Coherence AI Privacy Policy

What Coherence AI Does

Coherence AI is an AI chat, research, and professional preparation app from Invaris AI. Coherence routes prompts and supporting context to managed AI providers, checks AI answers with the Coherence Reliability Engine, repairs answers when possible, and asks for additional source, document, authority, or clarifying input when needed.

Coherence is designed to improve reliability and make repair records inspectable. It does not guarantee that every output is correct, complete, safe, lawful, or appropriate for every use.

Information We Collect

We collect account and profile information such as your email address, name, username, profile image, product user id, subscription state, authentication state, optional phone number for security, connected account state, and MFA/security status.

We collect the content you choose to provide, including prompts, chat transcripts, dictation transcripts, uploaded documents, project instructions, project context, personalization settings, guided-repair input, source notes, authority notes, policy notes, citations, feedback, and explicit override decisions. Microphone audio used for dictation is transiently sent for transcription and is not retained by Coherence after the transcription request.

We collect reliability and audit data, including CRE findings, repair-trigger metadata, original AI drafts, repaired answers, repair instructions, guided-repair exchanges, accepted or rejected sources, citation candidates, authority choices, and user override records.

We collect product, usage, and diagnostic information needed to operate the service, including provider route, model id, token and tool counts, search or retrieval calls, usage-limit state, subscription entitlement, latency, server errors, security events, audit events, and feature settings.

We collect communication preferences, including whether you opted in to optional product updates, reliability research, launch news, offers, and marketing messages. Required transactional messages for account, security, billing, legal, service, and support purposes may still be sent even if optional communications are off.

Billing and subscription information is processed through the active payment provider. Web subscriptions use Stripe. App Store subscriptions use Apple. Coherence AI does not store full payment card numbers.

Data Collection By Plan

Coherence free plan. Free accounts receive chat, bounded repair, Guided Repair, document creation, privacy controls, and a small governed continuity-memory allowance. Dictation is not available on Free. Coherence may retain prompts, AI responses, chat context, guided-repair context, usage records, diagnostics, provider-route metadata, reliability findings, repair-trigger metadata, feedback, and encrypted audit records to provide, secure, meter, replay, export, and delete the service. Product-improvement use is off by default on every plan and requires a separate explicit opt-in.

Coherence Plus. Plus accounts may use managed dictation, document creation, long-horizon continuity memory, repair, and enhanced reliability features. Coherence may retain free-plan service and audit data plus chats, original and repaired responses, guided-repair inputs, source and citation candidates, retrieval context, uploaded documents, paid feature usage, diagnostics, and audit records. Content enters the separate product-improvement plane only after explicit opt-in; operational, security, billing, usage-limit, audit, export, deletion, support, and legal records remain purpose-bound.

Coherence Pro. Pro accounts may use selectable transcription models, higher document and continuity allowances, advanced provider roles, advanced search, project context, documents, deeper auditability, and guided-repair workflows. Coherence may retain the deepest user-controlled audit trail for those workflows. Product-improvement use remains off until explicit opt-in, subject to the same operational, security, billing, audit, export, deletion, support, and legal boundaries.

How We Use Information

We use information to provide the app, authenticate users, maintain sessions, deliver AI responses, run reliability checks, support guided repair, store chats and projects, manage subscriptions, enforce usage limits, provide export and deletion controls, improve product quality, improve the Coherence Reliability Engine, evaluate repair quality, detect abuse, troubleshoot defects, and maintain security.

We may use reliability data to compare original and repaired AI responses, tune product workflows, improve guided-repair prompts, improve source acquisition behavior, build aggregate reliability metrics, investigate incidents, and develop future agent-assisted quality and maintenance workflows.

We may use aggregate or de-identified product and reliability information for marketing, product education, reliability reporting, business analytics, and product planning. We do not sell personal information or share it for cross-context behavioral advertising.

Personalization settings may affect answer style. They do not control the Coherence Reliability Engine's reliability decisions, source validation, authority handling, repair success, or release authority.

AI Providers, Search, Retrieval, And Other Partners

When you use live AI features, prompts, relevant chat context, uploaded documents or excerpts, project context, answer candidates, and guided-repair material may be sent to managed AI providers so they can draft answers or helper material.

When you use dictation, Coherence sends the recorded audio clip to OpenAI for transcription. The transcript is placed into the editable prompt composer. Coherence does not store the audio clip as chat history.

