How it worksFAQ
← Back to home

Privacy Policy

Uncook, a product of ARLEN Systems

Last updated: 28 September 2026

Uncook has a free plan and paid plans (Pro and packs). What each includes is on the pricing page. This document reflects the product as built; it is not legal advice.

Where your data is

Processing is not EU-only. The site and its code run on servers in the United States, our main database is in the European Union (Ireland), and the AI that produces your results runs on Anthropic’s infrastructure in the United States. Transfers outside the European Union are covered by the European Commission’s standard contractual clauses, and Anthropic’s commercial terms state that Anthropic may not train models on our customer content.

Without an account

You can try Uncook without an account — no sign-up, no profile. We set no cookies of our own; your browser keeps a small token to keep automated abuse out. It is not linked to you, and it is replaced regularly.

To count your trial, your browser keeps a random device identifier, created on your first visit and linked to nothing else — not to an account, not to a debrief. It is used only for the trial — never to follow you — and it expires after 13 months. A separate random key, also kept in your browser for up to 13 months, lets you come back to your trial debriefs. When you arrive from one of our emails, your browser keeps which email it was for 30 minutes, so we can count which of our emails are useful. We keep only totals. We also cap trials per network block, not per exact address.

Without an account, you can give your email address to receive a result by email or to get a link to share it. We then keep the result and your address, encrypted, for 30 days, and delete them. Anyone with the result’s link can open it during those 30 days; it never shows your address. You can delete it sooner with the deletion link we send you with it.

If you choose to give your email with Google — only after you accept third-party services — Google’s sign-in script loads on the page and Google may set its own cookies. It hands your email address to your browser; we take only the address, and our server receives nothing else from Google.

When you’ve used your free runs, you can give your email address to get more. We don’t keep the address on our server for this: we turn it into a fingerprint and count your use under it — usage counters until 62 days after the period ends, and a log of your runs (the tool used and when, never their content) for 90 days. Your browser keeps the address so you don’t have to type it again; clearing your browser data removes it.

If you ask to hear when the Chrome extension launches, we keep your email address, encrypted, only to send you that one email, and delete it at the latest 24 months after you ask. Deleting your account deletes it too, and you can ask us to delete it sooner at privacy@uncook.app.

An account exists once you sign in with your email — free or paid — or use an invitation. While you’re signed in, your browser keeps your sign-in token — not a cookie — and sends it to us so we know it’s you. If you add your first and last name — it’s optional — we keep them, encrypted, only to greet you in Uncook, and delete them with your account. You can change or remove them at any time. When you sign up, you can also tell us your role, your sector and how you heard about Uncook. It’s optional. We look at these answers only in totals, never for fewer than ten accounts, and delete them with your account. We keep the address, encrypted, only when something needs it: if you buy a pack, a top-up or Pro, or use an invitation, to write to you about your account; and if you agree to hear from us, for as long as you agree. When nothing needs it any more, we keep it only to warn you before your debriefs and documents are deleted — seven days and one day before — and we delete it with them.

We don’t send a welcome email when you sign in. If you join with a beta invitation, we send one welcome email when you activate it, then at most two reminders, 3 and 7 days later. Each has a one-click unsubscribe link.

What we keep

The conversations you bring into a debrief, and the reference document you add if you do (a file, or text you paste such as an email), are kept with it, encrypted, so you can come back to them, check a result against them or run another tool on them. They’re kept for as long as the debrief is — see How long — and you can delete a debrief, with everything in it, at any time. In some tools, you can ask Uncook to mask details such as emails, phone numbers and links. This happens on our server, after we receive your text and before it reaches the AI.

What you write in a debrief — a correction, or a precision for the draft — is kept with it, encrypted like your content.

Your debriefs open only for you: a debrief on an account only with that account signed in, and a trial debrief only in the browser that started it. A debrief’s link or identifier alone isn’t enough. The one exception is a quick run started without any account or trial: anyone with its link can open it for 24 hours; it’s deleted within the following hour. Keep that link to yourself.

