Your Passport is yours.

What this notice covers

This notice covers LOCI Passport, World, Bring My AI, My Phrases, LOCI Place, and related web and mobile services. LOCI Passport holder data and LOCI Place operator data are deliberately separated.

Information we process

• Account and contact: email, preferred name, authentication and support records.
• Passport content: places, Somedays, Promises, Journeys, Planner timing and watch choices, Stamps, memories, relationships, preferences, phrases, voice, media, and context you choose to add.
• World and AI Handshake: proposed and approved World Seed items, known-versus-inferred state, confidence, provenance, review decisions, saved places, and avoid topics.
• Location: places you declare or save and, only when a feature needs it and you permit it, coarse or precise device location. Night Sky can optionally use browser location inside the current tab; those coordinates are not uploaded or saved.
• Place operator data: public source URLs, public Place facts, authority attestations, work contact details, review decisions, delivery settings, and billing state.
• Operations: device and session signals, security events, feature events, errors, delivery receipts, and payment identifiers. LOCI does not store full payment card numbers.

Why we use it

We process information to provide and secure your account; preserve Passport continuity; personalize World; perform an AI Handshake you initiate; answer or act on a specific request; analyze authorized public Place sources; deliver private reports; bill for paid services; prevent abuse; support users; and meet legal obligations. Where required, we rely on consent, contract, legitimate interests, or legal obligation as appropriate to the purpose and region.

AI and agents

Bring My AI is a paste/file boundary. LOCI does not secretly connect to your AI account or ask for its password or conversation archive. Imported items remain proposals until you review them. When a model helps with a feature, we send bounded context for that purpose, validate its output, and treat it as inferred—not authority. We do not use Passport content to train general-purpose models by default.

Sharing and service providers

We share the minimum necessary information with infrastructure and service providers that help operate LOCI, such as hosting, database and authentication, storage, email delivery, payment processing, monitoring, and configured AI providers. Current architecture supports providers including Supabase, Stripe, Resend, deployment hosting, and model APIs when enabled. A place does not receive an entire Passport. Public Place intelligence does not contain Passport-holder data.

We may disclose information when required by law, to protect rights and safety, during a corporate transaction with appropriate safeguards, or when you direct us to share it. We do not sell personal information or use it for cross-context behavioral advertising.

Retention and deletion

Anonymous Genesis drafts and staged media expire automatically. Handshake drafts expire after 24 hours. Security, audit, billing, and transaction evidence may be kept longer where needed for integrity, fraud prevention, tax, legal claims, or law. Account content is kept while your account is active and then deleted or de-identified after a verified request, subject to those narrow exceptions and backup aging. Provider-authoritative records may also need to be deleted with the provider.

Your choices and rights

You can review, correct, remove, or stop sharing many items inside Passport; reject every AI proposal; revoke agent authority; remove saved phrases and World items; and request access, export, correction, restriction, objection, or deletion where applicable. We verify requests to protect your Passport. Contact privacy@locipassport.com.

Security, children, and international use

We use access controls, encryption in transit, private-by-default storage, short-lived capabilities, validation, rate limits, and audited privileged operations. No system is risk-free; see our Security page. LOCI is not directed to children under 13, or a higher local minimum age. Information may be processed in countries where our providers operate, using appropriate contractual or legal safeguards where required.

Changes and contact

We will update the date and provide appropriate notice if this policy materially changes. Privacy questions or rights requests: privacy@locipassport.com. Security reports: security@locipassport.com.