When Advanced Web Search or similar retrieval is enabled, Coherence AI may send search queries, claim summaries, and context summaries to search or retrieval providers to locate candidate source or citation material. Retrieved material is candidate evidence only. The Coherence Reliability Engine still decides whether the final answer can be released.

Coherence may use Pinecone for two separate derived context indexes: ordinary continuity and repair-specific continuity. Pinecone receives deterministic vectors, content hashes, token estimates, and hashed references without raw prompt, response, document, or source-identifier text. Vector similarity only proposes candidate context and never authorizes an answer.

Coherence AI uses service providers for cloud hosting, storage, identity, billing, email delivery, security, telemetry, AI model access, search, retrieval, and databases. These providers process information only as needed for the product function they support, subject to their applicable terms, data-processing settings, and privacy practices.

Coherence configures managed provider routes server-side. Provider API keys, OAuth tokens, passwords, MFA seeds, verification codes, passkey private material, and other secrets must not be stored in browser profile settings, chat history, telemetry, product exports, Lab evidence, or source control.

Documents And Audit Records

Documents you upload may be stored, parsed, chunked, searched, and used as candidate context for normal chat, project context, or guided repair. Uploaded document text is treated as untrusted candidate material and may contain instructions that Coherence AI should not follow.

Coherence AI may store original AI draft text, repaired text, guided-repair conversation records, explicit user choices, override records, source or citation material, project context, and audit metadata so you can inspect what changed and why and so Invaris AI can evaluate and improve CRE reliability behavior.

Artifact Studio can render a displayed response into PDF, Word, Excel, CSV, PowerPoint, Markdown, plain text, or a self-contained HTML canvas. Coherence meters export counts and bytes but does not treat a generated file as proof or a new CRE release decision.

Storage And Retention

Coherence stores compact product profile, subscription, usage, account security status, and audit indexes in AWS-backed product state when the cloud runtime is active. Exact chat and project history is stored in encrypted, per-user AWS object-storage partitions. Pinecone receives rebuildable deterministic vectors and governed context metadata without raw chat text or raw user identifiers. Supabase is used only for the segregated Coherence Performance Database, not as a customer chat-history or context-vault fallback. Uploaded documents, audit/replay bundles, quality-corpus objects, and export bundles use private AWS object storage with encryption, access controls, and lifecycle retention. Default telemetry excludes raw prompt text, response text, uploaded document text, passwords, MFA seeds, verification codes, passkey private material, OAuth tokens, provider keys, and secrets.

Exact product chat and project history remains in encrypted, per-user AWS storage until you delete it or reach your plan storage limit. Pinecone stores only rebuildable deterministic vectors and typed candidate-context metadata. Supabase is reserved for the segregated Coherence Performance Database and is never used as customer chat history, product context, or an outage fallback.

Chat history and user audit records on every consumer plan may be retained until deleted by the user, account deletion, or the plan storage limit, subject to active retention choices and legal or security holds. Uploaded documents follow their selected retention setting and plan limits. Some security, billing, tax, fraud-prevention, support, and compliance records may be retained longer where necessary.

Your Choices

You can manage profile information, personalization, memory and storage settings, privacy choices, subscription status, export, and account deletion from the product settings surfaces as those features are available in production.

You can unsubscribe from optional product and marketing communications. Required account, security, billing, legal, service, and support messages may still be sent where necessary.

You can request export of product data and initiate account deletion from Account Management. Account deletion is intended to remove the account and associated personal data that Invaris AI is not legally required to retain. Billing records, tax records, fraud-prevention records, dispute records, and other legally required operational records may need to be retained for a limited period.

Every plan receives a separate product-improvement choice. Provider-processing consent does not authorize product-improvement use. Operational telemetry is content-free; user audit content remains governed by retention, export, deletion, security, support, and legal requirements.

Children

Coherence AI is not intended for children. Do not use Coherence AI if you are not old enough to create an account or use AI services under applicable law and platform rules.

Security

Coherence AI uses server-side provider credentials, secure sessions, managed identity, optional MFA/passkey controls where available, audit logging, upload validation, no-secret telemetry, provider-gateway boundaries, and cloud security controls to protect user information. No online service can guarantee perfect security.

Changes

If our practices change, we will update this policy and, where required, update App Store privacy answers, privacy manifests, product consent text, or other platform disclosures.

Contact

For privacy, billing, account, or support questions, contact support@invaris-ai.com. Automated identity emails may come from no-reply@invaris-ai.com, but that mailbox is not monitored for support.