Privacy
Last updated 1 October 2026. Fiffy is operated by Medhavia LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA.
The short version
Your conversations with AI agents never reach us. They go from your computer straight to the provider whose key you supplied. We hold your email address, what you have paid for, and an opaque identifier for each device you use Fiffy on. That is the whole list.
What stays on your computer
Your tasks, folders, messages, the replies you get and anything Fiffy remembers for you are stored in an encrypted database on your own machine. The key to it is held in your operating system's keychain. We have no copy and no way to read it.
Your API keys for OpenAI, Anthropic and the rest are kept in that same keychain. They are never sent to us, and the app has no code that could.
If you turn on sync, your data is encrypted on your machine before it is uploaded to storage you configure and control. We are not a party to it and cannot decrypt it.
What we hold, and why
| What | Why | How long |
|---|---|---|
| Your email address, encrypted at rest | So you can sign in, and so we can send you a sign-in code | Until you delete your account |
| Your subscription's status and renewal date | To decide whether the app should run | While you have a subscription, then as our reseller's records require |
| An opaque identifier for each device, and when it was last seen | To enforce the device limit, and to let you free a slot | Removed when you release the device, or after 30 days unused |
| Whether you agreed to be emailed about the product, and when | So we only write to people who asked | Until you withdraw it |
What we deliberately do not hold
We do not store your name, your postal address, your card details or your country. Our reseller collects what it needs for tax and we do not keep a second copy. We do not derive your location from your IP address.
The device identifier is a random string. It is not your machine's name, because a machine's name is usually a person's name.
Notifications
If you ask Fiffy to tell you when a long run needs you, the message we send carries the task's name, what happened, and when. It never carries your prompt or the reply. Turning a channel on is a separate choice for each kind of event, and everything is off until you turn it on.
Payments
Paddle.com Market Ltd is the merchant of record for everything you buy from us. They collect your payment details and your billing address; we never see either. Their privacy notice governs what they do with it, and it is linked from the checkout.
If you subscribe through Apple instead, Apple is the seller and their terms apply.
Crash and usage reports
Off unless you turn them on. If you do, they carry no conversation content — only what went wrong and which version it happened in.
What you can do
You can see everything we hold about you, and delete your account, from your account page — no email to us required. Deleting removes your address and signs every device out. Our reseller keeps its own billing records, which it is obliged to.
You can withdraw consent to product email on the same page, at any time.
If you want a copy of your data, or want something corrected, write to team@fiffy.ai.
Who else sees anything
| Who | What they get |
|---|---|
| Paddle | Your payment and billing details, directly from you |
| Postmark | Your email address, to deliver a sign-in code |
| Telegram or WhatsApp | Only if you link them, and only content-free alerts |
| The AI providers you configure | Your prompts, directly from your machine under your own account |
Nobody buys anything from us, because there is nothing to sell: we hold no profile of you.
Changes
If this changes in a way that affects what we hold or who sees it, we will say so on this page and date it. Continuing to use Fiffy after that is acceptance of the change.
Contact
team@fiffy.ai, or write to Medhavia LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA.