Privacy Policy

Authority One identity service · Last updated 2 August 2026

Authority One provides single sign-on: one account you use across Authority One products (for example, Mnemonic). This policy explains what we collect, why, and your choices.

What we collect

• Account identifiers — your email address, and a display name or username if you provide one.
• A durable account ID — an opaque identifier (authority_principal_id) we generate to recognize you across products. It contains no personal information.
• Sign-in data — if you sign in with Google, Google shares your email and basic profile (name) to create and verify your account. If you use a password, it is handled by our authentication provider and never stored by us in readable form.
• Authentication events — sign-in timestamps, for account security.

We do not collect or store the content you create in Authority One products (your notes, files, or activity). That data lives in each product, not in Authority One.

How we use it

• To authenticate you and give you access to Authority One products with one account.
• To set up your account within a product the first time you use it, linked to your durable account ID.
• To secure your account and send account-related email (such as email verification).

What we don't do

• We do not sell your personal data.
• We do not use your data for advertising.
• We do not share your identity data except with the service providers below, solely to operate the service.

Service providers

• Supabase — authentication and the identity database.
• Google — only if you choose "Sign in with Google."
• Resend — delivery of account emails.
• Vercel — hosting.

Sessions and cookies

We use browser session storage to keep you signed in. We do not use advertising or cross-site tracking cookies.

Data retention and deletion

We retain your account while it is active. To delete your account or request a copy of your data, contact us at the address below. Deleting your Authority One identity removes your identity record; data held inside individual products is handled by each product separately.

Your choices

• You can sign in with email/password or Google — you are never required to use Google.
• You can request account deletion at any time.

Contact

Questions or requests: privacy@authorityx.com.