, or others;
• in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to applicable law.

If you choose to share content with another person, that person may be able to save, copy, or otherwise retain what you share.

8. Data Retention and Deletion

We keep your account information and user content for as long as necessary to provide Enormous, unless the information is deleted or a longer retention period is required or permitted for security, legal compliance, fraud prevention, backups, or technical operations.

When you delete an individual Source, Enormous is designed to remove the associated product data and stored media from active systems.

Enormous is also developing an account-deletion mechanism that will allow users to request deletion of their account and associated data.

Additional details about backup retention and account-deletion timing will be reflected in this Privacy Policy once those systems are finalized.

9. Your Choices and Rights

Depending on where you live, you may have rights regarding your personal information, including rights to:

• access certain information we hold about you;
• correct inaccurate information;
• request deletion;
• obtain a copy of certain information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent.

You may contact us to exercise applicable privacy rights. We may need to verify your identity before completing certain requests.

10. California Privacy Rights

If you are a California resident, applicable California privacy laws may provide additional rights relating to your personal information.

Enormous does not sell personal information and does not share personal information for cross-context behavioral advertising.

You may request access, correction, or deletion of eligible personal information by contacting us at the address listed below.

We will not discriminate against you for exercising applicable privacy rights.

11. International Users

Enormous may process and store information in the United States or other countries where our service providers operate.

If you access Enormous from outside the United States, your information may be transferred to jurisdictions whose data-protection laws differ from those where you live.

Where required, we will use appropriate mechanisms for international data transfers.

12. Age Requirement

Enormous is intended for users who are 18 years of age or older.

We do not knowingly collect personal information from anyone under 18.

If we learn that we have collected personal information from a person under 18, we will take reasonable steps to delete it.

13. Security

We use administrative, technical, and organizational measures intended to protect personal information.

However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping access to your account and email secure.

14. Changes to This Policy

We may update this Privacy Policy as Enormous evolves.

If we make material changes, we will update the effective date and, where appropriate, provide additional notice.

15. Contact Us