Dualist.
Back

How we hold your data

Last updated May 29, 2026

Dualist is a private journal for your relationships. Here is the plain truth about how your data is stored, who can read it, and the controls you have — written to match what the system actually does, not to sound reassuring.

Encrypted at rest

Everything you write — your entries, the people you hold in view, your notes, and the AI's reflections — is encrypted at rest with a key unique to your account. If our database were copied, the contents would be unreadable without that key.

Who can read it

You can, of course. Dualist's systems also decrypt your data on our servers to show it back to you and to power your reflections — search, syntheses, and your constellation. This is not end-to-end encryption: to write a reflection, our servers read the relevant entries in the clear for the moment it takes to produce it.

AI and your data

To write reflections we send the relevant parts of your entries to a third-party AI provider (Anthropic today). Under our commercial API terms that provider does not use your data to train its models, and we are moving to a per-request zero-retention guarantee. We never use your data to train our own models, and we never sell it.

Feelings stay yours

Entries you mark as a private feeling are treated as your internal state. They are annotated as internal everywhere the AI reads them, and are never presented as a fact about another person.

Your controls

Account recovery

From Settings you can generate a 24-word recovery phrase — an independent backup of your encryption key. We never store the phrase, and it does not change who can read your data on our servers.

Export your data

You can ask for an export at any time. We prepare a decrypted archive of everything Dualist holds about you and email you a private, expiring download link.

Delete your account

You can delete your account from Settings. You have a 24-hour grace period to change your mind by signing back in; after that, your data is permanently erased. Deletion cannot be undone, and a recovery phrase will not bring it back — export first if you want a copy.

Questions about your privacy? Reach out and we'll explain anything on this page in plain terms.

This note describes the current system. We update it here when the architecture changes.