Who can see your data
Checked against our code on October 14, 2026.
Patch has to read your calendars and some of your mail to do its job. Here is who else can, and what we keep.
For your household
Loading...
People at Magic Quilt
Our support tools can't open your household unless you turn on support access. It is off until you turn it on. It ends by itself after 3 days, or up to 14 if you choose, and you can turn it off at any time. Even with it on, support cannot change or delete anything, see your passwords or sign in as you.
We email every adult on the account when it is turned on, and again the first time someone looks. If an email ever fails, the list of who looked is still complete.
In an emergency we can open a household without your switch. That look is still listed, marked “Magic Quilt emergency access”.
AI apps you connected
If you connected Claude, ChatGPT or another AI assistant to Magic Quilt, what it asks for goes to that company under your own account with them, not under our terms. You can disconnect any of them in Setup › Connections, or ask Patch to.
The AI that reads for Patch
Patch uses AI from two companies: Anthropic (Claude) for most of what it reads and writes, and OpenAI for some request parsing. We use their standard business terms, with no special deal, so their own pages are the source of truth: Anthropic's terms · how long Anthropic keeps data · OpenAI's data controls.
When we last checked (October 13, 2026), those terms said:
- Neither company trains its AI on what we send.
- They keep it for up to 30 days, then delete it, unless it is flagged for breaking their rules (Anthropic may then keep it up to 2 years) or the law requires more.
What goes to Anthropic is not only mail. It also includes your calendar, your notebook and what you say to Patch, so Patch can answer you.
What we control: before an email goes to the AI, we replace email addresses, phone numbers and street addresses with placeholders. Names stay, so Patch can tell which child something is for.
What we keep, and for how long
- Usually a few days, 30 days at most
- The text of an email Patch read. It goes once you have answered its suggestions.
- While your account is open
- The dates and tasks Patch found, with the sender, subject and a link back to the email.
- Not saved
- Mail from your inbox with nothing useful in it. We keep only a short note that we checked it.
- 30 days, or 90 if something went wrong
- A copy of each email you forward to Patch, so we can fix what we got wrong.
- 7 days, or until you answer
- The first look at your inbox.
- While your account is open
- Your calendars, notebook and people.
- While your account is open
- What you say to Patch.
- 2 years
- The list of who looked through our support tools.
- Within days
- Daily backup copies of our database.
The list of who looked stays after you delete your account, without your household's data, so a family that left can still ask.
Your controls
- Support access and who looked: Setup › Data & privacy
- Stop reading an inbox: Setup › Connections
- Disconnect an AI app: Setup › Connections
- Clear email history: Setup › Data & privacy
- Download all your data: Setup › Data & privacy
- Delete your account: Setup › Danger zone
Deleting your account removes your household right away. Backup copies roll off within days.
Other families
Today nothing from your household is combined with other families' data.
What we don't promise
Patch's servers have to read your data to work, so most of it is stored in a form our systems can read. Your Google and Microsoft sign-in tokens are encrypted. Backups hold the same data as the database.
The people who run our servers could reach the database to fix an outage. Support access controls our support tools, which is how anyone at Magic Quilt looks at a household day to day.
We plan to encrypt more, so that even our own systems need a key for each household. That is a plan, not something we do yet.
Questions: hello@getmagicquilt.com · Full privacy policy