Privacy Policy

Last updated: July 11, 2026

Curious Minds Software, LLC, a California Limited Liability Company, doing business as Chunk ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by Curious Minds Software, LLC.

This Privacy Policy applies to our app, Chunk. By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

1. Information We Collect and Why

We collect the following types of information about you:

A. Personal Information

Personal Information is information that can be used to identify, locate, or contact an individual. It also includes other information that may be associated with Personal Information. We collect the following types of Personal Information:

Contact Information that allows us to communicate with you, such as your name and email address.

We collect Personal Information when a user (a) creates an account; and (b) communicates with us.

B. Non-Identifying Information

Non-Identifying Information is information that alone cannot identify you. We collect this information to provide, improve, and customize our services and for research and analytics.

C. Location Information

When you use the mapping and directions features of our app, we may request access to your device's location data. This information is used solely to provide you with accurate directions and location-based services through the Apple Maps integration. We do not store or retain your location data after your session ends, and this data is not used for any other purposes beyond providing the requested service at the moment of use.

D. Chat and Conversation Data

When you use Chunk's chat features, we collect the messages, prompts, and queries you submit. This data is sent to third-party AI service providers (see Section 3) to generate responses. Conversation history is stored on our secure servers to enable cross-device access and continuity.

E. Documents and Files

When you upload documents to Chunk, the content is extracted and processed to create searchable embeddings. Document content may be sent to AI service providers for analysis, summarization, and contextual responses when you use document search features. See Section 6 for how the content you save is indexed to power search and related-content features.

F. Memory Data (Opt-In Only)

If you enable the optional Memory feature, Chunk extracts preferences, interests, and relevant personal details from your conversations to provide more personalized responses. Sensitive information — including passwords, Social Security numbers, credit card numbers, medical diagnoses, and home addresses — is automatically detected and filtered out before anything is stored. You can view, edit, delete, or export any stored memory at any time, and disable the feature entirely in Settings.

G. Images

When you use image generation or upload images for analysis, image data and associated prompts are sent to AI service providers for processing. Generated images are stored in your account and are not used for any other purpose.

H. Usage Analytics

We collect anonymized usage analytics (such as feature usage frequency and navigation patterns) through Mixpanel to improve our services. This data does not include personally identifiable information or the content of your messages.

I. Connector Data (Optional)

If you choose to connect a third-party app to Chunk through the optional Connectors feature (currently Gamma and Notion), we store an OAuth authorization token for each connected account so we can make requests on your behalf when you invoke the Connector in chat. Tokens are stored encrypted at rest on our servers and are used only when you ask Chunk to perform a Connector action.

When you invoke a Connector, the content needed to complete your request — typically the natural-language instruction you typed and any Chunk content you choose to include — is sent to the connected provider's API. The data the provider returns (such as a Gamma deck URL, a Notion page summary, or search results from your Notion workspace) is delivered back into your Chunk conversation. In addition, if you connect a Notion workspace, Chunk periodically indexes the pages and databases you have shared with it so that content can appear in your search results and related-content suggestions; this indexing creates embeddings stored in Qdrant as described in Section 6. Aside from that indexing, we do not browse or pull data from your connected accounts, and we do not retain the full contents of your Gamma decks beyond what is needed to fulfill your request. You can revoke a connection at any time in Settings, which deletes the token from our servers, ends our access to your connected account, and removes content indexed from that account.

J. Captured Content (Quick Capture Inbox)

When you use Save to Chunk (the share option on iPhone, iPad, and Mac), the Chunk browser extension, or email forwarding, the content you send is saved to your Quick Capture Inbox. Depending on what you capture, this may include a web address and page title, text you select, images, PDFs, an email's subject and body, and any note you add. We extract the text of the captured item so it is searchable (see Section 6), and we generate a suggested title, tag, and destination to help you file it. Nothing is filed automatically — captured items stay in your inbox until you choose to save or discard them, and you can edit or override every suggestion.

K. Email Forwarding Address

If you enable email forwarding, we assign you a unique, private email address. Anything forwarded to that address — the message subject, body, and PDF attachments — is added to your Quick Capture Inbox. Because the address itself is the credential, we do not require the sender to match your account, which means anyone who knows your address can send to it. Keep it private, and reset it at any time in Settings to invalidate the old one. Messages sent to an address that is unknown or has been reset are discarded.

L. Automation Data

When you create an Automation, we store its definition (such as your query, the pages it watches, or the task instructions) and the results of each run under your account. To produce those results, an Automation may read the sources you point it at — including your own notes and documents and publicly available web pages — and, for some Automation types, may save its output back into your notes. Automations run on the schedule you set, including when you are not using the app, until you pause or delete them.

