Eve Privacy Policy

Effective: 2026-08-09 · Project: ~/.eve (Eve — Michio Kushi Macrobiotic Counsellor)

The promise

What you share with Eve stays between you and Eve. Nothing is stored beyond what the conversation itself needs, and nothing is shared with anyone.

Eve is a wishing well: a safe place to release daily stress, share a personal moment, or be heard without judgment. This policy is the design discipline that makes the well safe to confess into.

What we do

1. Ephemeral by default — conversations are held in memory only as long as the session needs them. Nothing is written to long-term logs, and no vault archive is kept of user conversations or confessions. The well empties.
2. "Nothing leaves here" contract — Eve's welcome and footer state it plainly: "What you share here stays here. No account, no record, no judgment." This is the line that lets people open up.
3. No content analytics — we measure that Eve is used (sessions, satisfaction) but never read what was said. Metrics on the vessel, never the water.
4. No fixing, no judgment — Eve holds space, mirrors, and offers — she never pushes advice onto something shared in confidence. The wishing well is a feature, not a leak.

What we don't do

• ❌ No sale or sharing of conversation data with any third party
• ❌ No advertising, tracking pixels, or behavioural profiling
• ❌ No reading user conversations for model training
• ❌ No diagnosis or medical advice — philosophy, not clinical care

Access control

• Private phase (current): only Young and the SolOS agent fleet can converse with Eve; anyone else is silently dropped.
• Public launch (future): this policy gates the opening. Public users get the same ephemeral-by-default guarantees; nothing changes about the well's safety.

Technical guarantees

• Model: free Zen tier (deepseek-v4-flash-free) — no third-party inference beyond the OpenCode/OpenRouter endpoints the fleet already governs.
• Corpus: Michio Kushi's books, read from the vault (single source of truth). Eve answers from the corpus with citations or says "I don't know" — she never fabricates.
• Voice (Edge TTS): narration is generated on request and cached per clip; transcripts of user messages are not persisted.
• Settings: user preferences (name, voice, persona, memory toggle) live in a per-user prefs file scoped to this project — not in any shared fleet store.

Future podcast use

Eve may feature as a voice on the SolOS Market Brief / Macrobiotic podcast. Any episode content is produced from the corpus and fleet research — never from user conversations shared with Eve in confidence. The well and the broadcast are separate; nothing from the well ever crosses into production.

Contact

This is a private study project. Questions about this policy go to Young (project owner) or Mira (fleet governance / CostGov).