EDITH Privacy Policy
EDITH is a voice assistant app for Even Realities G2 smart glasses, made by an independent developer, Yahya. It is not made by or affiliated with Even Realities. This policy explains what EDITH collects, why, where it goes, and how you can delete it.
EDITH's website and PC app (edith.starktech.workers.dev/web and the EDITH desktop app) work the same way as the glasses app. Your AI keys and settings stay on your device (in the browser's local storage, or in a settings file on your computer), are sent to EDITH's server only with each request, and are never stored or logged there. Memories, saved chats and lists are kept under a random device key, exactly as described below, and "Forget this browser" (or "Forget this PC") deletes them.
Voices. If you pick one of your AI company's voices (OpenAI, Google Gemini or Groq), the text of each answer is sent through EDITH's server to that company, with your key, to be read aloud; the audio comes straight back and nothing is kept. The free voices are made on your device (the browser's voice) or by Microsoft's speech service (the PC app), and are sent only the answer's text.
Who runs EDITH
EDITH's server is edith.starktech.workers.dev. The developer operates it, and it is hosted on Cloudflare. Older versions of the app reach it through edith-beh9z6.netlify.app, which passes requests on without storing them. Contact for privacy questions and data requests: Yahya@omarkassim.com.
Permissions EDITH asks for
| Permission | What it is used for |
|---|---|
| Glasses microphone (g2-microphone) | Records your voice while you hold or tap to ask a question, and for a few seconds after an answer so you can carry on without touching anything (Settings, "Keep listening after an answer", turns that off). The recording is sent to EDITH's server so your question can be transcribed and answered. Also used, only while you have Subtitles or Live translation turned on, to hear the person talking to you (see "Subtitles and live translation" below). |
| Phone microphone (phone-microphone) | Used the same way, only when the glasses microphone is unavailable. |
| Location (location) | EDITH 1.6 to 1.7 only; EDITH 2.0 does not ask for it. Only if you switch on "Use where you are" in Settings: your phone's position, rounded to about 100 m, so EDITH can give you the weather, your daily briefing and places near you. It is sent with your questions and not stored. |
| Camera (camera) | EDITH 1.7 only; EDITH 2.0 does not ask for it. Only when you tap "Photo" in EDITH: takes one picture, which is made smaller on your phone and sent with your next question so the AI can answer about it. |
| Photo album (album) | EDITH 1.7 only; EDITH 2.0 does not ask for it. Only when you tap "From album": you pick one photo, which is used the same way. EDITH cannot see the rest of your album. |
| Network (EDITH's server) | Sends your questions to EDITH's server and brings the answers back. The app connects to no other server. If you sign in to an account, that happens on EDITH's sign-in page in your phone's browser. |
What EDITH processes and stores
- Voice recordings are sent to the server, forwarded to the speech-to-text service of the AI provider EDITH listens with (see below) to be transcribed, and then discarded. They are not stored. With Live words on, and when EDITH listens with Groq, OpenAI, Mistral or xAI, the recording so far is also transcribed every couple of seconds while you speak, so your words appear on the glasses. Those partial recordings and their text are not stored either.
- Subtitles and live translation, only while you have one of them turned on from the glasses menu: the Even app labels each sound from the glasses as your own voice or someone else's. EDITH drops your own and sends the other person's speech to EDITH's server in short pieces, a sentence or so at a time. Each piece is turned into text by the speech-to-text service of the AI provider EDITH listens with and, for live translation, translated into your language by the AI provider you chose. The text is sent back to your glasses and the audio is discarded. Neither the audio nor the text is stored on the server or in your chats; the lines on your glasses are forgotten when you stop. Listening stops when you double-tap, when EDITH goes to the background, and after 45 minutes at most. Please tell the people you are talking to when you use this, and follow the law where you are about recording or transcribing conversations.
- Saved chats: the transcript of what you asked and EDITH's replies, saved as chats you can reopen, search and delete. Up to 50 chats are kept, each with its last 100 messages and a title. EDITH gets the title by asking the AI provider you chose to name the chat from its recent messages. Older versions of the app keep a single conversation of the last 40 messages instead.
- Recall: a shortened copy (up to 300 characters each) of every question and answer, kept for 12 months, so EDITH can find what was said in past chats when you ask it to. Deleting a chat deletes its copies too.
- Checking for harmful use: after your question has been answered, it is also sent to a separate AI service that judges only whether it breaks EDITH's rules — making weapons, malware, threats, sexual content involving children, fraud, drugs, hate speech, harassing a real person, adult sexual content, or fishing for EDITH's keys or instructions. Nearly every question comes back as nothing, and nothing is kept about it. If a question does break a rule, EDITH keeps the rule it broke, the checker's one-line reason, the time, and up to the first 160 characters of that question, so the person who runs EDITH can see why a phone was warned or banned. The most serious rules ban a phone at once; the others warn it, and the third warning bans it. You are told on your phone when this happens. These records are kept so a ban can be reviewed, and are not removed by Forget everything or Delete account; a ban is reversible, and you can ask for a record to be removed — write to the address at the top of this page. The checker is instructed never to flag questions about self-harm, suicide, being in danger or being in distress, and they must never lead to a ban. This check never uses your own API key.
- Where you are, only with "Use where you are" switched on: your phone rounds its position to about 100 m and sends it with each question, so weather, briefings and "near me" answers fit where you are. It is not stored with your questions. To name the town and find places nearby, those rounded coordinates go to OpenStreetMap (see below); the town they give back is kept on EDITH's server for a month under the coordinates alone, with nothing that identifies you.
- Your calendar, only if you add a calendar link: the private (secret) link you paste is saved on your phone, and, if you sign in, encrypted with your account. Your phone asks EDITH's server to fetch that link and the server passes the file straight back without storing it. Your phone reads the next two weeks of events and sends their times, titles and places with a question, so EDITH can answer about them. They are not stored on the server.
- Your smart home and your own actions, only if you set them up: the Home Assistant address and access token, and the names and web addresses of your actions, are saved on your phone and, when you sign in, encrypted with your account. They are sent with a question so EDITH's server can ask your Home Assistant to list or switch a device, or call the action's address. They are never stored or logged on the server. Anything that unlocks or opens a way into your home only happens after you tap your glasses; that request waits on the server for two minutes and then goes.
- Answer preferences: answer length, how answers appear on the glasses, whether Live words is on, the specialist EDITH answers as (such as Translator or Chef) and the language it translates into, the glasses menu items and quick questions you pick, and any instructions you write for EDITH. They are saved on your phone. Your length, instructions, specialist and translation language are sent with each question. The server keeps only which specialist each saved chat used, unless you sign in (see below).
- Photos, only the ones you send: a photo you take or pick goes with that question to the AI provider you chose, so it can answer about it. EDITH's server passes it on and does not store it. It is kept in the saved chat only as your question's text, never the picture itself.
- Your lists, if you use them: the name of each list, what is on it and what you have ticked off, so they are there on your glasses next time. Up to 12 lists of 40 items each. Deleting everything (Settings, Your data) deletes them too.
- Memories: short facts you tell EDITH about yourself, such as your name or preferences, so it can be more helpful. Up to 200 are stored. EDITH is instructed not to save health details, passwords or financial account numbers.
- A random device key, created by the app, that keeps your data separate from other people's. Unless you sign in to an account, EDITH does not know who you are.
- Your local date, time and time zone are sent with each question so answers match your clock. They are not stored.
- Your language, the one you pick when you set up EDITH, is saved on your phone and sent with each question so answers, speech recognition, headlines, weather and Wikipedia results use it. It is not stored on the server.
- Usage records: for each random device key, when EDITH was first and last used, how many questions were asked (and how many by voice), how many failed, which AI provider answered, and daily counts for the last two weeks. They never include your questions or answers. They help the developer keep EDITH running and spot abuse.
- Your AI API keys are saved on your phone, inside the Even Realities app. The keys needed for a question are sent with it so the server can call your AI provider on your behalf, and the server never logs them. If you sign in to an account, they are also stored on the server, encrypted, so they follow you (see below). If you use Connect OpenRouter instead of pasting a key, OpenRouter makes the key for EDITH on your OpenRouter account once you approve it there, and you can delete it from your OpenRouter account at any time. While that happens, EDITH's server keeps only a one-time code from OpenRouter, for 15 minutes at most, never the key itself.
