Privacy and security | OnSubject.AI

Principles

Your Scenarios, documents, conversations and saved sessions are files on your PC.

When you ask for an answer, only what that answer needs is sent, at the moment you ask.

Everything that leaves your PC travels over encrypted connections.

We work only with AI providers that don't use your data to train their models.

Scenarios and documents: your instructions and reference files, in your Scenarios folder.
The search index that makes big document sets quick to search. It's built and kept on your PC.
Conversations: each Scenario saves its conversations as you talk, with the transcript and the answers. They're plain text files (in Markdown format) in the Scenario's own Conversations folder. You can read, move or delete them like any other file. Save writes a copy to a file that you choose.
Audio, with your PC's speech detection: it's recognised on your PC and never sent.
Settings, and the phone companion's certificates. The certificates are encrypted, so only your Windows account can read them.
Logs for troubleshooting, which never contain your conversations or documents.

When you ask for an answer	The AI that writes the answer gets your Scenario's instructions, the relevant documents (including the conversations that the Scenario remembers), the recent conversation, the answers already given in it, and a screenshot or photo if you included one. For big document sets, it gets the core documents, a map of the folders and the passages that match instead. Documents that the AI decides to open are sent when it opens them.
When you start listening	Your Scenario's instructions and documents are loaded once, in advance, so that the first answer is as fast as the ones after it.
With AI transcription	Speech is sent to the transcription service, one sentence at a time. Silence isn't sent.
With your PC's speech detection	Listening doesn't send anything, because speech is recognised on your PC.
For your account	Your email address, your plan, and usage counts (how many answers and listening hours you've used). This never includes the content of your conversations.

Off until you turn it on. After that, it can only be reached on your local network.
Direct: the companion comes straight from your PC. Your conversation doesn't pass through our servers on its way to your phone.
Paired: the QR code carries a secret, and a phone can't connect without it. The 6-digit code works once, for 10 minutes. You can disconnect every phone at any time, and that creates a new secret.
Encrypted with a certificate authority that your PC creates for itself. You can compare its fingerprint on both screens.
Only the pairing secret stays on the phone. The phone's audio and photos go to your PC, and they're handled like the PC's own.

Connections to our services and to AI providers are encrypted with TLS, the same encryption that secure websites use.
Your sign-in and the phone certificates' private keys are encrypted with Windows data protection, so only your Windows account can read them.
OnSubject.AI captures your screen only when you ask it to (with Answer + screen, or a part of the screen). While it captures, it hides its own window.
You can turn off each global hotkey (a shortcut that works from any app). That way, OnSubject.AI doesn't take over another app's shortcut without your consent.

OnSubject.AI gives you control, and using it well is up to you:

Tell people that you transcribe. In many places, you must tell the participants, or get their consent, before a conversation is recorded or transcribed. OnSubject.AI keeps what it transcribes in your Scenarios.
Be careful with what you share on screen. When you share your whole screen, others see everything on it. Close OnSubject.AI's window first. It keeps running in the background, and your phone shows the answers.
Choose your documents. Put only what you're allowed to use into a Scenario. Take special care with confidential material from your employer or clients, and with source code.

If you have questions about privacy, write to [email protected].