Privacy · Ziggy
Draft v0.2, Saturday 7 November 2026. The Looking Glass Initiative LLC.
What we collect
The words you type to Ziggy and Ziggy's replies; the memory Ziggy keeps for you in your own store; and a record of each proposal you confirmed or rejected (the receipt: what, when, which device). If you sign in with Apple, we keep Apple's stable user identifier for your account, not your email. Nothing else: no contacts, no location, no tracking, no ads.
Who processes it, and what each one sees
| Processor | What they hold | Why |
|---|
| Anthropic (Claude Managed Agents) | Your conversation sessions and your memory store | Runs Ziggy. Sessions persist until you delete your account; your store is mounted only into your own sessions. |
| Cloudflare (our backend, Workers + KV) | Your account id, a hashed device key, your session ids, your receipts; never your invite after it is used | Signs you in, forwards your messages, enforces that only you can confirm your proposals. |
| Apple (Sign in with Apple) | Your Apple identity; we receive only a stable identifier | Signing in without a password. |
How your messages travel
Phone → our Cloudflare backend (TLS) → Anthropic (TLS). The backend never logs message text. The engine key that talks to Anthropic lives only in the backend; the app never carries one, and your phone's key cannot read anyone else's data.
Why
To run Ziggy for you. We do not sell or share your data, we do not use it to train anything, and we do not show ads.
Who can see it
You. Lauren Griffiths, as operator, for support when you ask. No one else: another member's Ziggy cannot read your store, and Ziggy itself will not act on a note telling it to.
Your rights
- Ask Ziggy to forget anything, any time.
- See every decision you made under Settings → Your decisions.
- Sign out a device (its key is revoked on the backend).
- Delete your account and everything with it from Settings in the app: engine sessions deleted, memory archived, keys, proposals and receipts removed. Or write to privacy@thelookingglassinitiative.com.
Retention
Conversations and memory: until you delete your account. Pending proposals: 24 hours. Decided proposals: 30 days. Receipts: until you delete your account. After deletion we keep one line with counts only (how many sessions, keys and receipts were removed) and no content.
Children
Ziggy is not for people under 17.