2. How We Use the Information

We use the information we collect:

• To provide, personalize, and improve our services.
• To communicate with you, provide you with updates and other information relating to our services, provide information that you request, respond to comments and questions, and otherwise provide customer support.
• For marketing purposes, such as developing and providing promotional and advertising materials that may be relevant, valuable, or otherwise of interest to you.
• To find and prevent fraud, and respond to trust and safety issues that may arise.
• For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.

Search History Storage

When you use Chunk, we store your search history on our secure servers. This is done solely to provide you with the convenience of accessing your search history across all your devices. Your search history may contain personal information based on the queries you enter.

How We Use Your Search History:

• To sync your search activity across your devices
• To provide you with access to your past searches
• To improve your user experience by allowing you to refer back to previous queries

How We DO NOT Use Your Search History:

• We do not analyze or mine your search history to create user profiles
• We do not use your search queries for advertising purposes
• We do not share your search history with third parties
• We do not use your search history to train AI models
• We do not combine your search history with other data to identify patterns beyond providing the service

You can delete your search history at any time through the app. When you delete your search history, it is permanently removed from our servers.

Your search history is stored in encrypted format and is only accessible by you when logged into your account. We implement industry-standard security measures to protect this data from unauthorized access.

Prohibition on AI Training Use

We want to be clear that the personal data you provide to us—including but not limited to your search queries, stored documents, notes, any data retrieved via 3rd-party integrations, location data, and images generated using our app—is not used for training, developing, or enhancing any artificial intelligence or machine learning models. All of your data is processed solely for the purposes outlined in this Privacy Policy, such as providing, personalizing, and improving our services, and is not repurposed for AI training or model development.

3. How We (Don't) Share Your Information

We do not share or sell your personal data to third parties for marketing or advertising purposes. However, we may share your Personal Information in the following situations:

Compliance with Laws and Law Enforcement; Legal Rights. We may disclose your Personal Information if required to do so by law or subpoena or if we believe that such action is necessary to (a) conform to the law or comply with legal process served on us or affiliated parties; (b) protect and defend our rights and property, the Service, the users of the Service, and/or our affiliated parties; (c) act under circumstances to protect the safety of users of the Service, us, or third parties.

Business Transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction as permitted by law and/or contract.

Third-Party Service Providers

AI Language Model Providers

To process your chat messages, generate responses, and power features like Memory extraction and document analysis, we send relevant message content to the following AI service providers:

• OpenAI (GPT models) — Processes chat messages, generates responses, extracts memory data, creates document embeddings, and generates images. OpenAI does not use API data for model training per their API data usage policy.
• Anthropic (Claude models) — Processes chat messages and generates responses. Anthropic does not use API data for model training per their API usage policy.
• Google (Gemini models) — Processes chat messages, generates responses, and generates images. Google does not use paid API data for model training per their API terms.

When sending data to these providers, we do not include your name, email address, account credentials, or authentication tokens. Only the content necessary to generate a response is transmitted via encrypted connections (TLS).

Content Extraction (Capture and Automations)

To turn a captured or monitored item into searchable text, we may send the item to the providers below. Only the content of the item is sent — not your name, email, or account credentials.

• Tavily — Extracts the text of web pages you capture or that an Automation watches.
• OpenAI — Reads text from images you capture (optical character recognition), creates the embeddings used for suggestions, and powers Automation results.

User-Linked App Services (Optional)

When you connect a third-party app to Chunk through the Connectors feature, that provider becomes a data recipient for the requests you explicitly send to it through Chunk:

• Gamma — Used to generate presentations, documents, social posts, and webpages on your behalf when you invoke the Gamma Connector. We hold an OAuth token with permission to create gammas, read gammas, list folders, and list themes in your Gamma workspace. See Gamma's privacy policy at gamma.app/privacy-policy.
• Notion — Used to read, search, write, and update content in your Notion workspace when you invoke the Notion Connector. Access is limited to the pages and databases you explicitly share with Chunk through Notion's connection settings. See Notion's privacy policy at notion.com/privacy.

You must have an active account with the provider to use a Connector. Connections are user-initiated, scoped to your own workspace, and can be revoked at any time in Chunk Settings or in the provider's connection-management page. Content sent to or received from a connected app is not used to train Chunk's services or any AI model.

Search Services

• Tavily — Processes web search queries to retrieve relevant results. Your query text (not your identity) is sent to Tavily's servers.

