Privacy Policy

Last updated: November 1, 2026

1. Introduction

Overlay ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Overlay mobile apps (including iOS), browser extension, and website at overlay.one (together, the "Service").

2. Information We Collect

We collect the following types of information:

  • Account Information: When you create an account, we collect your email address and authentication information from your sign-in provider (such as Google or Apple).
  • Content You Create: The Service is built to capture and remember what you give it. This includes the notes, tasks, chat messages, prompts, saved web pages and links, and any images or files you add. We store this content so we can provide the Service back to you and let our AI features reason over it.
  • Usage Data: Information about how you interact with the Service, including features used and approximate request counts, used to operate and improve the product.
  • Device & Technical Information: Basic device, app version, browser, and connection information needed to deliver and secure the Service.

We do not sell your personal information, and we do not use your content to train our own generalized AI models.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, personalize, and improve the Service
  • Generate AI responses, summaries, and suggestions from the content you give us
  • Measure and improve the quality of AI answers, as described in section 4
  • Sync your data across your devices and the browser extension
  • Send you technical notices and support messages
  • Respond to your comments and questions
  • Protect the Service and enforce our terms

4. AI Processing and Third-Party Model Providers

Overlay's assistant and "brain" features are powered by third-party large language model providers: Google (Gemini), OpenAI, and Anthropic (Claude). Available chat models depend on your plan and are shown in the model picker. Background work on your content, such as picking out facts and tasks from a note or chat, runs on Google (Gemini). To answer your requests and organize your content, the relevant content you submit — such as your message, related notes, or a saved page — is sent to one of these providers to generate a response.

These providers process that content on our behalf, in accordance with their API terms, to return a result to you or, as described below, to measure answer quality. We send only what is needed for each task, we do not sell your content, and we do not share it with advertisers or data brokers.

Measuring answer quality: To check whether the context Overlay adds to a chat makes answers better, authorized Overlay staff run evaluations on samples of chats. A sample can include a message, the conversation before it, the context sent with it (such as related notes or what Overlay has learned about you) and the answer, or a fact Overlay saved from a chat together with that chat. We send samples to Google, OpenAI, or Anthropic to write comparison answers and to grade answers and saved facts. We keep only the results, such as which answer was preferred, not copies of your content. Evaluations do not change your data and never include anyone who has connected a Google account. To have your account left out, email [email protected].

5. Data Storage and Security

Your account and content are stored with our infrastructure providers and protected with row-level access controls so that your data is accessible only to your account. We use encryption in transit and implement appropriate technical and organizational measures to protect your information against unauthorized access, loss, or destruction.

To fix problems, authorized Overlay staff can view the full record of an individual chat request, including your message, the context sent to the AI model and its answer. These records are deleted after 14 days.

6. Data Retention and Account Deletion

We retain your content for as long as your account is active or as needed to provide the Service. You are in control of your data:

  • Edit or delete content: You can edit or delete individual notes, tasks, chats, and other items at any time from within the apps or the website.
  • Delete your account: You can permanently delete your account and all associated data at any time directly in the app (Settings → Delete Account), which removes your account immediately. You can also email [email protected]. We delete your personal data and content within 30 days of any such request, except where we are required to retain it for legal compliance.

7. Children's Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Google User Data

When you connect your Google account to our service:

  • Data Sharing: We do not share, transfer, or disclose your Google user data with any third parties except for the following limited circumstances: (1) with your explicit consent, (2) for legal compliance, or (3) with trusted service providers who assist us in operating our service and who are bound by confidentiality obligations.
  • Data Retention and Deletion: We retain Google user data only as long as necessary to provide you with our services. You can revoke access to your Google data at any time through your Google account settings or by contacting us. Upon revocation or account deletion, we will delete all Google user data within 30 days.
  • AI/ML Training: We explicitly affirm that we do not use Google user data obtained through Google Workspace APIs to develop, improve, or train generalized artificial intelligence (AI) and/or machine learning (ML) models.
  • Limited Use: Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Third-Party Services

Our service may link to or integrate with third-party services. This Privacy Policy does not apply to those third-party services, and we encourage you to read their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].

Privacy Policy · Overlay