State: Privacy Policy
Last updated: 2026-08-06. We keep a change log at the bottom.
The short version
We don't sell your data, we don't run ads, and nothing you write is used to train an AI model. State is free during the beta; we make no money from your data and have no plans to. Your texts are deleted after 90 days. Two other companies handle your messages on the way to and from you, and we name both below.
We also can't pretend a text message is a sealed envelope. Read "What we can't promise" before you tell State anything you'd be hurt by someone else reading.
Our commitments
- We do not sell your personal information, and we do not share it for advertising. Not for money, not for "partnerships," not for cross-context behavioral advertising as that term is defined under state privacy law. State contains no advertising trackers, no pixels, and no analytics services of any kind. There is nothing to sell you, and nobody buying.
- Nothing you write is used to train AI models. Not by us, and not by Anthropic, whose commercial terms prohibit training on customer content.
- We use your messages only to reply to you. Not for research, not for an aggregate dataset, not for a separate product. If we ever want to do research, we will ask you specifically and separately, you will be able to say no and change your mind, and it will never be bundled into accepting these terms.
- You can delete your data, and you can do it by texting us. See "Deleting your data."
- These rights apply to everyone, regardless of what state or country you live in, whether or not a law where you live requires it.
What we collect
Your phone number and first name. Required. The phone number is your account, and it's how messages reach you.
Your messages. Everything you text State, and everything State texts back. For this product that usually means how you're feeling, what you're trying to do, and what has or hasn't worked for you.
Your profile and recipes. The states you want more and less of, and the specific things you've told us help you get into or out of them. This is the actual product, it's your library, and it's why State is useful on the twentieth message rather than just the first.
Notes State keeps about you. The assistant maintains a short written summary of what it has learned about you across conversations, and one- or two-sentence summaries of individual conversations, so it doesn't ask you the same things twice.
Your map. If you use the island at island.stateagent.co: the states you've logged, the transitions between them, what you did, whether it worked, and the names you gave to places and tasks.
Your timezone, if you tell us, so reminders arrive at sensible hours.
We do not collect your location, your contacts, your photos, or anything from other apps. State has no ability to read anything on your phone.
We do not knowingly collect anything from anyone under 18. State is for adults. If we learn a user is under 18, we delete their account and stop messaging them.
How long we keep it
| What | How long |
|---|---|
| Your texts and State's replies | Deleted 90 days after they're sent |
| Your profile and recipes | Until you delete them or your account |
| Your map (states, trips, places) | Until you delete your island or your account |
| Notes State keeps about you | Currently until you delete your account, see below |
| Your phone number and name | Until you delete your account |
One thing we want to be straight about. Your raw messages are deleted at 90 days, but the notes State wrote based on those conversations are not currently on that clock, today they're kept until you delete your account. That means the substance of a conversation can outlive the conversation. We think that's wrong and we're changing it so those notes expire with the messages they came from. Until that ships, this table is the honest description, and deleting your account removes them now.
Who else handles your messages
This is the complete list of companies whose systems your messages pass through.
| Company | What they do | What they get |
|---|---|---|
| Sendblue | Delivers messages to and from your phone | The full text of every message, and your phone number |
| Anthropic | Runs the AI model that writes replies | Your recent messages, your profile and recipes, and the notes described above |
| Supabase | Stores the database | Everything we store |
| Railway | Runs the application | Message data in transit through the application |
| Upstash | Short-lived cache and rate limiting | Your profile for up to 60 seconds at a time, and your phone number in rate-limit counters |
| Cloudflare | Serves the island web page | Your IP address and browser details when you load the page |
About Anthropic. Their commercial terms prohibit training models on customer content. They delete API inputs and outputs within 30 days, except where content is flagged by their automated safety systems, in which case they may keep it for up to two years, or where law requires retention.
About Sendblue, which we want to be specific about. Sendblue's current public terms of service permit them to use customer data to improve their own systems and set no retention period, and their delete function removes a message from their records without recalling it. That is broader than we are comfortable with. We have asked them for a written agreement that removes those rights and sets a retention limit, and we will update this policy and this date when that is signed. We are telling you now rather than after, because you are entitled to decide with the real facts.
When State searches the web, the model may send a search query derived from what you asked. Those queries reach search providers and the websites in the results.
We add no company to this list without updating this page first.
What we can't promise
State is not end-to-end encrypted, and we won't claim otherwise. End-to-end encryption means the company running the service mathematically cannot read your messages. A text-message assistant cannot work that way: the AI has to read what you write in order to answer it. Any product that offers you both a server-side AI and true end-to-end encryption over the same content is describing something that does not exist.
Text messages are not private the way an encrypted messaging app is. Your messages travel over Apple's iMessage network or your mobile carrier's SMS network before they reach us. Those systems are outside our control, and SMS in particular is not encrypted in transit. This is true of every text you send, to anyone. If that matters for what you want to say, it's worth knowing before you say it.
Someone with your phone can read your messages with State. For most people this is the realest privacy risk here and it's the one no privacy policy addresses. Your phone's lock screen is the control that matters.
We can technically access your messages. We don't read them casually, and there is no internal tool that browses conversations for entertainment or curiosity. But we can reach them to fix a bug, investigate abuse, respond to a support request from you, or comply with a legal order, and we would rather say that plainly than make an absolute claim we'd have to break.
We will comply with valid legal process. If we receive a lawful order for user data we will provide what we have, and we will notify you unless we are legally prohibited from doing so.
Deleting your data
Text DELETE to State, and we will permanently delete your account: your phone number, name, messages, profile, recipes, map, and the notes State keeps about you. During the beta this is processed by hand, within 7 days of your request, and we will text you when it's done. We will also ask the companies listed above to delete what they hold.
Text "delete my island" to remove only your logged states, trips and routes, keeping your account and settings.
Two honest limits. Deleted data can persist in encrypted database backups for up to 6 months before those backups age out. And we cannot erase messages already delivered to your phone or held in carrier systems, nobody can unsend a text.
You can also ask us what we hold about you, get a copy of it, correct it, or withdraw consent, by texting State or emailing the address below. We respond within 45 days. If we deny a request you can appeal by replying, and we'll give you a written answer.
Crisis messages
If you text something suggesting you may be in danger, State detects it with a fixed list of patterns, not the AI, and replies with crisis line information. That reply is automatic, it happens before the AI ever sees your message, and your message is not sent to the AI model in that case.
Nobody is alerted. We do not contact emergency services, your family, or anyone else. The message is stored like any other message and deleted on the same 90-day schedule.
State is not a crisis service, not therapy, and not a substitute for either. If you're in danger, call or text 988 in the US or Canada, or call 911.
If the company is sold or shut down
Your data is not an asset we will sell. If State is acquired or shut down, we will notify you before your data moves anywhere, and give you the chance to delete it first. Any successor is bound by this policy, or you get notice and a way out.
Changes
We'll post changes here with a new date and a note in the change log. If a change materially reduces your privacy, we'll text you before it takes effect.
Change log
- 2026-08-06: First published.
Contact
Text State, or email dylanbryan2002@gmail.com.
See also our Consumer Health Data Privacy Policy.