Privacy policy
Last updated: [date]. Applies to [Company name] ("we"), the Walter software, the Walter website, and the Walter Cloud Link service.
1. The short version
Walter runs on your own computer. We don't receive your conversations, recordings, photos, face or voice data. Your conversations go to Anthropic under your own Claude account. If you subscribe to Cloud Link we keep the minimum we need to run it.
2. Data that stays on your device
Wake-word listening, on-device speech recognition and speech, Walter's memory, journal, lists, settings, and (only if you enrol someone) face and voice templates. Templates are numeric descriptions, not photos or recordings, and can be deleted at any time. We have no access to your device unless you send us a diagnostics bundle.
3. Data processed by services you connect
| Service | What | When |
|---|---|---|
| Anthropic (Claude) | Your requests, Walter's working context, content he reads for you | Always (Walter's brain), under your Anthropic account and its terms |
| OpenAI | Audio or text for cloud speech | Only if you turn on cloud speech with your own key |
| Calendar (and other data you authorise) | Only if you connect a Google account | |
| Cloudflare | Phone-app traffic to your Walter | Cloud Link or your own tunnel |
| Weather, sports, podcast and video services | Location for weather, search terms | When you use those features |
These providers process data under their own terms and privacy policies. We are not responsible for them, and we don't sell your data or receive it from them.
4. Data we collect
- Beta waitlist: your email address, your hardware answer and any note you add, with the time you signed up. Stored with our website host (Cloudflare) until the beta fills or you ask us to delete it. No confirmation emails are sent yet. To stop abuse we briefly keep a one-way hash of your IP address, deleted automatically within an hour.
- Cloud Link: account email, billing records (handled by our payment processor; we don't store card numbers), your Walter's device ID and public key, its hostname, plan status, connection times, and, if you allow it, health checks (software version, update status, error counts).
- Support: what you send us, including any diagnostics you choose to share.
- Website: basic server logs kept by our host. No advertising trackers.
5. How we use it
To run and secure Cloud Link, deliver updates, provide support, bill you, prevent abuse, and tell you about Walter (you can unsubscribe). We do not sell personal information or use it to train AI models.
6. Retention
[Placeholder: waitlist until launch + 12 months or unsubscribe; Cloud Link data for the subscription + [90] days; billing records as required by law.]
7. Children
Accounts are for adults (18+). Walter is not directed to children. Don't enrol a child's face or voice without a parent's or guardian's consent. [Lawyer: COPPA and household use.]
8. Biometric information
Face and voice recognition are off by default, require the person's consent, are processed only on your device, and are never sent to us. [Lawyer: Illinois BIPA, Texas, Washington and similar laws.]
9. Your choices and rights
Delete local data at any time on the device. Ask us to access, correct or delete Cloud Link data at [privacy email]. Additional rights may apply depending on where you live. [Lawyer: state privacy laws, GDPR if selling outside the US.]
10. Security
Outbound-only encrypted tunnel, per-device pairing, tested updates with automatic rollback (cryptographically signed releases are being added during the beta). No system is perfectly secure; tell us about vulnerabilities at [security@company].
11. Changes and contact
We'll post changes here and email Cloud Link customers about material changes. Contact: [Company name, address, email].