Privacy Policy

Last updated: October 16, 2026

Badland (“we”, “us”) is operated by Badland LLC. Badland gives you a personal AI agent that you can text over iMessage or SMS, and an AI assistant you can use on the web at chat.badland.ai and dashboard.badland.ai and in the Badland app for iPhone and iPad, with its iMessage app, widgets and Apple Watch app. This policy covers all of them. It explains what we collect, why, who we share it with, how long we keep it, and the choices you have.

What we collect

Account information. Your name, email address and phone number, depending on how you sign up: email and password, Google, Sign in with Apple, or a code sent to your phone. With Sign in with Apple we receive the name and email Apple shares; if you hide your email, we receive an Apple relay address. Passwords are stored only as a one-way hash.

Your conversations and content. The messages you send and the answers you receive, the files and photos you attach, images you generate, notes, to-dos, memory entries, custom instructions, a persona, and your settings. They are stored on our servers so your history is available on all your devices. If you create a share link for a conversation, anyone with the link can read that conversation, including your messages.

Your agent. If you have a Badland agent, it runs on our servers and keeps what it needs to work for you: the messages you exchange with it (including in group chats you add it to), the memory it builds about you, its name and personality, the reminders and scheduled messages you set up, files and pages it creates, and any accounts or services you connect to it. We also keep your phone number or iMessage address so your messages reach the right agent.

Voice and camera. When you start voice mode in the app, your audio is streamed to the voice provider you choose (OpenAI, xAI or Google) so it can answer you. If you turn the camera on, frames from the camera are sent too, and only while it is on. Audio and camera frames go directly from your device to that provider, not through our servers, with two exceptions: when voice hands a request to your agent, the request and, if you allow it, the current camera frame are sent through our servers to your agent; and voice conversations started on the website without an account are relayed through our servers to xAI. A transcript of a voice conversation can be saved to your history like any other conversation.

Things you choose to add from your device. If you open “Your context” in the app and pick calendar events, reminders, contacts or photos, only the items you pick are added to your message. Badland does not read your calendar, reminders, contacts or photo library in the background. Items you share into Badland from other apps stay on your device until you add them to a conversation or remove them.

Usage and diagnostics. We record request counts and model usage per account to run the service, enforce limits and calculate costs. We keep operational traces of model requests on our own servers for debugging and cost tracking; they include your account id and the text of requests and replies. When a request causes a server error, details of that request (which can include your account id, IP address and request metadata) are sent to Sentry. The iPhone app contains no advertising, analytics or crash-reporting SDK.

Payments. If you buy a plan on the website, Stripe processes the payment. We receive your plan, its status and a Stripe customer id, never your full card number.

How we use it

To provide the service you ask for: answering your messages, running your agent and the tasks you give it, generating images and speech, syncing your history, signing you in, sending the messages you ask for, and keeping accounts secure, including preventing spam and abuse. We use aggregate usage numbers to understand costs and capacity.

We do not sell your personal information, we do not use it for advertising, and we do not use it to track you across other companies’ apps or websites. We do not use your conversations to train AI models.

AI providers and other service providers

Badland works by sending your content to AI models. Before your first conversation in the app, we ask your permission to do this, and you can withdraw it in Settings › AI data sharing.

Each AI provider handles the data it receives under its own terms and privacy policy. We use their business APIs, whose terms say they do not train on API data by default; some providers keep requests for a limited time for abuse monitoring.

Text messages: we do not share your mobile number or SMS opt-in consent with third parties or affiliates for marketing or promotional purposes. The recipients above receive it only to deliver the service.

Our servers are in the United States, and our encrypted backups are stored in Germany. If you use Badland from elsewhere, your information is transferred to and processed in those countries.

How long we keep it

• Your conversations, files and other content stay until you delete them or your account is erased.

• Your agent’s data stays while your agent is active. If you stop the service, your agent is stopped at once and its data is permanently deleted within 30 days. If you delete your account, it is deleted when the account is erased (see below).

• Operational traces of model requests are kept while your account exists and are permanently deleted when your account is erased.