A conversation or a document can name other people, such as a client or a supplier. We use what it says about them only to run what you ask; we keep it with the debrief and delete it with the debrief. We never contact them and never use it for anything else.

Uncook’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you bring conversations into a debrief, Uncook proposes its objective — what you’re deciding or producing, and for whom — and you confirm or correct it before the debrief starts. When you confirm a decision, we keep it with its debrief: what you decided, why, when to revisit it and, if you tell us later, what happened.

When you import a PDF, it stays on your device; only its text is sent.

On Pro, Knowledge keeps the outputs you choose to keep — including earlier versions, when you ask for a rework. Each one carries where it came from: the source, the link, the date. Alongside it we keep the structured lines drawn from that output — the actions, the decisions, the blind spots — encrypted, like the output itself.

To help you find things in Knowledge, we also note the amounts and dates your documents mention, attached only to the document they come from. Searching by a client’s or supplier’s name reads your own documents at the moment you search: we don’t build a list of the names in your documents. Each of these notes is deleted with its document.

Nobody at Uncook reads your content. It’s encrypted in our database and decrypted only to show it to you or to run what you ask. We hold the keys, so this is our commitment, not a technical lock. The only exceptions: you ask us to look, for support, or the law requires it.

Deleting your account deletes your debriefs, what you keep, your projects and your shared pages.

How long

Your debriefs — with their conversations, documents and decisions — and what you keep in Knowledge are deleted automatically:

When more than one applies, the longest counts. You can delete anything sooner yourself, at any time, and deleting your account deletes everything. The one exception is the record of your payments, which accounting law requires us to keep for 10 years (see Payments).

We keep an activity log of your account — sign-ins, keys created or revoked, invitations used, what you create, open, keep, share, export or delete, the choices and consents you give or withdraw, and payments — without your content: 13 months, or 10 years for payments.

Deletion

You can delete a debrief, any output, or everything in Knowledge, from the app. Deletion removes it together with its conversations, its provenance and its structured lines. It is not hidden from view or marked as deleted — it is gone, and it does not come back.

Deleting your account deletes its activity log, except the entries about payments (purchases, renewals, failed payments, refunds and cancellations). We keep those for 10 years, as accounting rules require, no longer linked to your account.

Export

You can export your account’s debriefs and everything in Knowledge at any time, as a machine-readable file sent through a link to your email: for debriefs, their text, categories and labels; for Knowledge, your results, their provenance, their dates and their structured lines. Trial debriefs that aren’t attached to an account aren’t included. For a copy of anything else we hold about you, write to privacy@uncook.app.

The models we use

Your text is processed by Claude Haiku and Claude Sonnet, run by Anthropic in the United States. Anthropic’s commercial terms state that Anthropic may not train models on our customer content.

Mask

Mask works in two layers.

Links, emails, keys, IBANs, card numbers, phone numbers and handles are caught exactly, by pattern; when you mask them, they never reach the AI.

Names, companies, places, health mentions, identity numbers and amounts are read in context by the AI, because recognising them needs understanding, not a pattern. It catches most, not all. Check the result before you send it on.

Limits

What the free plan includes, and every limit, is on the pricing page; you see what you have left before you run out, not after.

To keep automated abuse out, we count free use per network block rather than per exact address: we store the block, not your full IP address. Daily counts reset at 00:00 UTC. We keep no profile from it.

Watch

The extension can watch the AI conversation open in your browser, so Uncook can tell you when it’s drifting. It is off by default. Nothing is watched until you turn it on, and you can turn it off at any time.

When it is on, it reads the conversation on that page at most once a minute, and never while you are typing. What it reads stays on your device: it is used only to show a card that offers to uncook the chat or to copy a prompt. It keeps it in the extension’s storage for 7 days; after that it no longer uses it, and deletes it at its next clean-up. You can delete it sooner with “Delete stored outputs” in the extension. Nothing it reads is sent until you click.

