Trust

Your data. Your rules. Calibrated honestly.

UK GDPR aligned, EU AI Act readiness in build. AI Twin Ltd is the data controller. Your data is processed in the UK and EU. Every action is logged in an audit trail you can see. You can export everything you hold. Erasure is permanent, not a soft hide.

Built for privacy, by design

What that means in practice.

Data controller. AI Twin Ltd, registered in Scotland (company number SC866947), is the data controller for all personal data we hold. We are ICO-registered.

Data residency. Your personal data is processed in the UK and the European Union. Email is handled by Brevo in Paris. The underlying LLM inference runs through Anthropic's EU region. Our database sits in the EU. We do not casually move your data outside this perimeter.

Audit. Every meaningful action against your data is logged in an append-only audit log that no one can edit or remove, including us. You can see your own audit log.

Erasure. Deleting your account soft-deletes your data immediately and permanently anonymises it within 30 days. Operational backups roll off on a published schedule.

Sensitivity tiers. Memory entities carry one of four sensitivity tiers (LOW, MEDIUM, HIGH, CRITICAL). Access is enforced at the database level through row-level security. The system fails closed, not open. CRITICAL data is owner-only on Business Workspaces.

AI transparency. Under EU AI Act Article 50, users have the right to know when they are interacting with AI. AI Twin tells you. AI-generated outputs in the Brief and Chat surfaces are being built to carry machine-readable markings consistent with the August 2026 transparency obligations. AI Twin prepares; you confirm before any action that touches your data or your accounts.

See machine-readable company data (for AI agents)

ON-DEVICE DEMO

A note on the demo on our homepage.

The on-device demo on the homepage includes a short walkthrough, Show me the proof, so you can verify in your own browser that nothing you type there leaves your device.

The homepage demo lets you watch a memory come back without sending any of your text to a server. We mean it. Open your browser developer tools, the Network tab, filter to Fetch/XHR, and ask the demo a question. Zero outbound requests fire.

The demo does need to download an embedding model and a runtime to your browser on first use. About 22MB total, fetched once from huggingface.co and a public content delivery network (jsDelivr). Both are static files. Hugging Face and jsDelivr see only that a browser somewhere downloaded a public model. They do not see your question, your interaction, or anything else.

This is the model we want for the full product too: heavy lifting on your device wherever practical, the underlying LLM provider engaged only when we cannot do the work locally. The homepage demo is a small proof of how we think about this.

What we hold

What your Twin actually stores.

A short list, because the list is short.

Your Twin holds what you put into it. Every item below becomes typed memory you can read, edit, export, and delete. Captures wait in Pending Review until you confirm them.

  • Documents and PDFs. Documents, and the Facts and Events inside them. Contracts, letters, reports, manuals.
  • Photos and screenshots. Documents. A photo of a letter is a letter.
  • Voice notes. Documents, and the Facts and Events inside them. AI Twin does not record you. There is no always-on capture.
  • Notes you type. Facts, Events, People, depending on what you tell it. One Universal Input bar, on every surface.
  • Email you forward. Documents, Facts, Events. Forward to your Magic Inbox address. Nothing is read from your mailbox. Only what you send.
  • Onboarding answers. Your Style Profile, and the first Facts about you. Five or fourteen questions. It captures style, not personality.
  • WhatsApp chat exports. Facts, Events and People. You export the chat and upload it. AI Twin does not connect to WhatsApp and does not read your messages.
  • Social data exports. Facts, Events and People. You download your data from the platform and upload it. AI Twin does not connect to your accounts.

Your Twin holds the metadata around those items. When you added something. What kind of item it is. Tags and categories you set. Audit entries for every action.

Your Twin does not hold what you have not given it. We do not scrape your inbox. We do not read your calendar. We do not watch your screen. We do not infer things about you from places you did not bring to the Twin.

When wider integrations ship, they will roll out one at a time, behind your explicit consent. You will see exactly what each one captures before you turn it on. You can turn it off again at any point.

Your rights

What you can do with your data.

Under UK GDPR you have a set of rights. We have built AI Twin so that exercising them is direct, not a form-filling exercise.

See it.

Your Twin shows you what it holds. No black boxes. No “this is encrypted, trust us” surfaces.

Edit it.

Anything captured can be corrected. If your Twin remembers something wrong, you change it.

Export it.

One click produces a portable file containing everything your Twin holds for you. Standard formats, not a custom export only we can read.

Delete it.

Deleting your account soft-deletes your data immediately and permanently anonymises it within 30 days.

Object to it.

If we ever start processing your data for a purpose you did not opt into, you can stop us. You can also lodge a complaint with the Information Commissioner’s Office, the UK regulator, at any time. You should not have to. We would rather you tell us first, but you do not need our permission.

Take it elsewhere.

AI Twin is model-agnostic by design. Your memory is yours, and it comes with you if you switch tools or leave us entirely.

