The old Privacy Policy was, to put it kindly, long. To put it less kindly, it was the kind of document you scroll past on the way to clicking "Accept." That's not the relationship we want with you.
Today we're publishing a refreshed Privacy Policy, written so that a person — not a lawyer — can read it and understand what's actually happening with their data. The new policy takes effect on April 10, 2026.
The shape of the change
Shorter. The new policy is roughly half the length. We removed legalese, redundant warnings, and "we may" clauses that hid what we actually do behind what we hypothetically could do.
Honest section headings. Sections are titled by what they tell you, not by legal category. "What we collect when you sign up." "What we do with your conversations." "What we share with third parties (and what we don't)."
Examples, not abstractions. Where the old policy said "service-related communications," the new one says "the email we send you when your password changes."
What's new in substance
No training on private chats — by default and forever. Your private Pluto conversations and Airo sets are not used to train any model unless you opt in, and the opt-in is a single, clearly labelled toggle in your settings. We don't pre-check it. We don't nag you to flip it. There is no upsell tied to it.
Shorter retention by default. Server-side logs used for abuse prevention and debugging now expire automatically after 30 days unless tied to an active investigation. Account content is yours until you delete it.
One-click data export. The new policy guarantees what we already do in product: you can download every conversation, quiz, and study set you've created in an open JSON format.
One-click deletion. When you delete your account, we remove your content from live systems within 30 days and from backups on the normal rotation. The new policy commits to that timeline in writing.
Subprocessors are public. The third-party services we use to run Invariant (hosting, payments, email) are listed by name in the policy. If we add or remove one, that's a change worth announcing.
What hasn't changed
We do not sell your data. We do not run ads. We do not build a profile of you across the web. None of that has changed; it just used to take three pages of the old policy to say.
Read it for yourself
The full updated policy is at /privacy. If you'd like the side-by-side diff against the previous version, write to hello@invariant.ai and we'll send it.
And if anything in the new policy reads worse than the old one — less clear, less specific, less honest — please tell us. Plain language is a feature, and like any feature, it has bugs.