- Your account, only if you choose to sign in (with Google, or with an email and password): your account ID from the sign-in service, your email address, your name, how you signed in, and when the account was created and last used. While signed in, EDITH also stores your AI API keys, the AI and model you chose, your voice setting, your language and your answer preferences (including your own instructions), encrypted with AES-256-GCM, so they follow your account to another phone. Your memories, saved chats, recall copies and usage record are then kept with your account instead of your device key. Each signed-in phone has its own sign-in session, which ends when you sign out.
Stored data is kept in EDITH's database on Cloudflare, linked to your random device key, or to your account when you are signed in.
Services that receive data
The AI provider you choose receives your questions, conversation context, memories, language, answer preferences and your own instructions to produce answers; the lines EDITH recalls from past chats when you ask about them; the recent messages of a chat to name it; and, if it is the provider EDITH listens with, your voice recordings to transcribe them. This happens with your own API key and under that provider's terms for your key. Only the providers you add in EDITH's settings receive anything:
- Google (Gemini API)
- OpenAI (ChatGPT models)
- Anthropic (Claude models)
- xAI (Grok models)
- Groq
- OpenRouter, which forwards requests to the model you pick
- DeepSeek
- Mistral AI
EDITH's server also uses these services, without sending anything that identifies you:
- Groq, on the developer's own key, receives the text of each answered question to check it against EDITH's rules (see "Checking for harmful use" above). It never receives your API keys.
- Cloudflare hosts EDITH's server and its database.
- Netlify passes requests from older versions of the app on to EDITH's server.
- Open-Meteo receives a city name and your language when you ask about the weather or for your daily briefing.
- BBC News and Google News are asked for current headlines in your language, including a topic when you ask about one.
- DuckDuckGo receives a search query when EDITH looks something up.
- Wikipedia receives a topic, in your language's edition, when EDITH looks it up.
- OpenStreetMap (Nominatim) receives your rounded coordinates, and what you are looking for, when you use "Use where you are" or ask for places nearby.
- A web page you give EDITH is fetched by EDITH's server so it can read and summarise it.
- Your own Home Assistant, and the web addresses of the actions you add, are called by EDITH's server when you ask for something in your home or run one of your actions. They are yours, not the developer's.
If you sign in, Google Firebase Authentication handles it: it receives your email address and name, keeps your password if you sign in with email (stored hashed; EDITH never sees it), sends password reset emails when you ask for one, and keeps a sign-in record for your account. If you choose Google, Google confirms who you are under its own privacy policy. EDITH receives only the details listed above.
EDITH has no ads and no third-party analytics or tracking, and your data is never sold.
Deleting your data
- Open EDITH on your phone:
- Delete, next to a chat in Chats, or Delete this chat in Settings, deletes that chat and its recall copies.
- Forget everything, in Settings, deletes your memories, saved chats, recall copies, messages and usage record from the server.
- Remove, next to an AI in Your AI, deletes that API key from your phone, and from your account if you are signed in. Uninstalling EDITH also removes your keys and preferences from the phone.
- Remove, next to a calendar, deletes it from your phone and from your account. In EDITH 1.6 to 1.7, Remove next to a smart home, an action or a specialist you wrote does the same; EDITH 2.0 no longer uses those, and Delete account (or uninstalling EDITH) removes any it still holds.
- Sign out removes your account's keys, preferences and chats from that phone.
- Delete account deletes your account, the keys and preferences saved with it, its memories, saved chats, recall copies, usage record and sign-in sessions, and your sign-in record at Firebase, and signs out every phone.
- You can also email Yahya@omarkassim.com from your account's email address (or, in older versions of the app, with the memory key shown in Settings), and your data will be deleted.
To keep EDITH working for everyone, the developer can delete a device key's or an account's stored data, or stop it from using EDITH. The developer's tools show accounts by a code, not by name or email address.
Security
All connections between the app, EDITH's server and the services above use HTTPS. API keys saved with an account are encrypted with AES-256-GCM using a key that only EDITH's server holds.
Children
EDITH is not directed at children under 13 and does not knowingly collect their data.
Changes
If this policy changes, the date at the top will be updated and the new version posted at this address.