Legal

Privacy, plainly.

Catalyst stores your conversations so you can come back to them. This page says exactly what we keep, where it goes, and how to delete it.

Effective July 4, 2026

This policy covers Catalyst — the web app at catalyst.voov.ai, the Catalyst iOS app, and this website — operated by ObjectGraph LLC ("voov.ai", "we", "us"). If anything here is unclear, write to [email protected].

What we collect

  • Your account. Your email address and name, provided by the sign-in method you choose — Apple, Google, or email and password. If you use Sign in with Apple's private relay, we only ever see the relay address.
  • Your content. Conversations (your messages, assistant replies, and the record of tools the assistant used), files and photos you attach, images and videos generated for you, and the prompts, skills, workflows, and mini apps you build. Conversations are stored in our database so your history follows you across devices.
  • Memory. Catalyst keeps a memory of facts you've shared so the assistant can recall them later. You can view, edit, and delete every entry from inside the app.
  • Credentials you add. If you bring your own AI provider keys, database connections, or tool integrations, we store those credentials to make the requests you initiate — database credentials are encrypted at rest, and we never use your keys for anything you didn't ask for.
  • Preferences and service records. Your default models, appearance settings, timezone, and operational records like job status, token usage, and error logs that keep the service running and debuggable.

The iOS app requests camera and photo access only when you attach an image to a chat, keeps your session in the device keychain, and contains no advertising or third-party analytics kits.

How we use it

  • To run the product: store your conversations, execute your workflows, generate your images and videos, and send your messages to the AI models you select.
  • To personalize: memory and preferences shape how the assistant responds to you.
  • To communicate: transactional email only — things like waitlist approval. No marketing lists, no newsletters you didn't ask for.
  • To moderate: mini apps submitted to the public store are reviewed by us before they're listed.

We do not sell your data, and we show no advertising.

Where your content goes

Catalyst is model-agnostic, which means your messages go to the AI provider you pick for each chat:

  • Model providers. When you send a message, its content (including attached files and relevant conversation history) is transmitted to the selected provider — for example Anthropic, OpenAI, or Google — or to a custom endpoint you configured. Their handling of that data is governed by their terms. If you brought your own key, the request runs under your own account with that provider.
  • Models we host. Some features — image and video generation on our own GPUs, and the model that distills memory entries — run on hardware we operate. That content is processed inside our infrastructure and isn't sent to an outside AI provider.
  • Web search. When the assistant searches the web for you, the search query is sent to our search provider.
  • Infrastructure. Our database and authentication run on Supabase, our hosting and content delivery on Cloudflare, and our compute on AWS — all in the United States.

Storage, security, and links you share

  • Everything moves over encrypted connections (TLS). Database access is enforced per-account at the row level. Code the assistant writes runs in an isolated sandbox.
  • Generated media is served from a CDN. Images, videos, and files produced in your chats live at long, unguessable URLs — private in practice, but anyone who has the exact link can view that item.
  • Share links are public by link. If you share a conversation or publish a mini app, anyone with the link (or, for published apps, any Catalyst user) can view it until you remove it.
  • Files you upload for analysis are stored privately on our servers and are not served from a public address.

Access and legal disclosure

  • We don't watch what you do. Nobody at voov.ai reads your conversations or monitors your activity in the ordinary course of running the service. Human access to your data is limited to what's genuinely required: helping you with a problem you've asked us to look at, debugging a fault in the service, and reviewing content you've submitted for public listing in the app store.
  • When the law compels us. We will preserve or disclose account data to law enforcement or other authorities when we are legally required to — a valid subpoena, court order, or equivalent legal process — or where we believe in good faith it's necessary to prevent imminent harm. Where the law allows it, we'll tell you before we hand anything over.

How long we keep things

  • Conversations, memory, and creations stay until you delete them.
  • Working files generated during code execution expire automatically after about 30 days.
  • Internal streaming logs are trimmed on a schedule and aren't kept long-term.

Your controls

Everything below is available in the app under My Data:

  • Export your data — sessions, messages, media and file listings, and memory — as a single download.
  • Delete individual conversations (which also removes their generated media and share links), specific media, files, or memory entries.
  • Delete everything, or delete your account entirely. Account deletion removes your conversations, media, files, and memory from our systems.

Children

Catalyst is not directed at children under 13, and we don't knowingly collect personal information from them.

Changes and contact

If this policy changes in a way that matters, we'll say so on this page with a new effective date. Questions, concerns, or data requests: [email protected].