Euzena Privacy Notice
Version 3.0 · Effective October 19, 2026 · Last updated October 2026 · See the version history at the end.
The short version
- Euzena is a personal AI assistant run by Pathstead AI Labs LLC ("we", "us"). This notice explains what we collect, why, who receives it, how long we keep it and what you can do about it. We show it to you with our Terms when you sign up.
- We keep what you give us so Euzena can help you: your account, your goals and plans, your notes and your conversations. Your records are encrypted with keys unique to your account.
- To answer a question, we send it, with context from your chats, which section 6 lists, to an outside AI service. The service states that it keeps none of what you send and does not train on it; section 6 says which of those statements is in our contract with it.
- Using the microphone sends a recording through Euzena to an outside AI service to turn it into text. This happens before you press Send or Next; the text is handled like words you type.
- If you tick the separate health information box at sign-in, Euzena can use what you share for AI answers, self-discovery and optional dictation. For self-discovery, we send only your submitted answers, the questions they answer, your chosen depth and the areas you marked to an outside AI service to prepare follow-up questions and suggested directions. The model host states in its published documentation, not in our contract with it, that it may keep what was sent and returned for up to 30 days for security or abuse checks.
- We do not sell your information or share it for advertising, and our site has no analytics or advertising trackers. Euzena does not use what you write to train a model.
- You can see, export and delete your records at any time, and turn answers off.
- We tell you on the channel your invitation arrived on before a major change to this notice takes effect, and ask you to agree again.
1. Who we are and what this notice covers
Pathstead AI Labs LLC, a California limited liability company, runs Euzena. This notice covers euzena.com and the Euzena assistant. Euzena is an invite-only beta offered in the United States to people 18 or older.
When you connect another service, such as your calendar, that service keeps its own copy of your information under its own terms.
2. Words we use
- Account records: your profile and onboarding answers, Journeys, Actions, outcomes, notes, learned context and the receipts for choices you make about your account.
- Conversation: a chat between you and Euzena, on the website.
- Context: what goes with a question: recent messages in that chat, saved details you pick to include, and your answers to follow-up questions. Section 6 lists it.
- AI service: an outside company whose AI model writes Euzena's answers or turns your microphone recordings into text.
- Connected service: a service you choose to link to Euzena, such as your calendar.
3. What we collect, why, and how long we keep it
| What | Where it comes from | Why we use it | How long we keep it |
|---|---|---|---|
| Sign-in details: a one-way digest of your Google account identifier, a one-way digest of your invitation code, the record that you were admitted, and your browser sessions | Google sign-in and your invitation | To sign you in and keep your account yours | While your account exists |
| Account records | You | To help you plan, act and follow through | While your account exists, with earlier versions of what you changed; see section 9 |
| Conversations | You and Euzena | To answer you and continue where you left off | Unsaved: deleted 30 days after the last change. Saved: until you delete it or your account |
| Microphone recordings, if you use the microphone | You | To turn speech into text in the field you choose | Held temporarily for transcription; Euzena does not add the recording to your stored records |
| Your waiting-list entry, if you joined the waiting list: email, and optionally your name and one answer | You | To invite you, and nothing else | 12 months from the day you sent it |
| Mail you send to contact@euzena.com | You | To reply and act on your request | Until your request is resolved, then up to 12 months |
| Request counts: a keyed fingerprint of your internet address, not the address | Your browser's requests | To protect the service from abuse | Until its counting window ends |
| Server log lines, which carry no name, account, internet address or anything you wrote | The server | To keep the service running and investigate problems | Up to 14 days |
We do not ask Google for your name or photograph, and we ask for no payment method.
Your waiting-list entry is stored readable, not encrypted, because we cannot send an invitation to an address we cannot read, so we and the hosting companies can see it. You can remove it at any time on the waiting-list removal page, with no sign-in, or by writing to contact@euzena.com. Removing it does not reach the saved copies of our database that section 9 lists until they are deleted.
If you used Euzena before signing in, your browser holds those records itself. They are not backed up, and clearing your browsing data clears them.
