Privacy policy
Effective October 23, 2026
x² (x2s.ai) and Tuan, its assistant, are run by Paperbleach Inc. ("we"). This policy explains what we collect when you use Tuan on the web, in the iPhone and iPad app or on Apple Watch, what we do with it, and the choices you have.
Who can use Tuan
Tuan is invite-only: an administrator adds each person, and there is no public sign-up. It is not meant for children under 13.
What we collect
- Your account. Your name and email address, how you sign in (Google, a passkey or a one-time code), and the devices you pair. For your security we record each sign-in: when, from which IP address and on which kind of device.
- What you say and type. Your voice is streamed to our servers to turn it into text, and the assistant's answers are spoken back to you. Your conversations, transcripts and meeting notes are kept in your account so you can come back to them.
- What you add. To-dos, notes, calendar entries, contacts, files and the other things you keep in Tuan.
- What you connect. If you connect an account, such as Google for mail, calendar and Drive, or add one of your computers as a server, Tuan reads and acts on it when you ask, and keeps the access it needs to do that. You can disconnect it at any time.
- Calls and texts. If you ask Tuan to call or text someone, it goes through our telephone provider, and its transcript is kept with your conversation.
- Your device. Its model, system and app version, so Tuan works on it. Our apps contain no advertising, analytics or tracking code, and we don't use advertising identifiers.
How we use it
Only to run Tuan for you: to understand what you ask, answer you, carry out the tasks you give it, keep your history and keep your account secure. We don't sell your information, show you ads, or share it with anyone for their own purposes.
Who handles it for us
- Our own servers store your data and run speech recognition and speech synthesis.
- Anthropic provides the Claude models that write the assistant's replies: the parts of your conversation and the content needed to answer you are sent to Anthropic for that, under its commercial terms.
- Google, when you sign in with Google or connect your Google account.
- Twilio, our telephone provider, when Tuan places a call or sends a text for you.
- Apple, when you install a test version through TestFlight: the crash reports and feedback you choose to send reach us through Apple.
- Our mail service, for the emails Tuan sends you, such as sign-in codes, invitations and security alerts.
- Apple, Google or Mozilla, whose push services deliver the notifications you turn on to your browser or device. What a notification says is encrypted so that only your device can read it.
Keeping and deleting it
We keep your data while your account is active. You can remove devices and sign-ins in Settings › Access, and disconnect any account you connected. To delete your account and its data, email us: we'll delete it, except anything the law requires us to keep.
Security
Your devices reach our servers over encrypted connections. Each person sees only their own data and what others share with them, each paired device has its own key that can be revoked, and you're told about each new sign-in.
Changes
If this policy changes, we'll update this page and its date, and tell you in the app when the change matters.
Contact
Questions or requests: team@x2s.ai.