Privacy Policy

Last updated: October 19, 2026

Larzo remembers what you share — that's the whole point. But your memories stay yours. Not ours, not anyone else's, not an ad network's. This page explains exactly how, in plain English.

1. What Larzo collects

Your messages — everything you type into Larzo (web or WhatsApp)
Filed memories — short summaries Larzo creates from your conversations, organised by category (you, family, work, health, ideas, general)
Your name and (optional) email — to greet you and send your daily briefing
Phone number — only if you use WhatsApp, to identify you across sessions
Basic usage data — how often you visit, how many messages you've sent (counts only, no content)

That's it. No location. No contacts. No browsing history. No tracking pixels. No analytics services.

2. How your messages are processed

When you send Larzo a message, this is exactly what happens:

Your message travels over HTTPS to the Larzo server
Your recent conversation history and filed memories are pulled from the database (decrypted for the duration of the request)
All of this is sent to Anthropic's Claude API to generate Larzo's reply
The response comes back, is saved encrypted, and shown to you

The Anthropic part, honestly explained

Larzo's intelligence comes from Claude, which is made by Anthropic. Your messages do pass through Anthropic's servers. However:

Anthropic's API does not use your conversations to train AI models — this is a contractual commitment, not a promise. It's the main reason we chose Claude.
Anthropic does not sell your data or use it for advertising
Your data is not pooled or shared with other Anthropic customers

Think of it like a calculator that needs the cloud to compute — the data passes through, but isn't stored or learned from.

When Larzo looks something up on the web

Most of the time Larzo has no live internet access — it answers from what you've shared and from Claude's own knowledge. In the web app, in limited cases, when you ask about something that needs current information, Larzo can do a web search to answer you. When that happens, we've built it to protect you:

The search is built only from the words you typed in that conversation — never from your filed memories.
Your stored memories and conversation history are never sent to the search.
The lookup runs in a separate, isolated process that cannot reach your database, your memories, or your account — it only knows the search words. The lookup itself is performed through Anthropic's web search tool.
A reply that used a web search is not saved as a memory.

Web search is off by default and is currently enabled for only a small number of testers while we refine it.

3. Encryption at rest

Your messages and filed memories are encrypted at rest using AES-256-GCM, with a key derived from your personal access token. This keeps your content out of casual view and protects a partial data leak (for example, an exported table on its own).

To be precise — and because we won't overstate this: Larzo is not end-to-end encrypted. Larzo has to read your data to do its job (write your morning note, set a reminder, reply to you), so our system processes it in readable form the moment a feature runs, and your access key is stored alongside your data on the same machine. Everything lives on a private Mac we control — not a big cloud with staff browsing it — and it is never sold or used for advertising.

Honest caveat: Larzo is in private beta and currently runs on the operator's own machine. The server briefly handles your messages in plaintext to send them to Claude — this is unavoidable for any AI app, including ChatGPT, Replika, and others. There is no admin screen that shows your conversations, and the operator does not read user chats. As a friend-beta product, this rests on trust as well as technology.

4. What we can and cannot see

What we CAN see

That you used Larzo (timestamps, message counts, last active)
Which memory categories you're filing into (work, health, family, etc.) — counts only, not content
Your name and email (if you provided one)

What we CANNOT see (without your token)

The content of your messages
The content of your filed memories
Anything you've shared with Larzo

5. Your data, your control

Delete anytime. You can delete any message or clear your entire conversation history from inside the app. Deletion is permanent.

Export anytime. Ask Larzo to email you your memories and it will.

Account deletion. Email the address at the bottom of this page and your account, messages, and memories will be permanently removed within 7 days.

No lock-in. Your story is yours.

6. Data sharing

We do not sell your data. We do not share your data with advertisers, data brokers, or any third party — except Anthropic (to generate replies) and your email provider (to deliver briefings you've opted into). That's it.

7. Children

Larzo is for adults (18+). If you're under 18, please do not use this service.

8. Security incidents

If we ever discover that user data was accessed without authorisation, we will notify affected users by email within 72 hours of confirming the incident, explain what happened, and tell you what to do.

9. SMS & text messages

If you add your mobile number and check the SMS consent box during signup, Larzo may send you automated text messages — the reminders and check-ins you signed up for. Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help.

We do not share or sell your mobile phone number, or your SMS consent, to any third party or affiliate for marketing or promotional purposes. Your number is used only to deliver the Larzo messages you asked for — transmitted via our messaging provider (Twilio) for that sole purpose, and nothing else.

10. Changes to this policy

If this policy materially changes, we'll notify you by email (if we have one for you) and via a notice inside the app before the change takes effect.

Questions about your privacy? Email deeplaxmi@gmail.com.