When you click “Uncook this chat”, the conversation is sent to open it in Uncook. It waits there, encrypted, for up to 30 minutes until the page opens, then becomes a debrief, as explained above.

To read a chat you pick, the extension uses your own signed-in session on that AI’s site, in your browser. It reads only when you ask, never in the background.

Start with Uncook. When you ask for a starting prompt, the extension sends us your brief to write it; we don’t keep the brief. On your device, it keeps the brief’s objective and two short fingerprints of the prompt — never the prompt itself — at most 20 of them, for 30 days, and notes which chat they matched. With Watch on, it compares those fingerprints with the first message of the AI chats you open, on your device, to suggest a debrief at the right time; nothing is sent to recognise a chat. If you then uncook that chat, its objective goes with it into your debrief. You can clear all of this from the extension, under Start with Uncook.

Uncook in the Claude app. If you add Uncook as a connector in Claude, Claude can send us what you ask it to: the chat as Claude writes it out. Claude sends its replies word for word; it summarizes them only when a conversation is very long. We treat it like a conversation you bring into a debrief (see What we keep). Your chat itself stays with Anthropic, under your own agreement with them. You can remove the connector in Claude at any time; removing it doesn’t delete the debriefs already made — delete those in Uncook.

Claude Cowork sessions

When you use the extension on a Claude Cowork session, it reads the session open in your tab, only when you click. Your messages and Claude’s replies are sent to produce your result. For each action Claude took — reading a file, running a command, searching — the extension keeps one short line: the tool’s name, what it acted on, whether it worked, and the first line of its result. The rest of each result, and anything Claude wrote to a file, never leaves your browser. Before sending, the extension replaces links, email addresses, card and account numbers, phone numbers, handles, and the keys and passwords it recognises. Below the capture, it tells you what it kept and what it left out.

What the extension sends about itself. With each request, it tells our server which browser it runs in and its version. It also sends a random token that changes every day, used only to count free use; it isn’t linked to you. Once, after it’s installed, it says it’s a new install — with no identifier. If you sign in from the extension, you type your email to receive a one-time sign-in link; the extension keeps neither the address nor the link, only the session key that signing in returns. Once you’re signed in, it also sends a fingerprint of a random identifier kept on your device — never the identifier itself — to keep your signed-in devices apart.

Referrals

Your account has a personal invitation link, with a random code — never your email. The code travels only in the link and in the sign-up form; nothing is stored in the browser for it. If someone signs up through your link and starts their first debrief, you get one extra debrief. We keep the link between the two accounts for as long as that extra debrief can be used — 12 months — and delete it earlier if either account is deleted. You only ever see a count, never who joined, and the person who joins is told at sign-up that they came through an invitation. To stop people from inviting themselves, when you copy or share your link we keep a fingerprint of your network block — never your address — for 7 days after the last time you copy or share your link. When the person who joined runs their first debrief, we compare it with theirs and keep only the result. Uncook never writes to anyone you invite: you’re the one who shares your link.

Shared pages

When you share a decision note or a draft, Uncook makes a page that anyone with its link can read, without an account. The link is long and random, and the page isn’t listed in search engines. It shows only what you chose to share — never your conversations or documents, and not your name unless you add one when you share — with “Made with Uncook” at the bottom (Pro can remove it). The page sets no cookies and loads no analytics. Comments: if the author allows them, anyone with the link can comment on the page, and anyone with the link can read the comments — so don’t write in one anything you wouldn’t show them. We don’t ask commenters for a name or an email address. Comments are stored encrypted with the shared page and deleted with it, or when the link expires. Commenting sets no cookie. We count how many times it’s opened, and nothing about who opens it; our host keeps its usual technical logs for a short time. Anyone can report a page from its footer. If you report a page, we keep your report — with your name and email if you give them — to handle it, and delete it 6 months after our decision. We never tell the person who shared the page who reported it. You can turn the link off at any time, and it stops working when you delete the debrief.

Payments

Payments are handled by Stripe. When you buy, you enter your card details on Stripe’s systems, not ours — we never see or store your card number. We keep what we need to bill you and to meet our accounting obligations — your email, your country and the record of your payments — for 10 years, as accounting law requires.