Analytics and Infrastructure

• Mixpanel — Receives anonymized usage analytics events. No message content or personally identifiable information is sent.
• RevenueCat — Manages subscription status and purchase records.
• Apple Maps — Processes location data when you use mapping and directions features, per Apple's privacy policy.
• Resend — Delivers the emails we send you and receives email forwarded to your capture address. Forwarded message content is added to your inbox; delivery metadata is retained by Resend to send and receive mail.
• Google Firebase and Google Cloud — Host your account, your content, and uploaded files (authentication, database, and file storage).
• Qdrant — Stores the mathematical embeddings that power search across the content you save and the related items surfaced in chat. Only numeric representations are stored, not raw text.

Data Protection Assurances

All third-party AI service providers are accessed via their API services under terms that prohibit use of your data for AI model training. We have opted out of data training programs where applicable. Each provider maintains security practices consistent with industry standards to protect data during transmission and processing.

4. AI Chat Data Processing

When you send a message in Chunk, the following data may be transmitted to third-party AI service providers:

• Your message text and relevant prior messages in the conversation (for context)
• Uploaded images (if attached to the message)
• Relevant document excerpts (if document search is enabled)
• Memory context (if Memory is enabled, relevant stored memories are included for personalization)
• Relevant items from your own account (such as notes, documents, or captured items) that our search index identifies as related to your message, so the assistant can ground its answer in your saved content and show you related material. Only your own content is used.

This data is transmitted securely via encrypted connections (TLS). AI providers process this data solely to generate a response and do not retain it for model training or other purposes beyond the immediate request. We do not share your name, email address, or account information with AI providers.

5. Memory Feature

Chunk's Memory feature is entirely opt-in and disabled by default. When enabled:

• What is collected: Preferences, interests, professional details, goals, and other contextual facts are extracted from your conversations.
• How it is collected: Conversation messages are analyzed by our AI service providers (OpenAI, Google, Anthropic) to identify relevant facts. On supported devices, an on-device pre-filter screens messages before they are sent for processing.
• What is NOT collected: Passwords, Social Security numbers, credit card numbers, medical diagnoses, home addresses, and other sensitive personal information are automatically detected and filtered out — on your device where supported, and again on our servers — before anything is stored.
• How it is used: Stored memories are included as context in future conversations to provide more personalized responses.
• Storage: Memories are stored in encrypted format in our secure database.
• Your control: You can view all stored memories, edit individual memories, delete specific memories, or clear all memories at any time through Settings. You can disable the Memory feature entirely, which stops new memory extraction. Existing memories remain until you delete them.
• Third-party processing: Memory extraction uses third-party AI APIs (OpenAI, Google, Anthropic). These providers do not retain or use this data for training per their API data usage policies.

6. Search Indexing and Related Content

To let you search across everything you save and to surface your own related material while you chat, Chunk automatically creates vector embeddings of the content in your account. This includes your notes, uploaded documents, research reports, collections, items in your Quick Capture Inbox, artifacts, and — if you connect a Notion workspace — the Notion pages and databases you share with Chunk. This indexing now happens automatically as you create or save content; you no longer need to index items manually.

• Embeddings are generated using OpenAI's embedding API and stored in a vector database (Qdrant). Only mathematical (numeric) representations are stored there — not your raw text.
• Your original content and files remain stored in your account and are accessible only to you.
• When you search, or when you use chat, we use this index to find and surface items from your own account that are relevant to your query — for example, related notes shown alongside a chat response, or matching items when you search. Only content you own is retrieved; we never surface another user's content to you.
• Relevant excerpts of the items we surface may be included as context sent to your selected AI provider (see Section 4) so the assistant can ground its response in your saved content.
• Your chat and conversation history is not added to this search index.
• When you delete an item, its embeddings are removed from the index along with the item.

Browser Extension

The Chunk browser extension is designed to see as little as possible:

• It acts only when you click it — on the page you choose — and saves the page address, the text you select, or a link you pick. It does not run in the background or on pages you don't send to Chunk.
• It does not read your browsing history, passwords, cookies, or other browser data, and it does not inject tracking into the pages you visit.
• It signs in with a single-purpose capture token that can only create inbox items. The token is stored by your browser and is shown to you only once; you can reset or revoke it at any time in Settings, which immediately disconnects the extension.

7. Your Privacy Rights

You have certain rights with respect to your Personal Information, including those set forth below:

Access: You have the right to request what personal information we have collected and stored about you.

Deletion: You can request us to erase or delete all or some of your personal information. You can also delete your account and all of its data yourself at any time from Settings → Danger Zone → Delete Account (in the web or native apps), which permanently removes your content, files, and search indexes.

