Privacy policy

Who we are

Reposance is a personal assistant for your studies and everyday life, made by LookFar Analytics Inc. ("we", "us") of Kelowna, British Columbia, Canada. This policy covers the website at reposance.com, the web app, our phone and iPad apps, and the Reposance extension for Chrome. We are responsible for the personal information described here.

Questions or requests: support@reposance.com.

What we collect

What you give us

• Your account: your name, your email address, your birth month and year (to decide what is on for your age; we never show it), and, if you add one, your school email.
• How you sign in: a passkey, a Google, Apple or Microsoft sign-in, or a one-time code sent to your email. From Google, Apple or Microsoft we receive only your name, email address and, from Google, your profile photo. We never see a password.
• Your content: what you type, say, upload or make in Reposance: chats, notes, files, photos, voice, course material, and what Reposance makes for you from them.
• Your settings and choices: for example your time zone, your courses, which model you prefer, and the approvals you give or decline.

From apps you connect

Only if you connect them, and only what each connection allows: your Google or Microsoft account (mail, calendar, contacts, files, Teams), your school's course calendar feed or Canvas, a bank account through Plaid (read-only, 18 and over), Telegram or WhatsApp to reach you, and other apps you add yourself. The sections on Google and Microsoft list exactly what each allows.

From your use of Reposance

• Activity: what Reposance did for you and what it changed, so you can see it and undo it.
• Usage: how much of your plan you've used, which models did the work, and what it cost.
• Device and security details: your sign-in sessions, the device and browser they're on, and records we need to keep Reposance safe.
• Lecture recordings, only when you press Record, and only in a course whose rules allow it. The recording is kept in that course's Files and turned into text for your notes.
• Location, only if you allow it, only while you're using the app, and approximate unless you choose precise. You can turn it off in Settings.

The Chrome extension

When you pair the extension with your account:

• Course pages. When you open or switch to a tab, it sends that page's address, title and the start of its text (up to about 6,000 characters, plus any dates or PDF on it) to Reposance, so Reposance can recognise course pages and pick up deadlines and files. Quiz and exam pages are skipped.
• Tasks you ask for. While it does a task in your Chrome, it reads the pages of that task (their structure, text and, when needed, a screenshot) and sends them to Reposance to plan the next step. "Ask about this page" sends the page you're on.
• "Show it once". If you show Reposance how to do something, it records which fields you filled and the start of what you typed in ordinary fields.
• Never: it doesn't read, record or type passwords, card numbers, security codes or one-time codes, and it takes no screenshot while one of those fields is in use.

How we use it

• To do what you ask: answer, plan, write, study with you, keep your day in order, and act for you when you approve.
• To remember what helps you: Reposance keeps a memory of facts and preferences you can see, correct and delete in Settings.
• To keep Reposance and you safe: sign-in checks, stopping abuse and fraud, and the limits that stop Reposance doing what you didn't approve.
• To run the service: billing, support, fixing bugs, and telling you about important changes to your account.
• To meet legal duties.

We don't sell your personal information, we don't share it for advertising, and we don't use it to train or evaluate AI models. We don't use analytics or advertising trackers in the app.

Google user data

When you connect your Google account, Reposance asks Google for the access below, all at once on Google's consent screen. Reposance uses it only to show you your own mail, calendar, contacts and files in Reposance, and to do what you ask with them. Writing (sending, creating events, saving files) happens only for a task you asked for, and sending always waits for your yes.

• No ads. We never use Google data for advertising, including personalised or retargeted ads.
• No sale. We never sell it, and we never give it to data brokers or information resellers.
• No human reading. Google's policy allows people to read your data only with your consent for specific items, for security purposes such as investigating abuse, or when the law requires it. Our own rule is stricter: our staff have no access to the content of your account.
• No training. We don't use Google data to train AI models. When an AI model reads it to do your task, that provider is not allowed to train on it.
• Only to run Reposance for you. We transfer Google data to others only as needed to do what you asked (for example to the AI model that drafts your reply), for security, or when the law requires it.

You can disconnect Google at any time in Settings › Connected apps, or at myaccount.google.com/connections. When you disconnect in Reposance we revoke our access with Google and delete the stored keys. What Reposance already learned from your Google account stays until you choose Forget for that app or delete your account (see Retention and deletion).

Microsoft data

When you connect a Microsoft account (Outlook, Microsoft 365, a school or work account), Reposance asks Microsoft Graph for the access below. Some of it is asked for only the first time you use that part. The same promises apply as for Google: no ads, no sale, no training, no staff reading, and only to do what you ask.

You can disconnect in Settings › Connected apps. Microsoft has no way for an app to revoke its own access, so we delete the stored keys on our side; you can also remove Reposance at account.live.com/consent/Manage (personal) or myapps.microsoft.com (work or school).

