PRIVACY POLICY

The Sovereignty Manifesto

Last Updated: April 11, 2026
Effective Date: April 11, 2026
Entity: Monolithos LLC, a Delaware Corporation

I. Our Philosophy: Your Mind Belongs to You

MONOLITHOS is built on a single, uncompromising principle: cognitive sovereignty.

We do not harvest your thoughts. We do not mine your notes. We do not sell your attention. We built MONOLITHOS because we believe your intellectual output is your property—not a commodity to be extracted and monetized by surveillance capitalism.

This Privacy Policy is not a wall of obfuscating legalese designed to hide our sins. It is a declaration of our architecture.

---

II. What We Collect

We practice radical data minimization. We collect only what is absolutely necessary to deliver The Monolith System to you.

2.1 Account Information

Data	Purpose	Retention
Email Address	Authentication, license delivery, critical service communications	Duration of account
Password Hash	Authentication only (we never see your plaintext password)	Duration of account

2.2 Payment Information

Payments are processed by Stripe, Inc. (desktop/web) and Apple (iOS In-App Purchase). We never see, store, or have access to your:

• Credit card numbers
• Bank account details
• Billing addresses (held by Stripe or Apple)

For Stripe transactions, we receive only a transaction confirmation and the last four digits of your card for your reference. For Apple transactions, we receive a cryptographically signed receipt confirming your subscription status—nothing more.

2.3 Subscription & Usage Metadata

Data	Purpose	Retention
Subscription tier & status	Determining your feature access and compute allocation	Duration of account
Aggregate request counts	Enforcing fair-use quotas (we count requests, not contents)	Rolling 30-day window

2.4 What We Do NOT Collect

---

III. Zero-Knowledge Architecture

The Monolith System is local-first by design.

Your Markdown vault lives on your device. Your notes are stored in your filesystem. Your markdown files are plaintext you control.

We cannot read your notes because we never have access to them. This is not a policy decision—it is an architectural fact. The system was designed from the first line of code to ensure that your intellectual output never touches our servers in a persistent form.

We are not capable of selling what we do not possess.

---

IV. The Black Hole Protocol: Transient Processing

When you use our AI-powered features (Chat, Audio Brief, Synapse, Prism, Deep Research), your content is transmitted to our backend for processing.

How It Works

1. Transmission: Your content is sent via encrypted HTTPS to our servers.
2. Processing: The content is processed in RAM (volatile memory) by our AI infrastructure.
3. Response: The result is returned to your device.
4. Destruction: The content is purged from memory. Nothing is written to disk. Nothing is stored. Nothing persists.

Our Guarantees

• No Logging: We do not log the contents of your requests.
• No Storage: Your notes, files, and prompts are never written to persistent storage.
• No Training: Your data is never used to train any AI model—ours or any third party's.

We call this the Black Hole Protocol because, like a black hole, data crosses the event horizon, is processed, and emits only the radiation of your requested output. The original matter does not escape.

---

V. Third-Party AI Services

MONOLITHOS employs a multi-model routing architecture. Depending on the task, your request may be processed by one or more of the following AI services:

Service	Provider	Purpose	Data Use Policy
Gemini API	Google	Chat, Audio Brief, Search Grounding	API data not used for training (ai.google.dev/terms)
Claude API	Anthropic	Chat, Deep Research, Tool Calling	API data not used for training (anthropic.com/policies)
Grok API	xAI	Chat, Agentic Reasoning	API data not used for training (x.ai/legal)

Transparency commitment: We selected these providers because each offers API-tier data isolation—content submitted via their APIs is contractually excluded from model training. Your thoughts pass through; they do not linger.

We do not send any personal identifiers (email, name, API key) to these services. Only the content you explicitly submit for processing is transmitted, and it is subject to the Black Hole Protocol described in Section IV.

---

VI. Third-Party Payment Services

Service	Purpose	Their Policy
Stripe	Desktop/web payment processing	stripe.com/privacy
Apple	iOS In-App Purchase processing	apple.com/legal/privacy

---

VII. In-App Purchases & Subscriptions

MONOLITHOS offers subscription plans that unlock AI compute capacity, module access, and generation quotas.

7.1 How Payments Are Handled

On iOS, all subscription purchases are processed by Apple through the App Store. Apple handles all payment processing, billing, and receipts. We receive only a cryptographically signed transaction record confirming your subscription tier and validity period—we never see your payment method.

On desktop and web, payments are processed by Stripe. Similarly, we receive only the transaction confirmation necessary to activate your account.

7.2 What We Store

For subscription management, we store:

• Your subscription tier (e.g., CORE, MAX)
• Subscription start and expiration dates
• Transaction identifiers (for cross-device sync and support)

We do not store payment methods, card numbers, billing addresses, or Apple ID details.

7.3 Cross-Device Sync

Your subscription status is synchronized across devices via your registered email address. This is the only mechanism by which your iOS and desktop experiences are linked.

---

VIII. Your Rights

You have absolute rights over your data:

• Access: Request a copy of any personal data we hold (email, transaction records).
• Deletion: Request complete deletion of your account and all associated data.
• Portability: Your notes are already yours—they're markdown files on your device.
• Objection: Opt out of any non-essential communications.

To exercise these rights, contact: [email protected]

---

IX. Security

We implement industry-standard security practices:

• Encryption in Transit: All data transmitted via TLS 1.3.
• No Encryption at Rest Required: Because we don't store your content at rest.
• API Key Authentication: Your access is protected by unique, revocable API keys.
• JWS Verification: Apple transaction receipts are verified using ES256 cryptographic signatures against Apple's public keys.
• Infrastructure: Hosted on hardened Linux servers with principle of least privilege.

---

X. Data Retention

Data Type	Retention Period
Account email	Until account deletion
Transaction records	7 years (legal/tax requirements)
Subscription metadata	Until account deletion
Aggregate usage counts	Rolling 30-day window
Your notes/content	Never stored

---

XI. Children's Privacy

MONOLITHOS is not directed at children. We do not knowingly collect personal information from anyone under the age of 13.

In compliance with the Children's Online Privacy Protection Act (COPPA) and Apple's App Store Review Guidelines (Section 5.1.4), if we learn that we have inadvertently collected personal data from a child under 13, we will delete that information immediately.

Users between the ages of 13 and 18 may use MONOLITHOS with the consent and supervision of a parent or legal guardian. The parent or guardian is responsible for monitoring the minor's use of the Service, including any AI-generated outputs.

If you believe a child under 13 has provided us with personal information, please contact us at [email protected] and we will take prompt action.

---

XII. International Users

Monolithos LLC is based in the United States (Delaware). If you access our services from outside the US, you consent to the transfer of your account data (email only) to the United States.

Your notes never leave your device unless you explicitly use our AI features, in which case they are processed transiently as described in Section IV.

---

XIII. Changes to This Policy

If we materially change this policy, we will:

1. Update the "Last Updated" date above.
2. Notify you via email at least 30 days before changes take effect.
3. For significant changes, require explicit acknowledgment.

We will never change our core architecture from local-first to cloud-stored without making that change unmistakably clear.

---

XIV. Contact

For privacy inquiries:

Monolithos LLC
Email: [email protected]
Subject Line: Privacy Inquiry

---

XV. The Final Word

Most privacy policies are written to protect the company from you.

This one is written to protect you from us—by proving there's nothing to protect you from.

Your mind is sovereign. Your vault is yours. The Monolith is merely the tool.

"In the ruins, we build order—but the blueprints belong to you."

— Monolithos LLC