Cookie policy

1. Cookies

CSRF protection doesn't use a cookie: every write request is checked against the Origin / Sec-Fetch-Site headers your browser sends. There is no separate CSRF cookie.

2. Browser storage (localStorage, sessionStorage, IndexedDB)

These are not cookies and are not sent to our server; they stay in your browser.

• Preferences: language, theme, lock-screen style, layout and motion settings, your guided-tour progress, your Classroom AI scan choice, your Notes & Voice choices (transcripts, keeping audio, and which account chose the transcript option), and that you've seen this cookie notice.
• The lesson on this device: the In class mode you are in (also a lesson kept going in the background), what you typed on the lesson screen until it is saved to the lesson's note, and which lesson-end notices were already shown today (so none is shown twice).
• Device ID: the same random ID as the agl_did cookie above, also kept here to keep per-device preferences apart.
• Connected account tokens: short-lived Google/Microsoft access tokens (on this device only, never sent to our server). They are kept in localStorage so a new tab or a reopened browser stays connected until the token expires; locking the app (App Lock) or signing out removes them, and the first click after unlocking renews them.
• Rhythm: whether the checklist plan may place long work in your usual best hours, your weekly goal (days with study or work) and which routine suggestions are put off until when (localStorage, agenticly.rhythm.v1; never sent to our server).
• Work-style test: your test answers, the scores computed from them and whether the test was already offered to you once (localStorage, under a key for your account; never sent to our server). They stay when you sign out; deleting your account removes all of it, and “Delete profile assessments” removes the answers and scores.
• Focus sessions: for each focus session on a task, its title, estimate, the minutes spent and how it ended (the last 200, localStorage, this device only; never sent to our server). They let the app suggest realistic estimates for similar tasks.
• Exam workshops: your progress in each workshop (your level, which questions you have already seen, and whether your last 30 answers were right, never the answers you typed) is kept in localStorage on this device only. It is never sent to our server. It belongs to the browser, not to your account: it stays when you sign out, and anyone who signs in on the same browser sees it. Clearing site data removes it.
• IndexedDB: offline cache, local files, the sync queue, the version history of your notes (the last 30 versions of each note, on this device only), your voice print only if you create one (this device only; removed when you sign out or delete it) and your daily briefs (the last 30 days, per account; kept when you sign out, removed when you delete your account).
• Close the day, the weekly reset and “My day fell apart”: the first step you chose for tomorrow, the week’s up to three priorities (with the tasks they link to) and the steps you accepted for the rest of a day are kept in localStorage on this device only, for 28 days. They are never sent to our server.
• Meetings: your meeting settings (whether you accepted the first notice, keeping the audio, live text, tips and ideas of what to say, measuring the room’s sound for the charts, the start offer) and, while a meeting runs or is unsaved, a draft of its text and the sound figures counted so far (at most three drafts, each dropped after 7 days, removed when the meeting is saved or discarded) are kept in localStorage; a meeting recording you chose to keep goes to IndexedDB on this device only (never uploaded). The goal you may type for a meeting is held in memory only and is not saved anywhere. None of it is sent to our server before you save the meeting; then its text and figures become part of the meeting’s note, like your other notes.
• Cache Storage (on-device AI): only if you download on-device models (Settings → On-device AI): the model files, no personal data. “Delete from this device” removes them. While the text-recognition engine starts, its language files are placed in IndexedDB for a moment and removed right after.
• Empty your head and Good days: what you write in Empty your head (the draft, the sorted lines, parked worries, ideas and notes you keep) and which good-day moment was shown on which day (localStorage, this device only; never sent to our server or to an AI). It stays until you remove it or clear the browser’s data.
• sessionStorage: short-lived values for the open tab (e.g. whether to lock on a fresh open).
• Service worker: to show notifications, and to keep the app’s own files for the current version (code, styles, fonts; no personal data, never an answer from our server) in Cache Storage so the app opens without a connection. Changes made offline wait in localStorage until they reach your account, and a copy of your account details is kept there for opening offline (not when App Lock or a PIN is on); see Working offline.

When another account signs in on the same browser, local caches are kept separate per account.

3. Third parties

Agenticly has no advertising, analytics (e.g. Google Analytics) or social media cookies. If you choose a Google Fonts typeface in Settings, it loads from Google's servers and Google sees your IP address; the default fonts are served by us.

4. Your control

You can delete or block cookies and site data in your browser settings. If you block strictly necessary cookies, you won't be able to sign in. Dismissing the notice is remembered only in this browser.