Privacy Policy

Insight Bento ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our application.

• Personal Information:We collect personal information that you voluntarily provide to us when you register, such as your email address and name (via Google sign-in or an email address and password).
• Content Data:We process the text, images, and URLs you submit in order to generate summaries and insights. Producing them means sending that content to the AI providers described under Third-Party Services below. Your capsules are kept in your account and served to you through account-authenticated access; saved images, including images in older capsules, are kept in private storage and served the same way.
• Usage Data:We may collect information about how you access and use the Service, such as your browser type, device type, and access times.

We use the information we collect to:

• Provide, operate, and maintain our Service.
• Improve, personalize, and expand our Service.
• Understand and analyze how you use our Service.
• Process your transactions and manage your subscription.
• Send you account and service messages, and — if you keep them on — optional product and lifecycle emails. You can turn the optional emails off in Settings.

We use industry-standard security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Some of what InsightBento does cannot be done on our own servers, so the providers below receive data. A request may be hedged or retried, so the same content may be sent to more than one AI provider from this list at the same time or one after another. Each provider has its own privacy policy governing what it does with what it receives; this section describes what we send, not a provider’s internal retention or model-training practices.

• DeepSeek, Moonshot (Kimi) and Volcengine (Doubao) — distilling. The article text, note, or pasted content you submit is sent to one or more of these models to produce the summary, key points and quote. Images you upload for text extraction are sent to Volcengine’s vision model. We do not attach your name, email or account identifier as separate fields to these AI requests, but the content you submit may itself contain personal information. Re-refining, focus suggestions and Ask send the original text or a few retrieved excerpts. The inspiration graph also sends titles, summaries, tags and short excerpts of body text.
• Jina AI — fetching and indexing. A URL you submit may be sent to Jina to retrieve the article text, and the titles, summaries and tags of your capsules are sent to generate the embeddings that power search and related-capsule suggestions. With AI authorization enabled, a semantic-search query is sent to Jina to generate its vector. Keyword-only search does not send your query to Jina. When AI authorization is granted, the titles of links you import are also sent to create vectors.
• Firecrawl — fetching. A URL you submit may be sent to Firecrawl to retrieve the article text.
• Supabase — authentication, database and file storage.
• Vercel — hosting and content delivery.
• Apple — iOS purchases. Apple processes purchases made in the App Store and handles App Store subscription management. We receive and store purchase verification and entitlement records, such as the product, transaction and expiry details, so the app can confirm access and restore purchases.
• Waffo — web payments. For subscriptions bought on our website, checkout is completed on Waffo’s payment page. We receive the email address and account identifier used for the order, and transaction status and records for accounting and entitlement. InsightBento does not provide a full card-entry form; card details are entered on the payment provider’s checkout page.
• Resend — product emails. If you have not turned optional product emails off, Resend delivers lifecycle and product emails such as onboarding tips, schedule reminders and a first-week look-back. It receives the recipient email address and the email content, which may include a bento title or a schedule date. You can turn these emails off in Settings, and each one includes a one-click unsubscribe link. Account and service messages needed to operate your account are separate from these optional emails.
• Google — only if you choose to sign in with Google, which shares your email address, name and profile picture with us.

With AI authorization enabled, semantic-search queries are sent to Jina to create their vector, but are not stored by us. Keyword-only search does not send queries to Jina. In the current image-to-text flow, an image you send for text extraction goes to Volcengine’s vision model and is not saved as a capsule image in your account — only the text produced from it may be saved. Photos you import from the iOS share sheet are also kept on your device in the app’s import records and remain after refining; an import that still needs attention appears in the app’s “Pending imports” list, where deleting it also removes the on-device copy saved with it.