What we do
Offer anonymous use; keep memory off by default; encrypt data in transit and at rest with configured providers; isolate user records; redact operational logs; and send only content-free product events to analytics.
Advertising measurement
Meta receives page and conversion events so walkwith can measure advertising and avoid paying for irrelevant traffic. These events may include browser identifiers and technical request data. We never send Meta your phone number, email address, conversation, journal, memory, cited passages, or the subject you discussed.
What we do not do
We do not sell private chat data, target advertising with conversation content, silently train on conversations, or include journal entries in model context without explicit user action.
Your controls
Delete individual conversations, inspect and erase memory, export account data, or permanently delete the account. Identity verification protects export and deletion actions from abuse.
Retention
Anonymous conversation content is held for up to 24 hours so it can follow you into an account if you choose to sign up. After sign-in it becomes private account history; without sign-in it expires. Authenticated history follows your history setting. Safety and abuse-prevention events retain only the minimum classified metadata.
Vendors and access
Production data flows are inventoried across hosting, database/authentication, AI, Stripe, email, analytics, and error monitoring. Administrative access is least-privilege and audited. No admin screen enables casual browsing of private conversations.