On a beta this small, the time of a log line can show that somebody was using Euzena then.
4. Your conversations
Your conversations are encrypted like your other records. A conversation you have not saved is deleted 30 days after it last changed; if you unsave one, its 30 days start again. A saved conversation stays until you delete it or your account. You can delete any conversation yourself.
Resetting your context removes your profile, onboarding answers, Journeys, Actions and learned context. It keeps your notes and conversations for you to read, but Euzena stops using them when it answers.
5. What we never do
- We do not sell your information, and we do not share it for advertising.
- Our site has no analytics or advertising code, and we do not track you across other websites. We do not let other companies track you on our site. Because we do no such tracking, a browser's "Do Not Track" signal changes nothing here.
- Euzena does not use what you write to train a model.
- Euzena does not currently have a support tool for viewing user records. We do not access the content of your records except where required by law or as described in section 8. We diagnose technical problems using records and logs that do not contain the content of what you write.
6. How a chat question is answered
- When you send a question, Euzena sends it to an outside AI service, together with: a reference that ties the answer to your question; your answers to follow-up questions Euzena asks; recent messages in that chat, which you can change; and saved details about you that you pick to include. Nothing else you have written goes with it, and neither does your email address or your internet address.
- If an attempt fails, Euzena may try again.
- The AI service states that it keeps none of what you send: we have turned on its setting that keeps no copy of your question, its context or the answer. That statement is in its published documentation, not in our contract with it. The service still records usage, such as how much was sent and when.
- The service also states that it does not train on what you send, and that statement is in our contract with it. We rely on these statements, check them at least every 30 days, and stop sending questions if we cannot confirm them. They were last checked on October 12, 2026.
- Answers are on from when you sign up if you give the health information consent there, as our Consumer Health Data Notice explains. You can turn answers off at any time on your permissions page. After that Euzena sends no more questions for answers. Turning answers off does not turn off microphone dictation; to stop both, withdraw your health information consent on your permissions page. A question already sent cannot be called back.
Microphone dictation
When you use the microphone, your browser records what you say. When you finish recording, Euzena sends the recording through its server to an outside AI service to turn it into text. Audio is sent for transcription before you press Send or Next. Euzena sends the recording and a language hint, not your chat history or other stored records. The text appears in the field for you to check or edit, and follows the same saving and submission behavior as words you type.
Euzena holds the recording temporarily to transcribe it, does not add it to your stored records, and does not put recording or transcript content in logs. Euzena does not create a voiceprint or use your voice to identify a speaker, and does not ask the transcription service to identify one.
The transcription service states that with its zero-retention setting on, it does not retain recordings or transcripts for reliability or abuse monitoring. That statement is in its published documentation, not in our contract with it. Its terms still allow handling needed to provide the service or comply with law. The service states that it keeps usage records without recording or transcript content; this is published documentation, not a contract promise.
Microphone dictation needs your health information consent. Withdrawing that consent stops new transcription requests as well as answers. A recording already sent cannot be called back. Text already saved follows the deletion choices for that record.
Model help during self-discovery
When you tick the separate health information box at sign-in, you agree to AI help for answers, self-discovery and optional dictation. During self-discovery, Euzena sends the answers you have submitted, the questions they answer, whether you chose a focused or deeper reflection, and the areas you marked in the life scan to an outside AI service. We send no unfinished writing, chat history, notes or other saved account records for this purpose. The service uses that information to prepare a follow-up question, a proposed summary and possible Journeys. You review these before choosing a Journey. Nothing is sent for this purpose without your current agreement and express health information consent for this purpose.
The model host states in its published documentation, not in our contract with it, that it may keep what we send and what it returns for up to 30 days to detect or respond to security or abuse concerns. Its documentation also says some model partners may keep data for safety purposes. We do not control those copies. For paid accounts, the model host states in its published documentation, not in our contract with it, that it does not use inputs or outputs to train models or improve its services. We send nothing under this feature unless that paid-account statement applies to the service we use.
