The things you're avoiding are personal. Here's exactly what happens to them.

What happens to your words

When you ask for a first move, the task you typed is sent to an AI to shape that move: Anthropic's Claude — or Alibaba Cloud's Qwen when you write in Chinese (requests from mainland China always use Qwen and never reach Anthropic). Shaping is the only reason your words ever leave this device in a form anyone can read; the optional sync below carries only an encrypted copy that no one, including us, can decode. Our shaping endpoint passes your words through; it does not store them, log them, or use them for anything else. Nothing you type is ever stored on a server anyone can read.

What it remembers

first move keeps a small memory of the things you're working on, on this device only: the thing in your words, the last move you took, how it went, and when. That's how it can say "yesterday you started the email, want to pick it up?" instead of making you explain everything again.

This memory never joins the usage counts below, and it leaves the device only one way: inside sync's encrypted copy, if you choose to turn sync on. It is yours to switch off — the switch is in the app's settings. With memory off, the app still works exactly the same; it just won't remember between visits.

What stays on your device

Everything the app remembers lives in this browser, on this device:

• Your stars: the date, outcome, and length of each start. Never the task itself.
• Your things: what you told it you're working on, the moves it gave you, and where you stopped, so it can offer to continue. The off-switch and the erase control live in the app's settings.
• Your recognized constellations: when your stars happen to form a real constellation, which one and when — held as dates and star references, never words.
• Companion memory: small things like how many sessions you've had, so it doesn't repeat itself.
• A local event log: which screens were used and when, for your own export. No task text.
• A daily counter: how many shaped moves you've used today.
• Small preferences: your language choice and which one-time introductions have already played.
• A random ID: a number this device made up, linked to nothing about you. It exists so the usage counts below can tell "someone came back" from "someone new arrived."

Sync between devices: optional, and we can't read it

Sync is off unless you turn it on. When you do, this device creates an eight-word phrase and uses it to lock your stars, things, and recognized constellations into an encrypted copy before anything leaves the device. The server stores those scrambled bytes and a random label. It cannot read your words, cannot list your things, and cannot tell a star from anything else. The phrase itself is never sent anywhere.

The phrase is the only key. Save it somewhere safe: we cannot recover it, because we never had it. Losing the phrase loses the synced copy, never what's already on your devices. Everything the app does works the same with sync off; sync only carries, it never holds the original.

Anonymous usage counts

To learn whether this actually helps people start, the app sends a few anonymous counts: which step was reached, whether a session started, how it ended ("started · 5 min"), and error codes. Every count is a name plus a category. Your words are never part of it, and the server enforces that no matter what any device sends. Your IP address is not stored. If your browser asks not to be tracked (Do Not Track or Global Privacy Control), nothing is sent at all.

What doesn't exist

No account. No third-party trackers. No ads. No cookies, only the local storage described above. Beyond the anonymous counts (and, only if you turned on sync, one encrypted copy we cannot read) there is no server-side record of you at all.

Your controls

Everything above is yours to manage inside the app. The memory switch, sync and your phrase, backups (save and restore on any device, anytime), and the erase-everything control live together under settings — the quiet word at the bottom of the app, beside the link that brought you here.

Restoring merges: stars and things from the backup join what's already here, nothing is overwritten. Turning memory off stops anything new from being remembered; what's already remembered stays until you erase it. Turning sync off here doesn't delete the synced copy. Erasing does: with sync on, erase removes the synced copy first (it has to be reachable), then this device; other devices keep their local skies until you erase there too. Clearing this browser's site data does the same as erase for this device only.

This page describes the app as it actually works today (last checked July 2026). If the architecture ever changes (for example, optional accounts) this page changes first.