These are not features. They are the floor.

What we do not do

Five things you will not see us do.

We do not sell your data. There is no commercial arrangement under which any third party pays us for access to what your Twin holds. Our full list of sub-processors is public at /sub-processors.

We do not share your data with advertisers. AI Twin does not run ad tracking, does not embed advertising pixels, and does not exist inside an ad-funded business model.

We do not use your data to train AI models without your explicit consent. The model providers we work with do not get a feed of your memory to retrain their systems. If a specific feature ever requires sending memory to a third-party model, you will see exactly what gets sent, every time, before it goes.

We do not track you across other websites. Privacy-friendly analytics on this site only, focused on aggregate usage. Nothing tied to your identity, nothing shared with networks that profile you.

We do not retain your data after you have asked us to remove it, beyond the published backup-rolloff window.

Model-agnostic

Your memory is yours. The model is whatever you choose.

A lot of AI products today lock you in. Your conversations live inside one provider’s system. Your context belongs to them. If you switch, you start again.

AI Twin is built differently on purpose.

Your memory is stored in our database, structured and typed and yours. The AI model that helps you use it is whichever one you want. Claude. ChatGPT. Gemini. A local model on your laptop. If a model gets better tomorrow, you switch. Your Twin’s memory comes with you.

This is not a feature for technical users. It is the brand. Lock-in is a tax on trust, and we refuse to charge it.

Compliance

What is live, what is in build, what is not yet certified.

We will not overclaim our compliance status. The space is full of products that print certification badges they have not earned. We are not one of them.

UK GDPR: live.

AI Twin is designed and operated to align with UK GDPR from the first user. Lawful basis, data minimisation, purpose limitation, storage limitation, integrity, confidentiality, accountability. We can answer Data Subject Access Requests. We can support the right to erasure. We have appointed routes for complaints.

EU AI Act readiness: in build.

The EU AI Act creates obligations for AI systems based on risk. AI Twin sits in the limited-risk category as we understand it today. We are building toward the transparency, governance, and disclosure obligations. We are not yet formally assessed. When that assessment happens, we will publish the result.

SECURITY

Security, stated plainly.

“Banking-grade” is not a defined standard, so we won’t borrow the phrase. But the controls people usually mean by it are here. Every table in our database enforces row-level isolation at the database itself, not just in the application. Every read and write lands in an append-only audit log you can see, and no one can edit or remove, including us. No privileged keys ever reach your browser. Inputs are screened before anything is stored. Your data stays in the UK and EU.

What we have not yet earned the right to claim: ISO 27001 and SOC 2 are engineering targets, not current badges. Cyber Essentials is in progress. An independent penetration test is committed before launch. Each is published when it is independently verified, not before.

Your data is encrypted in transit and at rest. That is the baseline, not the brand statement. If something goes wrong, we will tell you in plain English within 72 hours of becoming aware. UK GDPR sets that as the floor; we treat it as a floor, not a ceiling.

Where your data lives

Who else touches it, and from where.

AI Twin runs on a small set of trusted providers. The list is short and deliberate.

Hosting and database: Supabase, on infrastructure inside the European Economic Area. UK data residency where possible, EEA where not.

AI models: provided by the model vendor you choose. Memory is sent to a model only when you make a request that requires it, and you see what is sent.

Email delivery: a transactional email provider for confirmation and account messages. No marketing email from your data without explicit consent.

Analytics: privacy-friendly analytics with no cross-site tracking and no identity tying. Aggregate signals only.

That is the list. If it changes, we update this page and tell people who have signed up. We do not quietly add sub-processors and hope no one notices.

Sensitive data

Who AI Twin is for, and what we ask you to think twice about.

AI Twin is built for adults. We do not build features designed for use by children under 18. We do not market to children. If you are under 18, please do not sign up.

You may, of course, capture things about your family in your Twin. The school’s term dates. The nursery’s dietary letter. Your child’s medication. That is one of the use cases the product is built for. The data is held by you, in your account, as part of your life admin.

Some data is more sensitive than other data. Health information. Faith. Sexuality. Political views. Financial detail. If you choose to capture these in your Twin, you should. It will help your Twin help you. We hold this data with the same care as everything else, and we have specifically not built features that profile, segment, or commercialise based on sensitive categories. Nothing about you triggers a different experience for someone else.

If you ever want to know exactly what your Twin holds and where, that is what the audit log is for.

Contact

A real person reads every message.

For privacy questions, data subject requests, or anything that does not feel right: hello@ai-twin.co.uk.

For complaints you do not want to bring to us first, you can contact the Information Commissioner’s Office at ico.org.uk. We would rather you tell us first, but you do not have to.

Calm AI. Clear consent. Quiet by design.

This page was last updated on 10 July 2026. We will note material changes here and tell people who have signed up.