You can stop future AI use in Permissions. That stops new requests for the purpose you withdraw; it does not recall a request already sent or delete answers already saved in Euzena. You can delete those records using the choices in section 9. A copy the model host kept follows its stated period, even if you withdraw permission or delete your Euzena account.
7. Text messages
Texting is not open yet. When it opens, it works as described here.
You can connect up to three phones on the connections page of the website. Euzena texts a six-digit code to the phone, and you type it on the website within ten minutes. Euzena then recognises your messages by a keyed fingerprint of the number, keeps the number itself encrypted to reply to you, and keeps its last four digits so you can see which phone is connected.
Euzena texts you only to send that code and to answer the messages you send. Message frequency varies. Message and data rates may apply. Reply HELP for help or STOP to stop.
Text messages are not end-to-end encrypted. The company that delivers our texts, and your mobile carrier, carry them and can read them. The delivery company keeps the text of messages, and carriers keep their own records.
We keep a record of each text you send and each text we send you. A record holds your message encrypted until Euzena has processed it, then only a fingerprint of your number, and is deleted 14 days after the text was sent.
When you reply STOP, we stop texting that phone and pause the connection. We keep the paused connection, with the encrypted number, until you reply START, disconnect the phone on the website, or delete your account. While texting is paused, a message from that phone gets at most one reply a day saying texting is off.
If you disconnect a phone, we delete the number from the connection at once: the encrypted copy, the fingerprint and the last four digits. The records of your recent texts keep the fingerprint until their 14 days end. A code you asked for but did not use leaves nothing behind. Resetting your context also disconnects your phones.
If you text Euzena's number without an account, we make no account from your text and reply, at most once a day, with a link to sign in and connect a phone. For such a message we keep, for 7 days, a fingerprint of the number, the message's reference and when it arrived, not what it says, and for 2 days a note that we already replied.
8. Who receives your information
We use a small number of companies to run Euzena, and each receives only what its part needs. The companies that work for us do so under a contract:
- Hosting. The companies that host our server and database, and hold the keys that encrypt your records, can see that your records exist, which kind each is, its name, how many versions it has, and when it was written or changed. They can also see whether a conversation is saved and when it expires, whether your invitation was accepted, whether your account is active, how far a deletion has got, and request counts. What your records say is encrypted.
- AI services, as section 6 describes.
- AI assistants. The providers of AI assistants we use to develop and maintain Euzena. When we use these tools on our systems, they may process information those systems hold, including yours. Each of these providers states that it does not train its models on that information under the settings we use; that statement is in its published documentation, not in a contract with us. They may keep it for the periods their own privacy policies describe.
- Google, to sign you in, and to work with your calendar if you connect it (section 13).
- Mail forwarding. The company that forwards mail sent to contact@euzena.com, and our mail provider, see what you write in a message.
We may also disclose information when the law requires it, such as in response to a valid court order, or to protect someone from serious harm. If Euzena moves to another company, such as a successor to Pathstead AI Labs LLC, your records move with it under this notice, and we tell you first.
If you email contact@euzena.com, we will tell you the names of the companies that received your information.
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
9. Deleting your account, and what deletion does not reach
You can delete your account from your account page. It has three steps, and you take each one: you prepare the deletion, you confirm it, and a 24-hour undo period starts. After those 24 hours we destroy your keys, remove your records and conversations, and check the places they were kept. Destroying the key makes the copy in our live database unreadable quickly; the check is there because that alone does not prove every copy is gone. If you connected your calendar, deleting your account also asks Google to end that connection, and events Euzena made stay in your calendar until you remove them. Deleting a single note removes it and all its versions at once.
Some copies sit outside our live database, and deletion does not reach them:
- Our database keeps a restore history of the last six hours. After any restore, we apply every deletion made since that copy before the service opens again.
- One saved copy of our database, made on September 16, 2026, holds records as they were that day. It is due to be deleted.
- A second saved copy of our database, made on October 8, 2026, holds records as they were that day. It is due to be deleted.
- We keep a record that your account was deleted, and when, with none of your content, so that a restore cannot bring your records back.