Correction/Modification: If you believe your personal information we hold is incorrect, you have the right to ask for its correction or modification.

Objection: You can contact us to let us know that you object to the further use or disclosure of your personal information for certain purposes.

Portability: You have the right to receive your personal information in a structured and standard format.

Restriction of Processing: You have the right to request that we restrict the processing of your personal information.

Right to File Complaint: You have the right to lodge a complaint about our practices with respect to your personal information with the supervisory authority of your country or EU Member State.

For any of the above requests, please contact us at [email protected]. We will consider and act upon any such requests in accordance with applicable data protection laws.

8. Data Retention

We will retain your Personal Information for as long as it is needed to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

Items in your Quick Capture Inbox remain until you save or discard them; discarding one permanently removes it and any file stored with it. Automation definitions and their run history are kept until you delete the Automation. You can delete captured items, saved notes, documents, and Automations at any time in the app.

9. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personal identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.

10. International Users - Legal Bases for Processing (for EEA, UK and Swiss Users)

If you are a user from the EEA, UK or Switzerland, our legal bases for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us at [email protected].

11. Security

We make reasonable efforts to protect your information by using physical and electronic safeguards designed to improve the security of the information we maintain. However, as no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information.

We protect your data with measures appropriate to its sensitivity — including encryption in transit (TLS), access controls, and storing capture tokens only in hashed form so they cannot be read if disclosed. If we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities without undue delay and as required by applicable law.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.

13. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at [email protected].

14. California Privacy Rights

California law allows California residents to request information regarding our disclosures in the prior calendar year, if any, of their personally identifiable information to third parties. To make such a request, please contact us at [email protected] with "Request for Privacy Information" in the subject line. Please include enough detail for us to locate your file; at a minimum, your name, email, and username, if any. We will attempt to provide you with the requested information within thirty (30) days of receipt.

15. European Union (EU) Privacy Rights: GDPR

If you are a resident of the European Union (EU), you have certain data protection rights under the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information. Please contact us at [email protected] to exercise any of these rights. If you are not satisfied with our response, you have the right to complain to your local data protection authority.

16. Data Transfer

Your information, including Personal Information, may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Information, to the United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. Curious Minds Software, LLC will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Information will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

17. Third-Party Services

Chunk integrates with multiple third-party services. We use API access for all AI service providers (OpenAI, Anthropic, Google), which means your data is processed under their API terms of service — distinct from their consumer product terms. Under these API terms, your data is not used for AI model training. We have opted out of data training programs where applicable for all AI providers.

For details on each provider's data handling:

• OpenAI API Data Usage Policy
• Anthropic API Usage Policy
• Google AI API Terms

When you use the Apple Maps integration, your location data may be processed per Apple's privacy policies. We do not store or further process your location data beyond providing the requested service.

Chunk also offers user-initiated Connectors that link your own Gamma or Notion accounts to Chunk so you can use those services from within a Chunk conversation (see Sections 1.I and 3). Connections require an active account with the provider, are established through the provider's OAuth flow, and can be revoked at any time. Your use of a connected app remains governed by that provider's own terms and privacy policy. We do not access your connected accounts except when you explicitly invoke a Connector, other than periodically indexing the Notion pages and databases you have shared with Chunk so they can appear in search and related-content results (see Sections 1.I and 6). Connector data is not used to train any AI model.

18. Notice to You

If we need to provide you with information about something, whether for legal, marketing, or other business-related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on our Service. The fact that we may send notices to you will not stop you from being able to opt out of certain types of contact as described in this Privacy Policy.

19. Generated Images

When you use our image generation feature:

• The content you create remains your responsibility
• We do not store or use generated images for purposes other than providing the service to you
• We do not claim ownership of the images you generate
• Your image generation prompts are processed through OpenAI's API services but are not stored by us for any purposes beyond providing the immediate service

20. Location Data Privacy

When you use location-based features in our app:

• Location access is only used when you actively request services that require location information
• Location data is processed in real-time to provide directions and mapping services
• We do not store, track, or maintain a history of your locations
• You can revoke location permissions at any time through your device settings
• Disabling location services may limit certain app features that require location data to function properly

21. Concluding Remarks

By using Chunk, you are consenting to our processing of your information as set forth in this Privacy Policy now and as amended by us. "Processing" means using cookies on a computer/handheld device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining, and disclosing information.

Changes to This Privacy Policy:

We may update our Privacy Policy from time to time to reflect changes in our practices, including new integrations with services. We encourage you to review this page periodically for the latest information on our data collection, use, and sharing practices. We take your privacy seriously and will always be transparent with our users.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about our practices, please contact us via email at [email protected].