Privacy
The short version: your words build your model, and nothing else.
Your corpus is used for one thing: your model.
The conversations you upload are read only to produce your own outputs — your profile, your Mind Card, your context.md. They are never sold, never shared with third parties, and never used to train any model. Ours or anyone else's.
Read once, then gone.
Your export is processed for your run and then deleted. What persists is what you asked for: the derived model and the mind file, stored for you, at a private link only you hold.
One-click deletion and export.
You can download everything Metsu holds about you, and you can delete all of it — corpus, model, and derived rows — in one action. No email, no support ticket.
Analytics is metadata only.
We measure the funnel — how many people finish a run, share a card, upgrade — using event counts. No corpus content ever enters an analytics payload. That is enforced by a typed event schema, not a promise.
What we will never do.
Sell or share your individual profile or inferences. Build employer-facing emotion analysis. Attach a clinical or diagnostic label to you. These aren't roadmap gaps — they're refusals.