Data we collect.
When you create an account we store your email address and an internal user identifier. Chat messages, settings, and tool/server configurations are stored in our managed database keyed to your user ID.
How we use your data.
Two paths for chat data. Sparrow lets you reach AI either through (a) EchoNest's managed gateway (free-tier models and the Plus / Pro plans) or (b) your own provider keys or local models (e.g. an OpenAI key, LM Studio, Ollama). What happens to your prompts depends on which path you choose.
- When you send a chat message, it is forwarded to the AI provider that serves your selected model (see the two paths above). EchoNest does not use your prompts or responses to train models. We cannot, however, guarantee the data-handling practices of every upstream provider; the most privacy-sensitive option is to use your own keys or a local model.
- Server logs (request metadata, errors) are retained for a limited period for operational troubleshooting.
- We do not sell, rent, or share your data with third parties for marketing purposes.
Data storage & security.
We design Sparrow with the principles of the EU GDPR in mind: data minimisation, EU-only storage, encryption in transit and at rest, and user-initiated deletion.
All data is stored within the European Union. Data in transit is encrypted via TLS. Data at rest is encrypted using industry-standard managed keys.
Authentication credentials are processed using established cryptographic practices and are never stored or transmitted in plaintext.
Data retention & deletion.
You can delete individual chats or all your data at any time from the application. To request complete account deletion, please use our contact page.
Cookies.
We do not use tracking cookies. Your session is kept in your browser's local storage and is never shared with third parties.
Third-party services.
Some open-source rendering libraries used in the browser (for math, diagrams and code highlighting) are loaded from public CDNs. Those CDNs may see your IP address as part of normal HTTPS requests, governed by their own privacy policies.
Changes.
We may update this policy from time to time. Material changes will be noted with an updated date at the top of this page.
Contact.
For privacy questions, please use our contact page.