Privacy policy

Last updated 8 September 2026

Doppelganger is a personal memory: it keeps a record of what you see, hear, read and write on your own devices and in your own accounts, so that you can search it and ask questions about it later. This policy explains what we collect, what we do with it and how you get rid of it. It is written to be read, not skimmed; if anything here is unclear, write to marc@getdoppelganger.com.

The service is operated by Doppelganger Technologies (“we”). Everything below applies to app.getdoppelganger.com, the Doppelganger Mac app and the connectors you turn on from them.

What we collect

Only what you switch on. Each source is off until you enable it and can be turned off again at any time.

• Account. When you sign in with Google or Apple we receive your name, email address and profile picture and use them only to create and identify your account. Sign-in is handled by Clerk.
• Your Mac. If you install the Mac app and turn on capture, it records periodic screenshots of your screen and the text on it, and, if you enable audio, recordings and transcripts of what your microphone and system audio hear.
• Messages. If you turn them on, your WhatsApp and iMessage conversations as they appear on your Mac or on a phone you link.
• Browsing. If you turn it on, the pages you visit in Chrome and Safari (address, title and page text).
• Google account. If you connect a Google account, the last twelve months of your Gmail messages and new messages as they arrive, the events in your primary Google Calendar, and your Google Contacts. See the Google section below.

What we do with it

• We store it in your own tenant and show it back to you: a timeline of your days, your mail, calendar, contacts, messages and browsing, and a search across all of it.
• We interpret it for you. Automated processing extracts text from screenshots, transcribes audio, and writes short summaries and profiles of the people, places and topics in your data (the “People” and “You” pages). For this we send excerpts of your data to large-language-model and speech-to-text providers under contracts that forbid them from keeping it or training on it.
• If you enable meeting preparations or weekly reviews, we email summaries to your verified address. You can turn either off in Settings or unsubscribe from an email. Replies you confirm in the app become dated source evidence for your private context. We do not use open or click tracking.
• We answer your questions. When you ask Doppelganger something, in the web app or through an AI assistant you have connected, the relevant excerpts are sent to a model provider to produce the answer.

That is the whole list. We do not sell your data, we do not show ads, we do not use your data to build advertising or marketing profiles, and we do not use it to train our own or anyone else’s models. Nobody at Doppelganger reads your data unless you ask us to (for example to debug a problem you reported), unless we have to investigate abuse or a security incident, or unless the law requires it.

Google user data

When you connect a Google account you grant Doppelganger read-only access to three things, each through its own Google permission: your Gmail messages (gmail.readonly), your Google Calendar events (calendar.readonly) and your Google Contacts (contacts.readonly). We never ask for permission to send mail, change events or edit contacts, and the connector cannot do so.

We use this data for one purpose only: to display and interpret your own information for you, inside your own Doppelganger account and in the email summaries you enable. Mail, events and contacts appear on your Mail, Calendar, Contacts and People pages, are indexed for your search, and are included in the excerpts sent to model providers when you ask a question or when profiles are written. The Google account’s OAuth tokens are held by Nango, our OAuth provider; Doppelganger’s own servers never store them.

Doppelganger’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is not transferred to anyone except to provide or improve the features described above, for security purposes, or to comply with the law; it is not sold; it is not used for advertising; and it is not read by humans except as described in the previous section.

Disconnecting a Google account on the Sources page revokes our access and stops all syncing immediately. You can also revoke access at any time from your Google Account at myaccount.google.com/permissions.

Where it lives and who helps us run it

Your data is stored in a database and object storage dedicated to the service and separated per account. We rely on these providers to run Doppelganger, each of which processes data only on our instructions: Cloudflare (workers, storage and networking), Neon (database), Vercel (the web app), Clerk (sign-in), Nango (OAuth tokens for connected accounts), Resend (delivery of optional summaries and receipt of replies), Deepgram (speech-to-text) and large-language-model providers (currently Google and OpenAI) for the interpretation described above. Errors and anonymous usage counts may be sent to Sentry and PostHog; these never include the content of your data.

When you enable email, Resend processes your address, the message content and delivery metadata. Email content also reaches your mailbox provider. Unconfirmed reply copies in Doppelganger expire after seven days; confirmed replies remain with your context. Provider retention is separate from this seven-day window.

Data is encrypted in transit and at rest by these providers. Access to production systems is limited to the people who operate the service.

How long we keep it and how to delete it

We keep your data for as long as your account exists, because the point of the product is to remember. You can disconnect any source at any time; new data from it stops immediately. To delete some or all of your data, or your whole account, email marc@getdoppelganger.com from the address you signed up with and we will do it within 30 days and confirm. Deleting your account deletes everything, including all Google data we hold for you; Google data is also removed from backups within 30 days.

Your rights

You can ask us at any time what we hold about you, ask for a copy, ask us to correct or delete it, or object to how we use it. If you are in the EU, the UK or another place with data-protection law, you also have the right to complain to your local supervisory authority. Contact us first and we will usually be able to sort it out faster.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect. The date at the top is the date of the current version.

Contact

Doppelganger Technologies, marc@getdoppelganger.com. Our terms of service are at app.getdoppelganger.com/terms.