Persimmon is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when using our AI-enabled arXiv client. There’s no jargon on this page — everything is defined in clear, understandable terms so you can make an informed decision about your data.

1. Information We Collect

On-Device Data (No Account Required)

The core Persimmon app works entirely on your device without requiring any account or data collection:

• API Keys: Language model provider API keys you furnish are stored only on your device using secure storage via Apple Keychain.
• User-Generated Content: Notes, annotations, and other data you create are stored securely on your device.
• Interests/Preferences: Your research interests are stored on-device to tailor your feed.

Persimmon Cloud Data (Optional Account)

Persimmon Cloud is an optional feature that allows you to sync your interests and preferences across devices. Creating an account is never required for core app functionality:

• Email Address: Used for account identification and communication.
• Password: Stored as a secure hash (we cannot retrieve your actual password).
• Authentication Tokens: When using Apple Sign-In or GitHub Sign-In, we store OAuth tokens securely.
• User Interests/Preferences: Synced across devices via our cloud infrastructure.

2. How We Use Your Information

On-Device Data

Since on-device data never leaves your device, we do not use it for any purpose beyond providing app functionality.

Persimmon Cloud Data

If you create an optional Persimmon Cloud account, we use your data only for:

• Account Management: Authenticating and managing your account.
• Syncing: Keeping your interests and preferences synchronized across your devices.
• Service Communication: Sending important account-related notifications (e.g., security alerts, policy updates).
• Future Premium Features: Providing access to advanced features that may require an account (see Section 7).

We do NOT use your data for:

• Analytics or usage tracking.
• Advertising or marketing (unless you explicitly opt-in).
• Building user profiles for third parties.
• Any purpose beyond providing the Persimmon service.

3. Data Sharing & Third-Party Services

Data Processors

We engage third-party service providers (“processors”) to help operate Persimmon Cloud. These processors:

• Supabase: Provides cloud database and authentication infrastructure (hosted on AWS).
• Apple & GitHub: Provide OAuth authentication services when you choose to sign in with these providers.

These processors are contractually obligated to:

• Use your data only for providing services to us.
• Not sell, share, or use your data for their own purposes.
• Maintain appropriate security measures.
• Comply with applicable data protection laws.

What We Do NOT Share

• We never sell your personal data to any third party.
• We do not share data with advertisers or data brokers.
• We do not share data for marketing purposes unless you explicitly consent.
• We do not share data with analytics companies.

4. Data Retention

On-Device Data

You control all on-device data. Deleting the app or clearing app data removes all stored information.

Persimmon Cloud Data

• Data is retained only as long as your account is active.
• Instant Deletion: You can delete your account at any time, which immediately removes all associated data from our systems.
• No Backups: Upon deletion, your data is permanently removed with no backup retention.

5. Your Rights

If you have a Persimmon Cloud account, you have the following rights:

• Access: Request a copy of all data we store about you.
• Correction: Update or correct inaccurate information.
• Deletion: Delete your account and all associated data instantly via the app settings.
• Export: Download your data in a portable format (JSON or CSV).
• Opt-Out: Opt out of any non-essential communications.
• No Account?: If you use Persimmon without an account, no personal data is collected, so these rights do not apply.

To exercise these rights, use the app settings or contact us (see Section 10).

6. Eligibility

Persimmon is intended for users 13 years of age or older. By using Persimmon or creating a Persimmon Cloud account, you represent that you are at least 13 years old. If you are under 18, you should have a parent or guardian review this Privacy Policy with you before using the service.

7. Future Premium Features

In the future, Persimmon may offer advanced features behind a subscription or paywall. Important:

• These features will only be accessible with a Persimmon Cloud account.
• All core functionality will remain free and work without an account.
• You will be clearly informed before any feature requires payment.
• Payment processing will be handled by third-party providers (e.g., Apple App Store, Stripe) with their own privacy policies.

8. Security Measures

On-Device Security

• API keys stored in Apple Keychain.
• All user data encrypted at rest on your device.

Persimmon Cloud Security

• Encryption in Transit: All data transmitted to/from our servers uses HTTPS (TLS encryption).
• Encryption at Rest: Data stored in our cloud database is encrypted using industry-standard encryption.
• Password Security: Passwords are hashed using secure algorithms (bcrypt/Argon2).
• Authentication: OAuth providers (Apple, GitHub) follow their own security standards.
• Access Controls: Only authorized personnel can access production systems.

9. Cookies

Persimmon does not use cookies or similar tracking technologies. The website and app do not place any cookies on your device.

10. International Users

If you are located in the European Union or California, you have additional rights under GDPR or CCPA/CPRA respectively. Since we do not sell personal data and process data only for providing our service, most requirements are already met through this policy. For specific requests, contact us at hello@momentalab.com.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. If significant changes are made, we will notify you via:

• In-app notifications.
• Email (if you have a Persimmon Cloud account).
• Updates on this website.

12. Contact Us

For questions, requests, or concerns about this policy, reach out to us at:
📧 Email: hello@momentalab.com
🌐 Website: momentalab.com

By using Persimmon, you agree to the terms of this Privacy Policy.