Privacy · Source/disclosure reviewed 18 October 2026
Bring the task. Keep sensitive details out.
There is no sign-in, but Ask Bit can save conversation text, profile and notes. Shape and length limits do not remove identifiers. Use made-up examples and keep identifying or confidential information out of what you type.
No sign-in, but Ask Bit has saved conversation and profile data
Ask Bit can save what you type when shared storage is available. A browser localStorage identifier addresses a server snapshot of your conversation, profile and notes, displayed record IDs and update time. It keeps the latest 40 messages, with each text capped at 4,000 characters. Those bounds do not remove identifying information. Configured Upstash storage sets a seven-day expiry after each successful snapshot write. That is seven days after the last write, not the original message. Closing your tab does not establish server deletion.
What Forget this does
Forget this clears profile and notes, but keeps the conversation and rewrites it with a fresh seven-day expiry. It does not clear question snippets. The current public route does not expose the store's full-conversation clear method.
AI-provider processing
Source supports Anthropic or OpenAI through configuration and key selection. Ordinary Bit turns can send messages and prior conversation to the configured AI provider. The deployed provider, model, region, account terms, training use and retention settings are unverified. Consumer ChatGPT or Claude policies are not this app's provider contract. Use made-up examples and withhold identifying or confidential information. Redaction alone does not guarantee that a document is suitable to share. Authored app-privacy replies make no AI-provider call for that reply; their questions can still be captured or saved and later included in ordinary provider history.
Question prefixes and write-triggered pruning
Accepted non-demo turns can be captured as a lowercased, trimmed, whitespace-normalized prefix of up to 300 characters, with timestamp and outcome. No session or IP identifier is passed into that capture record, but identifying text can remain: it is not anonymous. Later writes prune entries older than 90 days and cap the collection at 5,000. There is no independent timer or TTL proving deletion after 90 idle days. The frozen legacy v1 capture collection is explicitly left alone by this code. Its current existence and contents are unknown; this code does not establish that older captures were deleted.
Work Planner tab storage is separate
Work Planner uses browser sessionStorage and separate plan endpoints. Its tab storage is distinct from Ask Bit's server snapshots; closing a tab is not proof that all server or provider copies are deleted.
Typed-work transfers
New typed-work transfers use opaque identifiers and five-minute validity. This does not erase legacy URLs, prove timed deletion of all abandoned payloads, or establish what analytics records.
Journey counts and analytics settings
Fresh application loads no longer initialize PostHog or Vercel Analytics. First-party journey measurement sends only fixed event names, such as a guide opening or a completed Bit reply. When shared storage and rate-limit configuration are available, it keeps daily aggregate counts for 90 days. No prompt, query, reply, profile, session identifier or event properties enter those counters. A salted network hash is used only to limit requests and expires after 60 seconds. Counts cannot reconstruct a person's journey or prove a task succeeded. Storage uses the existing Upstash service; its deployed region and account settings remain unverified. Older tabs or previously held vendor data may remain. This does not make anything typed into Bit confidential.
Email only if you subscribe
If you sign up for the Weekly, your email address is stored with Mailchimp for the newsletter. Editions include an unsubscribe link; this source review does not audit effective provider account settings.
External sources have their own policies.
Updates, tool guides and lessons link to official providers and independent publishers. Opening those links takes you outside The Human Bit, where the destination’s privacy and tracking rules apply.