Privacy Policy

1. Introduction

This Privacy Policy explains how George Pullen (“I,” “me,” or “my”) collects, uses, shares, and protects your personal information when you use the Cyril Experiment platform, website, and related services (the “Service”).

IMPORTANT: The Service is an experimental AI research platform. By using the Service, you consent to the data practices described in this policy, including the use of your data to train and improve the AI systems behind the Service.

2. Information I Collect

2.1 Information You Provide

• Account Information: When you register, I collect your name, email address, and authentication credentials through my provider (Clerk).
• Onboarding Data: During setup, I collect responses to onboarding questions designed to personalize your experience, including your interests, what occupies your mind, and how you wish to be perceived.
• Conversation Data: All messages you send to and receive from Cyril, including the full text of your conversations.
• Waitlist Information: If you join my waitlist, I collect your name, email, and any message you provide.
• Field Notes: Any observations or notes you record within the Service.

2.2 Information Collected Automatically

• AI Telemetry: When you interact with Cyril, I collect detailed technical data about the AI's processing, including:
  • Brain state vectors (numerical representations of AI internal state)
  • Processing metrics (entropy, surprise, value scores, safety costs)
  • Generated proposals and their scores
  • Intent classifications
  • Memory retrieval data
• Session Data: I track session timing, experiment participation, and configuration snapshots.
• Usage Information: Device type, browser type, IP address, access times, pages viewed, and interactions with the Service.
• Cookies and Tracking: I use cookies and similar technologies to maintain sessions and analyze usage patterns.

2.3 Information from Third Parties

• Authentication Provider: I receive authentication data from Clerk, including your profile information.
• Analytics Services: I may receive aggregated analytics data from third-party services.

3. How I Use Your Information

I use your information for the following purposes:

3.1 Service Operation

• Providing, maintaining, and improving the Service
• Authenticating your identity and managing your account
• Processing and responding to your conversations with Cyril
• Personalizing your experience based on your interactions and preferences

3.2 AI Training and Development

IMPORTANT: Your conversations and interaction data are used to train, improve, and develop the AI systems behind the Service. This includes:

• Online Learning: Cyril learns from your conversations in real-time, updating its internal models with each interaction.
• Batch Training: Your data may be used in periodic batch training processes to improve the overall AI system.
• Model Development: Aggregated and anonymized data may be used to develop new AI models and features.
• Research: Data may be analyzed for AI safety research, behavioral analysis, and system optimization.

3.3 Research and Analytics

• Conducting internal research on AI behavior and performance
• Analyzing usage patterns and system metrics
• Generating aggregated, anonymized insights
• Publishing research findings (using anonymized data only)

3.4 Communication

• Sending service-related notifications
• Responding to your inquiries and support requests
• Notifying you of changes to the Service or policies

3.5 Safety and Security

• Detecting and preventing fraud, abuse, and security threats
• Monitoring for violations of the Terms of Service
• Complying with legal obligations

4. How I Share Your Information

I may share your information in the following circumstances:

4.1 Service Providers

I share data with third-party service providers who assist me in operating the Service:

• Clerk: Authentication and identity management
• Convex: Database and backend services
• Cloud hosting providers: Infrastructure and computing services

4.2 Legal Requirements

I may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, etc.)
• Requests from government authorities
• Protection of my rights, privacy, safety, or property
• Emergency situations involving potential threats to safety

4.3 Business Transfers

If I transfer the Service or its assets, your information may be transferred as part of that transaction.

4.4 Research Publication

I may publish research findings based on aggregated, anonymized data. I will not publish individually identifiable conversation content without explicit consent.

4.5 With Your Consent

I may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your information as follows:

• Account Data: Retained while your account is active and for a reasonable period thereafter for legal and operational purposes.
• Conversation Data: Retained indefinitely for AI training purposes and research purposes.
• AI Training Data: Data incorporated into AI models may persist within those models even after source data deletion. Complete removal from trained models is technically infeasible.
• Telemetry and Metrics: Retained for research and system optimization purposes.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

6.1 Access and Portability

You may request a copy of your personal data in a structured, commonly used format.

6.2 Correction

You may request correction of inaccurate personal data.

6.3 Deletion

You may request deletion of your personal data. However, please note:

• Data already used to train AI models cannot be fully removed from those models.
• I may retain certain data where required by law or where I have a lawful basis to do so.
• Because this is a research experiment with indefinite retention, I may not be able to delete conversation data.

6.4 AI Training as a Condition of Access

This Service is an experimental research platform. Use of the Service requires that your conversation data be used for AI training and development. If you do not want your conversations used for these purposes, do not use the Service.

6.5 Account Closure

You may request account closure at any time by contacting me. Account closure will result in loss of access to the Service. I may retain your data as described in the Data Retention section.

To exercise any of these rights, contact me at: george@mycyril.com

7. Data Security

I implement reasonable measures to protect your personal data. However, no method of transmission or storage is 100% secure.

8. International Data Transfers

Your data may be processed and stored in countries other than your country of residence, including the United States and United Kingdom. By using the Service, you consent to the transfer of your data to these countries, which may have different data protection laws than your jurisdiction.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. I do not knowingly collect personal information from children. If I become aware that I have collected data from a child, I will take steps to delete such information promptly.

10. Third-Party Links

The Service may contain links to third-party websites or services. I am not responsible for the privacy practices of these third parties. Review their privacy policies.

11. Changes to This Policy

I may update this Privacy Policy from time to time. Changes will be effective immediately upon posting. I will notify you of material changes via email or prominent notice on the Service. Your continued use after changes constitutes acceptance of the revised policy.

12. UK and EU Users

If you are located in the UK or European Economic Area:

• Legal Basis: I process your data based on: (a) your consent, (b) contract performance (providing the Service), (c) legitimate interests in operating and improving the Service, and (d) legal obligations.
• Data Controller: George Pullen is the data controller for your personal data.
• Additional Rights: You may have additional rights under GDPR/UK GDPR, including the right to lodge a complaint with a supervisory authority.

13. Contact

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact me at: