Privacy policy

This policy covers onecoalescent.app, earth1.co and e1-4.com. All three are run by One Coalescent, an independent project, which is the data controller for each of them.

What every site has in common

• We do not sell personal information or share it for advertising.
• There are no advertising or analytics tags and no tracking cookies.
• Nothing you give us is used to train anyone else's AI models.
• Pages are served over HTTPS, and our hosts keep ordinary web-server logs for a short operational window.

onecoalescent.app

A static site about One Coalescent, with our research and software. There are no accounts and no cookies. Files are served by Cloudflare.

earth1.co

Reading earth1.co needs no account. If you create one, we store your e-mail, the name you give, a salted hash of your password (never the password itself) and your Earth 1 test results, and we send you the Earth 1 newsletter every 3 to 4 days; every e-mail has a one-click unsubscribe. The site sets only a sign-in cookie and a cookie that remembers you finished the test. The simulations run entirely in your browser: nothing you do in them leaves your device. The site and its data are hosted on servers we rent and run ourselves at Hetzner.

e1-4.com and the earth life-hive

Sign-in

You sign in with your voice. There is no typing and no e-mail sign-in. A passkey on your device is an optional backup way in.

What we store

• Voice Stream audio entries, their timestamps, and their transcripts when a transcriber is configured.
• Voice notes you send in Talk conversations.
• Infinity Chalkboard boards you save while signed in.
• Share links you create, and whether they have been revoked.
• Your contacts, and your profile handle and avatar if you set them.
• Your earth life-hive bio and posts. Posts are public to anyone who opens your profile link, and are deleted when you delete them or your account.
• A sealed voiceprint and consent records (below).

Voiceprints and voice data (voice-v1)

When you speak to e1-4, the app computes a voiceprint: numeric features derived from your voice, not the audio itself. The voiceprint is sealed with AES-256-GCM under a server-held key, bound to your account, and used only to recognise you at sign-in and to check that stream entries were spoken by the stream's owner. Every recording is encrypted with AES-256-GCM before it is stored. Login events record a hashed network address, your device string and whether the attempt succeeded, never audio.

Consent

A voiceprint is biometric data under GDPR Art. 9, the Illinois Biometric Information Privacy Act (BIPA), Texas CUBI and Washington law. We collect it only with your explicit consent: voice saving stays off until you agree. When you agree, we record the policy version, the time, a hashed network address, your device string and a short voice recording you made when you agreed, kept as proof. Withdrawing consent from your profile stops all new voice saving immediately.

Processors

Hetzner Online, where we rent the servers that we run ourselves for the database and file storage. Speech-to-text runs on your own device, or through Da Vinci, our own self-hosted AI service, when that is enabled.

Training Da Vinci (train-optin-v1)

Off by default, and a separate opt-in from voice consent. Only if you opt in with the training glyph on your profile is the text of your conversations with Da Vinci copied to a training store run by One Coalescent and used to train our own Da Vinci models. Our legal basis is your consent (UK and EU GDPR Art. 6(1)(a)). Voice recordings, voiceprints and your saved stream are never used for training. You can withdraw at any time with the same glyph: your past conversations are deleted from the training store and no new ones are added. A model trained before you withdrew cannot unlearn what it saw, but it is never trained on your data again.

Retention and deletion

Everything is kept until you delete it. Deleting your account destroys the voiceprint, all audio and every record, including your consent records and the proof recording. You can delete immediately, or schedule deletion after a 30-day cool-off that you can cancel from your profile.

e1-4 is not for children under 13 (under 16 in the EU).

Your rights

Under UK and EU GDPR and the CCPA you may ask for access to, correction of, portability of or deletion of your personal information, and you may object to its processing or withdraw consent. On e1-4 you can download everything as JSON, withdraw consent and delete your account from your profile. For anything else: Contact details will be published here. You can also complain to the UK Information Commissioner's Office.

Changes

When this policy changes, the version above changes. Consent you gave under an earlier e1-4 voice or training policy version stays on record with that version.