Who else receives your data

Anthropic — the conversations and documents in a debrief are sent to Anthropic to produce your results. Anthropic deletes them within 30 days, and keeps them longer only if its systems flag them as misuse of its usage policy. We keep them with your debrief, as explained above. When you use Verify, Anthropic also turns the claims it checks into web search queries and sends them to its search provider. To check a verdict, Anthropic or our own server may then open the pages the search found. Those sites see a request from them, not from you, and nothing from your conversation. Our server identifies itself as UncookBot and doesn’t open pages a site’s robots.txt asks it to skip.

Vercel — hosts the site and runs the code. Its server logs record the usual technical details of a request, including your IP address.

Supabase — our main database, in the European Union (Ireland). It holds your debriefs and decisions, and a copy of your account, what you keep and your payment records; content is encrypted.

Upstash — a second database. Until we finish moving everything to Supabase, it also holds your account and what’s left on it, your sessions, what you keep in Knowledge, your projects, prompts and shared pages; the content of your documents, projects and prompts is encrypted. It also holds short-lived data: a conversation waiting to open in Uncook (30 minutes at most), the fingerprint that prevents self-referrals (7 days after the last share), usage counters and limits.

Resend — sends the emails we send you.

Stripe — handles payment.

PostHog — our audience measurement, and only if you accept analytics — never on shared pages. It receives which pages you visit, never the content of your conversations. Your events are sent to PostHog’s European endpoint.

Each of them is bound by a data processing agreement that limits it to acting on our instructions. We do not sell your data.

Some of them process your data outside the European Union. Those transfers are covered by the European Commission’s standard contractual clauses.

Separately: our pages load their typefaces from Google Fonts, so your browser contacts Google on every page you open and Google receives your IP address. We send nothing else.

UncookBot

UncookBot is the robot Uncook uses when someone runs Verify. To check a verdict, it may open a page that a web search returned for a claim being checked, and read the passage the verdict relies on. It only opens those pages: it doesn’t crawl sites, follow their links or build an index.

It sends a plain request, with no cookie and nothing from anyone’s conversation, and identifies itself as:

UncookBot/1.0 (+https://www.uncook.app/privacy/#uncookbot)

It reads a site’s robots.txt before opening a page, and follows it. If the robots.txt can’t be reached, it doesn’t open the page. To keep it off your site:

User-agent: UncookBot
Disallow: /

Questions about UncookBot: hello@uncook.app

If we write to you first

While we’re getting started, our founder writes by hand, one at a time, to consultants and fractional leaders whose work address is published — on their website or in a professional directory — or messages them on LinkedIn, to ask how they use AI and sometimes to offer an invitation. We keep your name, that address, where we found it and whether you replied — nothing else. We do this on the basis of our legitimate interest in introducing Uncook to people whose work it fits. If you don’t reply, we delete your details 6 months after our last message. If you ask us not to write again, we stop, and keep only your address on a do-not-contact list so that we never do. If you take part in a feedback call, we keep our notes for 12 months. You can object or ask us to delete your details at any time: privacy@uncook.app.

We process your data to provide the service you ask for — your account, your debriefs, Knowledge and payments — under our contract with you. We rely on your consent for analytics, and you can withdraw it at any time. We rely on our legitimate interest to keep abuse out, to count use in totals, to stop self-referrals, and to write to people first as explained above. And the law requires us to keep payment records.

Your rights, and contact

You can ask to access, correct, export or delete your data, to restrict or object to how we use it, and withdraw any consent at any time: write to privacy@uncook.app. We answer within one month. If you think we haven’t handled your data properly, you can complain to the CNIL (www.cnil.fr) or to the data protection authority where you live.

Uncook is operated by ARLEN SYSTEMS, a French société par actions simplifiée unipersonnelle, 173 rue de Courcelles, 75017 Paris, France, registered with the RCS of Paris under SIREN 106174543.