Privacy Policy

SAPIO TREE — PRIVACY POLICY

Last updated: 2026-07-25

1. WHO WE ARE

Sapio Tree ("the Service") is operated by the operator of Sapio Tree ("the Operator"). Contact: aditus.sapientium.t@gmail.com

2. INFORMATION WE COLLECT

• Account: email address and password (managed by our authentication provider; passwords are stored in hashed form, never in plain text).
• Profile: pen name, optional country, optional profile photo.
• Content: questions you post, AI responses generated through your keys, forks, likes, and timestamps.
• Technical: basic logs generated by our infrastructure providers (e.g. IP address, access times) for security and operation.

3. WHAT WE DO NOT COLLECT

• API keys: your third-party AI keys are stored only in your browser (localStorage). When generating a response or translation, your key passes through the Service's server solely to relay the request to the AI provider; it is used transiently and never stored or logged by the Operator.
• We do not use advertising trackers and do not sell personal data.

4. HOW WE USE INFORMATION

To provide the Service (displaying the public tree, profiles, rankings, search, translations), to maintain security, to enforce our Terms, and to respond to inquiries.

5. PUBLIC BY DESIGN

Your pen name, optional country flag, optional photo, and all posted content are public and visible to anyone. Do not include personal information in your posts.

6. INFRASTRUCTURE AND THIRD PARTIES

The Service runs on third-party infrastructure: Supabase (database, authentication, storage) and Vercel (hosting). Your data is processed on their systems under their security practices. When you use your API keys, your prompts and conversation context are sent to the respective AI provider (e.g. Google, Anthropic, OpenAI) under their terms and privacy policies.

7. COOKIES AND LOCAL STORAGE

We use browser storage for: your login session (authentication), your API keys (local only, per device and account), language preference, and liked-post markers. We do not use third-party advertising cookies.

8. RETENTION AND DELETION

• Content you delete is tombstoned: its text is removed from the database, while the structural record remains in the tree. Tombstoned content is excluded from AI conversation context in subsequent forks and responses.
• To request account deletion or removal of specific data, contact aditus.sapientium.t@gmail.com. We will respond within a reasonable period.

9. YOUR RIGHTS

Depending on your jurisdiction (e.g. GDPR in the EU, APPI in Japan), you may have rights to access, correct, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact the email above.

10. CHILDREN

The Service is not directed to persons under 15. If we learn that an account belongs to someone under the applicable minimum age, we may suspend it and delete associated personal data.

11. CHANGES

We may update this Policy. Material changes will be indicated by updating the date above. Continued use after changes constitutes acceptance.

12. CONTACT

aditus.sapientium.t@gmail.com