Plain English, no legalese. Three things matter most. We do not sell your data, we do not train AI on it, and nothing ever acts in your name. The rest of this page is the precise version.
Ilu Rennik holds what you give it. That means what you tell it, the documents and pictures you add, and the facts your own AI proposes that you choose to keep. It does not read your email, your calendar or any other account. Each fact keeps where it came from, so you can always see why it is there.
We use it only to run Ilu Rennik for you. That means keeping what you add, searching it, answering your questions with the source of each answer, and showing you what a document holds. Never for advertising. Never to train a model that anyone else’s account touches.
Only the handful of companies that make the product run, each under a data agreement, each with only what it needs, and every one of them named here. We do not sell your data. Full stop.
Your information is stored on our servers in the Netherlands, with encrypted backups held by Cloudflare. Text used for search is stored with card numbers, Social Security numbers and labeled bank account numbers masked to the last four digits before anything is stored. A passport or ID number is kept whole, for you and for the people you give a seat, and is never handed to an AI or an agent you connect.
The original documents and pictures are encrypted before they are stored, under a key that exists only for your account.
To read a document or a picture you add, or to answer a question, the text it needs is sent to the AI that does the reading. Today that is Anthropic, through our account, under its commercial terms, which forbid training on it. That is the only place your words go, and we would rather name it than let you assume it away.
If you would rather that never touch our account at all, connect your own model credentials. Use your own provider key, or your own cloud region, and every call for your data runs inside your agreement instead of ours. If those credentials ever stop working, Ilu Rennik stops answering. It will never quietly fall back to our account.
You can seal anything you keep. A sealed item stays on your screen and nowhere else. No seat sees it, no AI you connect is given it, and no model reads it. Anyone else only ever learns that something sealed exists, never what it says.
Every touch of your data is logged. That covers what was read, when, by which seat or AI, and each time your text went to an AI. Settings shows you that list. It is not a promise that we are open about it. It is the list itself.
You can connect your own AI to your account, such as Claude or a personal agent. That connection has full access. It can read everything here and change it, including your notes in Your vault. You choose how long it lasts, whether 30 days, 90 days, a year or for good, and nothing connects until you say yes. Every call it makes is logged, and Settings shows them. You can end it any time, and it stops at once.
What your AI reads through that connection goes to the company that runs that AI, in whatever chat you are in, under that company’s terms and your settings there. For Claude that is Anthropic, and whether your chats help train its models is a choice in your Claude settings. A passport or ID number never passes through it. Your AI gets the last four digits and a note that the whole number is on your screen. The steps are in Settings.
If you ask your AI to read your email for you, it does that with its own access, under its maker’s terms, not ours. Ilu Rennik never receives your mail. It receives only the facts your AI proposes, and keeps a proposal only when you say yes.
If you sign in with Google, Ilu Rennik asks Google for your name and email address, and nothing else. That information is used only to sign you in and to reach you. It is never sold, never used for advertising and never used to train AI. Ilu Rennik’s use of information received from Google follows the Google API Services User Data Policy, including the Limited Use requirements.
We keep your data while your account is open. Export is self-serve, in both formats, straight from Settings, on any plan, any day. The machine-readable copy is in a published format any program can read, without us. Deletion is self-serve too. Where GDPR or CCPA apply to you, you have their full rights, and we carve nothing out.
Deletion here means more than a promise to press delete. Your documents and pictures are encrypted under a key that exists only for your account. When you delete, we destroy that key and then delete the files. Anything encrypted under it, including any copy that might still sit in a backup, becomes unreadable to us permanently, because the key that opened it no longer exists anywhere. You get a written note of the moment it was destroyed. Within thirty days everything else tied to your account is deleted as well, and the account ends whole.
Rennik, Inc. (Delaware). The controller of your data where that term applies. team@ilurennik.com
Rennik, Inc. · last updated October 28, 2026