- An AI service that keeps what you send keeps its copy for up to 30 days from when you sent it.
- The model host states in its published documentation, not in our contract with it, that it may keep a copy of self-discovery content sent to it and its output for up to 30 days for security or abuse checks; deleting your Euzena account does not remove that copy.
- Files you downloaded, and anything kept in your browser, stay with you.
10. Your choices and rights
- In the app: see and correct your account records; download your data; delete conversations, notes or your whole account; turn answers off; disconnect your calendar.
- Withdraw your health information consent to stop both answers and microphone dictation.
- Export: "Export your data" on your account page gives one file in two parts. The first holds your account records, with earlier versions; it is encrypted, and you cannot read it on your own. The second holds your conversations as readable text; a conversation that has expired or is being deleted appears without its text. If your history is very large, the export may not complete, and you can download conversations one at a time. "Download readable notes" gives your notes in a file you can read without Euzena. The export does not hold the sign-in rows that admitted you, a token for anything you connected, anything only Google keeps, or anything in a backup.
- By email: write to contact@euzena.com to ask for a copy of your information, a correction, deletion, or to object to a use of it. We confirm it is you through your Euzena sign-in and answer within one month. If we cannot do what you ask, we explain why, and you can ask us to reconsider by replying; we answer that within one month too. Someone you authorise may ask for you with your signed permission.
- These choices are the same wherever you live in the United States, and using them never changes how we treat you.
11. Security
Your records are encrypted with keys unique to your account. Those keys sit under three separate root keys, one for your product records, one for your identity and one for anything you connect, held in our hosting company's key service; the label on each key carries no name, address or content. Information travels to and from euzena.com encrypted. No system is perfectly secure. If a breach affects your information, we tell you on the channel your invitation arrived on, as the law requires.
12. Adults only
Euzena is for people 18 or older. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we close it and delete their information.
13. Google sign-in and your calendar
We ask Google to confirm who you are and for your email address. Google returns an account identifier and your email address, with Google's note of whether that address is verified. We check Google's signature before we write anything. If you lose access to your Google account, you lose access to your Euzena account, so export your records if that worries you. You can withdraw our access at any time on your Google account permissions page; that ends sign-in and does not delete your Euzena account.
If you connect your calendar, we ask Google for permission to create a separate Euzena calendar and manage the events in it. We do not read or change your other calendars, and you review each event before Euzena creates, changes or removes it. We do not send your calendar to our AI services. Disconnecting deletes our key for that connection and asks Google to end it.
Euzena's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.
14. Where your information is processed
Our server and database are in the United States.
15. Changes to this notice and the Consumer Health Data Notice
A small change, one that does not change what we collect, why we use it, who receives it, how long we keep it, or your choices and rights, takes effect when we publish it here, with a new version number and date.
A major change is different. We tell you on the channel your invitation arrived on before it takes effect, say what is changing, and ask you to agree again the next time you use Euzena; until you agree, your questions are not sent under the change. A major change that is worse for you takes effect no sooner than 30 days after we tell you. We never apply a change to information we already have in a new way without your agreement.
Adding an AI service, an AI service starting to keep what you send for longer, a change in what goes with a question, and any new use of what you write are always major changes.
16. Contact
Write to contact@euzena.com. Mail there reaches the one person who runs Euzena, and answers come from the same address. Postal address: Pathstead AI Labs LLC, registered agent, 2108 N St, Ste N, Sacramento, CA 95816.
17. Version history
| Version | Effective | What changed | How we told you |
|---|---|---|---|
| 1.0 | October 15, 2026 | First version of this notice for the invited beta | Shown at sign-up |
| 2.0 | October 18, 2026 | Microphone dictation and optional model help during self-discovery | Shown before renewed agreement and consent |
| 3.0 | October 19, 2026 | Health information choice at sign-in covers AI answers, self-discovery and optional dictation | Shown before renewed agreement and consent |
Euzena is operated by Pathstead AI Labs LLC · Privacy · Health Data Notice · Terms · Contact