Privacy Policy

Headcanon is a private, personal application. This policy explains what it stores and where your data goes.

What we store

Your account (email and an encrypted password), the projects, characters, recipes, and stories you create, and your AI provider settings. API keys you enter are encrypted at rest and never shown back in full.

Where your prompts go

When you generate content, the relevant story context is sent to the AI endpoint you configure. That provider processes the request under its own terms. Headcanon does not send your data anywhere else.

Your stories stay private

Stories are visible only to your account. Nothing is published or shared.

Deletion

You can delete your projects and stories at any time. Deleting a project removes its characters, recipe, and stories.