Privacy Policy

1. Data controller

Responsible for data processing on this website:

Kindred Digital Labs UG (haftungsbeschränkt) Bataverweg 53 22455 Hamburg Germany Managing director: Alexander Bückner Register court: Amtsgericht Hamburg · HRB 199855 VAT ID: DE464004232

E-Mail: [email protected]

2. Overview of data processing

This Privacy Policy informs you about the nature, scope, and purpose of processing personal data when using Eigen Mesh. Processing is based exclusively on the GDPR and the German Federal Data Protection Act (BDSG).

3. Data collected

We collect and process the following categories of personal data:

• Account data: Registration name, email address, passwordless login token
• Usage data: Thought entries you actively capture, including metadata (timestamps, category, graph links)
• Technical data: IP address (only in auth logs, deleted automatically), browser type, access time
• Billing data: Usage statistics (API calls, token consumption); no payment data — payment is handled by external providers

4. Purpose and legal basis of processing

Your data is processed for the following purposes and on the following legal bases:

• Providing the service (Art. 6(1)(b) GDPR) — performance of the contract for using Eigen Mesh
• Storage and retrieval (Art. 6(1)(b) GDPR) — storing, enriching, and retrieving your thought entries
• Billing (Art. 6(1)(b) GDPR) — recording usage for a transparent cost overview
• Security (Art. 6(1)(f) GDPR) — protection against misuse and unauthorized access

5. Processing by third parties (LLM providers)

When you use assistant features (e.g. automatic enrichment or search), the following data may be sent to configured LLM providers:

• Only the relevant text excerpt required for the requested processing
• No complete memory contents are routinely sent to LLM providers
• The respective providers (e.g. OpenAI, Anthropic, local models) process data under their own privacy policies

* List the concrete processors and their privacy URLs here before the service is used publicly.

6. Servers and hosting

All data is processed exclusively on servers in the European Union. There is no transfer to third countries. For the self-hosted variant, responsibility for infrastructure and backups lies with the respective instance operator.

7. Cookies and tracking

Eigen Mesh uses PostHog (EU Cloud) for product analytics on this website. Events are sent via a first-party proxy under /ingest on our own domain — not as a third-party script from a foreign domain. We do not use advertising pixels and do not sell data. Functional cookies for authentication (in the product app) remain as required for operating the service.

8. Retention period

Personal data is stored only as long as necessary to fulfill the purpose or as required by law. Your thought entries and related metadata are stored until you delete your account. After account deletion, all data is irreversibly and completely removed — including backups, embeddings, and graph relations.

9. Your rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — right to information about stored data
• Right to rectification (Art. 16 GDPR) — right to correct inaccurate data
• Right to erasure (Art. 17 GDPR) — right to delete your data at any time
• Right to restriction (Art. 18 GDPR) — right to restrict processing
• Data portability (Art. 20 GDPR) — right to receive your data in a machine-readable format
• Right to object (Art. 21 GDPR) — right to object to processing

To exercise your rights, contact us at [email protected].

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe processing of your data violates the GDPR. The competent authority depends on your place of residence or the seat of the data controller.

11. Changes to this policy

We reserve the right to update this Privacy Policy to reflect changes in law or in our service. The current version is always available at this URL.