• Error reports in Sentry are kept for up to 90 days.

• Backups are kept on a rolling schedule and age out on their own; we never restore deleted data into the service except to recover from a disaster:

  • daily server archives and off-site copies of the service’s databases: 14 days, plus 7 days of off-site storage snapshots;
  • weekly database exports: the newest 7, so about 7 weeks;
  • your agent’s files: nightly archives on the server for up to 5 days, and off-site copies for 14 days plus 7 days of storage snapshots;
  • the iMessage relay’s recovery state: 2 days on the server, and 7 days off-site plus 7 days of storage snapshots;
  • weekly whole-server snapshots: the newest 4, so about 4 weeks;
  • operational trace backups: weekly, with the newest 2 complete copies and about 9 weeks of trace database exports;
  • our database host (MongoDB Atlas) also keeps its own backups of the service’s databases, which expire on its rolling schedule.

  Deleted data can remain in a backup until that backup ages out, so everything in backups we run is gone within about 9 weeks of erasure.

• Billing records and abuse prevention. Stripe keeps records of your payments and invoices as financial and tax law requires, even after we delete your customer record. We keep a minimal record of moderation actions, with your identity removed, and the details needed to stop a banned person from signing up again.

Deleting your account

Delete your account in the app under Settings › Delete account, or email us. You then have 30 days to change your mind.

Right away:

• any Stripe subscription is cancelled, so you won’t be charged again. Restoring your account does not restart it;
• you are signed out everywhere;
• your agent is stopped and its iMessage, SMS and voice routes are removed, so it no longer receives or sends messages;
• data the app stored on that device, including saved answers in the Badland iMessage app, is erased. Answers an older version of the app kept inside the iMessage app itself are erased the next time it opens.

For the next 30 days your account is scheduled for deletion. If you sign in, or sign up again with the same email, we show the date it will be deleted and let you choose Restore account or Keep deletion. Restoring gives you back your account and history and restarts your agent with its routes.

After 30 days your account is erased:

• your conversations, files, generated images and audio, notes, to-dos, memory, custom instructions, API keys, connected services and sessions are deleted from our servers;
• your agent, its memory and files, and its message history on our servers are permanently deleted. Part of this is still done by hand by our team once the account is erased, so for a short time afterwards the stopped agent’s files and message relay records can remain on our servers, stopped and unreachable;
• your account’s operational traces are deleted;
• if you used Sign in with Apple, we ask Apple to withdraw Badland’s access, and your Stripe customer record is deleted.

Group conversations you shared with other people remain with those participants. Copies of iMessages you exchanged with your agent can also remain in the Messages history of the Mac that relays iMessages for agents; we don’t delete that history automatically yet, so email us and we will delete your conversations from it. Copies in backups expire as described above.

Your choices and rights

• AI data sharing can be withdrawn in Settings › AI data sharing. The iMessage app and the Apple Watch app ask, and can be withdrawn, separately. Badland can’t answer without it, so withdrawing signs you out.
• Device permissions (microphone, camera, speech recognition, calendars, reminders, contacts, photos) can be changed at any time in iOS Settings.
• Text messages: reply STOP to opt out of SMS from your agent, or HELP for help.
• Access, correction, export or deletion: email us. Depending on where you live, you may have more rights under local law (for example in the EEA, the UK or California), and we will honor them. We don’t sell or share personal information for cross-context behavioral advertising.

Age

Badland is for adults. You must be 18 or older to use it, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 has given us information, contact us and we will delete it.

Security

Data is encrypted in transit (HTTPS). Connected-service tokens and Apple tokens are encrypted at rest, and the app keeps its sign-in credentials in the iOS Keychain. Signing out or deleting your account revokes the long-lived sign-in credential at once; a short-lived access token issued before that stops working within about 15 minutes. No system is perfectly secure, and we will tell you if a breach affects your information as the law requires.

Changes

We’ll post any change here and update the date above. For material changes we’ll also tell you in the app or by email.

Contact

Badland LLC · support@badland.ai

The earlier policies at chat.badland.ai/privacy-policy and agent.badland.ai/privacy now point here.