Privacy Policy

What we store

• Account: your email address and the identifier of your sign-in provider (Clerk, which can sign you in with Google), and your language setting.
• What you save: the URL and title of each page, the text and images we fetch from it, and the text you paste in yourself (for example, a post on X).
• What the AI derives: summaries, topics, concepts, claims and the relations between them.
• What you add: notes, labels, topic and concept corrections, and where you stopped reading.
• Sessions: sign-in tokens, kept on your device, and a hash of the refresh token on our side.

The Chrome extension

• The extension reads the URL and title of a page only when you click its button, use its shortcut or choose its context-menu item (the activeTab permission). When you save a link from the context menu, it saves the URL the link points to. It has no content scripts and cannot see the rest of your browsing or your history.
• Saves wait in the extension's local storage until they are sent to PickMeUp, and its sign-in session is kept there too. Nothing is sent anywhere other than app.usepickmeup.com.
• The extension's use of information follows the Chrome Web Store User Data Policy, including its Limited Use requirements: we use the data only to provide the saving feature you asked for, and never sell it or use it for advertising or credit decisions.

How the AI uses your data

• Summaries, topics, concept and claim extraction, and insights across articles are produced by AI models from third-party providers we select. Finding related articles uses an AI model that turns text into vectors. We may change the models or providers; when we do, we update the date of this policy.
• What goes to the AI is the article text (or the text you pasted), and for insights the summaries and claims. Your notes and labels are never sent.
• We do not use your data to train models. The AI providers process it to answer each request.
• Text on a saved page is treated as untrusted data; instructions inside it are not followed.
• Translating an article's text into your language happens on your device (Google's ML Kit on Android, the browser's built-in translator on the web). The text is not sent to us or anywhere else. The first time, the language data is downloaded from Google on Android, or by your browser on the web.

Who processes your data

• Cloudflare hosts the service: the application servers, the database, private storage for article text and images, queues, vector search, the AI model that turns text into vectors, and the browser used to read pages that need rendering.
• Amazon Web Services runs the AI models we use to analyze your articles.
• Clerk handles sign-in and verifies your identity; Google signs you in if you choose it.
• When we fetch a page you saved, we do so from our servers, observe robots.txt, and refuse private addresses and signed URLs.

Sharing

• Your articles are visible only to you. Every query is limited to your account.
• An AI app can read your saved articles and notes only after you connect the MCP connector to it yourself, and only to read. You can disconnect it in that app.
• If you create a public graph link, anyone with the link sees the names and kinds of the nodes, their connections and the URLs of the articles in it, until you revoke it. We count how many times the link is opened, without recording who opened it.
• When you use “Dig deeper with AI”, the text you choose to send goes to the AI app you pick. Their handling is under their own policies.
• We may disclose your data without your consent, as far as the law allows, to respond to a disclosure request based on law or when needed to protect someone's life, body or property.

Logs

Our logs do not contain request bodies, URLs with queries, tokens, or the text of articles or AI responses. We keep daily counts of AI use per feature to stay within limits. We do not use advertising or third-party analytics trackers.

Retention, export and deletion

• Your data stays until you delete it. Deleting an article hides it at once, and the stored text, images and vectors are then removed in the background.
• You can export your articles, topics and relations as JSON, and delete your whole account, from Settings in the app. Both ask you to have signed in recently.
• If you answer the optional survey on why you are leaving, the answers are kept apart from your account (with only the date, not who gave them) and used to improve the service.
• A browser sign-in lasts 7 days; the apps and the extension keep a session for up to 180 days unless you disconnect or sign out.

Security

Data is stored privately in your account and sent over HTTPS. Access to the stored text and images is checked against your account every time. No method of storage is perfectly secure, but we limit what we keep and who can reach it.

Children

PickMeUp is not directed to children under 13, and we do not knowingly collect their data. If we learn that someone under 13 has registered, we will delete the account and its data. If you are under 18, get the consent of a parent or legal guardian before using PickMeUp.

Changes

If we change this policy in a way that matters, we will update the date above and, for significant changes, tell you in the app.

Contact

Questions or requests about your data: contact@usepickmeup.com