AI and your data

• What the model sees: to answer you, Reposance sends the AI model what that task needs: your message, the relevant parts of your memory, and the mail, events or files the task is about. Your passwords, sign-in codes and bank transactions are never sent to a model.
• Which models: Claude, made by Anthropic, does most of the work. Some lighter tasks may use open models run by US hosts such as Groq, and you can choose a model yourself or bring your own key. See How Reposance uses AI.
• No training: we only use AI providers whose terms forbid training on what we send them. We don't train or evaluate models on your data either.
• Brief storage by providers: AI providers may keep what we send for up to 30 days to check for abuse, then delete it (Google's Gemini service up to 55 days, so it never gets sensitive information). We don't let providers that train on what we send handle your data.
• Your own key: if you use your own API key with a provider, that provider's terms with you also apply.

Sharing and service providers

We share personal information only in these cases:

• With service providers that run parts of Reposance for us, under contracts that let them use it only for that work.
• With people you choose, when you send a message, share a note or file, or join a space.
• With apps you connect, when Reposance acts there for you.
• When the law requires it, or to protect someone's safety, and if LookFar Analytics Inc. is ever sold or merged, under this policy's promises.

These providers run parts of Reposance today:

These are used only when that feature is on:

Apps you connect yourself, such as Google, Microsoft, Canvas or your own MCP servers, aren't our providers: they're your accounts, and their own privacy policies apply. We'll list any new provider on this page before it receives your data.

Cookies

We use only the cookies Reposance needs to work. No advertising cookies and no analytics trackers.

The website loads fonts from Google Fonts and some code from jsDelivr, and the checkout page loads Stripe. Those services can see your device's address when they send the files.

Retention and deletion

We keep your information while you have an account, unless you delete it sooner or a shorter time below applies.

• Chats: kept until you delete them, or deleted automatically after a period you choose in Settings › Privacy and data. Deleting one chat removes it from Reposance and from its memory; the stored copy is erased when you choose Delete all chats or delete your account. Private chats keep nothing.
• Deleted files and notes: stay in Recently deleted for 30 days, then go.
• Cloud computer pictures: still pictures of a task are kept 30 days, and records of what a task did for 180 days. Video is never recorded. You can delete a task's pictures at any time.
• Sign-in sessions: end after 30 days at most.
• A connected app: disconnecting stops new reading at once and deletes the stored keys. What Reposance learned from it stays until you choose Forget for that app, which removes it.
• A bank connection is removed after 60 days without you signing in.

Deleting your account

Schedule it in Settings › Privacy and data. You have 30 days to change your mind, and your account keeps working until then. After that, your account and data are deleted and your encryption keys are destroyed, so whatever was encrypted with them (your files, recordings and connected-app keys) can no longer be read, even in our backups. The backups themselves roll off within about 8 weeks. Messages you sent to others in a shared space stay with them, shown from a "Former member". Your handle is held for a year so nobody can pretend to be you.

We may keep a small amount of information longer when the law requires it, for example payment records.

Your rights

Wherever you live, you can:

• see what Reposance knows about you, and why it thinks it;
• correct it, or ask us to;
• get a copy (Settings › Privacy and data › Take a copy gives you a file you can open in other apps);
• delete one item, a whole app's data, or your account;
• withdraw a consent, for example by disconnecting an app or turning off location.

Canada (PIPEDA) and Quebec (Law 25): you also have the right to know how we use your information and who we share it with, to have it moved to another service in a common format, and to complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

California (CCPA/CPRA) and other US states: you have the right to know, delete, correct and limit the use of sensitive information. We don't sell or share personal information for cross-context behavioural advertising. We won't treat you differently for using your rights, and you may use an authorised agent.

To make a request, write to support@reposance.com from your account's email. We may ask you to confirm it's you, and we answer within 30 days.

Students and schools

• You sign up yourself. Reposance is your own account, not your school's. Your school doesn't see what you do in it.
• Your school email is optional. If you add it, we send it one link to check it's yours, and use it to turn on student features.
• Course material you add (a syllabus, slides, a lab handout) is used to help you study that course, and nothing else.
• Reposance follows your course's AI rules and stays out of live quizzes and exams. See academic integrity.

Children and teens

• Reposance is not for children under 13 (under 14 in Quebec). If someone younger tries to sign up, Reposance stops and keeps nothing they typed. We don't knowingly collect information from children under 13, in line with the US Children's Online Privacy Protection Act (COPPA). If you believe a child has an account, write to support@reposance.com and we'll delete it.
• Teens from 13 to 17 get the personal assistant, while other people can reach them only in spaces they've been invited to. Being findable, messages from outside those spaces, paying and banks wait until 18.

Where your data is stored

Reposance's servers are in the United States, and so are most of the providers above. If you live in Canada, your information is stored and processed in the US, where it is protected by this policy and our contracts but may be accessed by US authorities under US law.

Security

Everything is encrypted on the way to and from Reposance. Your files, recordings, messages in spaces, connected-app keys and your own model keys are encrypted with a key unique to you. The rest, such as chat text and memory, sits on encrypted servers behind strict rules that let each account reach only its own data. Passkeys protect sign-in and the steps that matter most. No system is perfectly secure, so we tell you about it if a breach puts your information at risk. More on Security & data use.

Changes to this policy

When we change this policy we update the date at the top. For an important change we tell you in the app or by email before it takes effect, and we ask again for your consent where the law requires it.

Contact

Privacy questions and requests: support@reposance.com. A person reads every message.

LookFar Analytics Inc., Kelowna, British Columbia, Canada.