Privacy
What we collect, and why.
The signup form, the analytics you can say no to, and nothing sold. Questions? Email hello@useion.ai.
The short version
Contextual Labs Ltd. makes Ion. On this site we collect what you type into the early-access form, and, only if you accept analytics cookies, how the site is used. In the Ion app, your Ion account keeps only what it needs to sign you in, find your hubs and deliver notifications and invitations; what your apps hold stays on your hub. We don’t run ads, we don’t track you and we don’t sell your data.
What the early-access form collects
Your email address, and whether you’d also like other Contextual Labs news. That switch is off unless you turn it on.
After you join, you can also tell us what computer Ion would run on, what you’d use it for, whether you use Claude or ChatGPT, and your first name. All of these are optional, and each answer is saved as you give it.
We record when you signed up and when you last changed an answer.
We use your email address to tell you about Ion releases, and about other Contextual Labs news only if you asked for it. We use the answers to decide what to build and what to say about it.
Where it’s stored
The form sends your answers to our signup service at api.useion.ai, which stores them in a MongoDB Atlas database that Contextual Labs runs. Amazon Web Services and MongoDB host it for us. Only Contextual Labs can see it.
We don’t sell it, rent it or share it with advertisers, and we never send your email address or name to an analytics service.
Cookies and analytics
The site itself sets no cookies. It keeps two small settings in your browser’s storage: your light or dark theme, and your cookie choice.
If you accept analytics cookies, the site loads Google Analytics 4 and Microsoft Clarity through Google Tag Manager. Google Analytics counts visits and shows which pages people read and where they came from. Clarity shows how pages are used, like where people click and how far they scroll, so we can find the confusing parts.
Until you accept, or if you reject, Google Tag Manager still loads, but no analytics tag runs and no analytics cookie is set. Loading Tag Manager means your browser contacts Google’s servers, as it does on any site that uses it.
We don’t use advertising or ad personalisation of any kind, and the settings that would allow it are permanently off.
Changing your mind
Choose “Cookie settings” at the foot of any page to accept or reject again. Rejecting after accepting stops analytics from then on; to remove cookies already set, clear this site’s cookies in your browser.
We ask again after 12 months.
The Ion app and your Ion account
This section covers the Ion app (ai.useion.apps) and the Ion account service at account.useion.ai, which the app and the account site use to sign you in. It is separate from the website above. The account service is run by Contextual Labs and sends no data to advertisers or analytics services.
What your apps hold stays on the hub. A hub runs on a computer that you, or whoever invited you, own and run. Your apps’ data, files, AI conversations and what notifications say go to that hub, not to us.
Your Ion account keeps only what it needs to sign you in, find your hubs and deliver notifications and invitations. It is linked to you, and used only to make Ion work:
- Name: your display name. It comes from Sign in with Apple (first sign-in only), Google or GitHub, or you type it. Other people on the same hubs see it.
- Email addresses: the verified addresses you sign in with or add. We use them for sign-in codes, magic links and invitations, and send those emails through Amazon SES.
- User ID: your Ion account id, and the Apple, Google or GitHub user id linked to it.
- Device ID: your device’s registration with us, made of its id, its Apple push notification token, and the App Attest key that proves this is the real Ion app on a real device. We use them to send you notifications and to block abuse. They are tied to your account once your device is signed in.
- Invitations: when you invite someone to a hub, the address you type and the note you write. We keep them until the invitation is used or expires, which is 7 days.
Notifications from your hub’s apps pass through our account service to Apple’s push service and are not stored. We keep only the time of the last one on your device’s record.
What Ion doesn’t collect
The Ion app has no analytics, advertising or crash-reporting code, and no third-party SDKs. We don’t collect diagnostics, usage or browsing data, your location, your photos, or the content of the apps on your hub. Ion asks for local network access to find your hubs on your network, not for your location. Wallpapers you choose stay on your device.
To protect sign-in, the account service keeps your IP address for 5 minutes on a device check, uses it to rate-limit requests, and writes it to its security logs when it rejects a sign-in or a device check. Those logs are kept for 30 days. We don’t use it to identify or locate you.
Ion doesn’t track you. It has no advertising identifier and never asks to track you across other companies’ apps or sites.
Deleting your Ion account
You can delete your account at any time, in the app under Settings → Delete Account, or at account.useion.ai/account under “Delete this account”. It can’t be undone.
Deleting it removes your account and its email addresses, your linked Apple, Google and GitHub sign-ins, your sessions, and your hub memberships and listings.
Two things are left for a short while. Your device’s registration (its id, push token, App Attest key and label) is unlinked from you, not deleted: it is anonymous from then on, and it goes when you remove the app and Apple reports the token gone. Invitations sent to or from your address expire within 7 days.
Your hubs, and their apps and data, stay on the computer they run on, because we never had them. Deleting that data is up to you, on that computer.
How long we keep it
Your signup: until you ask us to delete it, or until we stop running the early-access list.
Your Ion account: until you delete it, as described above. Invitations: until used, or 7 days. Sign-in security logs: 30 days.
Google Analytics: 14 months, after which Google deletes the detailed event data. Microsoft Clarity keeps session recordings for 30 days.
Your cookie choice: 12 months, in your own browser.
Your data, your call
To see what we hold about you, correct it, have it deleted, or stop hearing from us, email hello@useion.ai.
To delete an Ion account, you don’t need to ask: see how to delete your account.
Changes to this policy
If what we collect changes, we’ll update this page and the date below before it does.
Last updated .
Get early access.
Invite-only, released in small waves. Free during early access.