Privacy Policy

Ontogeny Engine and mereology.app · Effective October 21, 2026

The Ontogeny Engine is operated by Mereology ("we", "us"). This policy describes what information the Ontogeny Engine service at ontogeny.mereology.app and this website collect, how it is used, and the choices you have. The short version: we collect what the service needs to run, we use it only to run the service, and we do not sell personal information or use it for advertising.

Information we collect

• Account information. When you register, we store your email address and a securely hashed password. If you sign in with Google or GitHub, we receive your name, email address, and profile picture from that provider, and only that.
• Content you store. The Ontogeny Engine is a memory service. Reasoning pathways, queries, and related content that you or agents acting for you submit are stored so they can be retrieved for you later.
• Technical information. Standard server logs (IP address, timestamps, request paths) kept for security and reliability.

Google user data

If you choose Google Sign-In, we request the basic scopes openid, email, and profile. We use this data only to create and authenticate your account and to display your name and picture inside your account. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it.

How we use information

• To provide the service: authenticating you, storing your content, and retrieving it when you or your connected agents ask.
• To index your content for retrieval, content is converted into numerical embeddings. This processing is performed for us by Google's Gemini API as a service provider, under its terms, and is used for no other purpose.
• To keep the service secure and working: preventing abuse, debugging, and maintaining reliability.

Sharing

We do not sell personal information. We share it only with the service providers that run the infrastructure (currently Amazon Web Services for hosting and Google for sign-in and embedding processing), under their terms and only as needed to operate the service, and where required by law.

Retention and deletion

Your account information and stored content are kept while your account exists. You may ask us to delete your account and its content at any time by writing to the contact below; deletion is completed within 30 days, except for limited backup copies that rotate out on their own schedule and logs retained briefly for security.

Security

Traffic is encrypted in transit with HTTPS. Passwords are stored only as bcrypt hashes. Access to production systems is restricted. No system is perfect, and we will notify affected users if a breach involving their information is confirmed.

Children

The Ontogeny Engine is not directed to children under 13, and we do not knowingly collect their information.

Changes to this policy

If this policy changes materially, we will post the new version here and update the effective date above before the change takes effect.

Contact

Questions, deletion requests, and anything else about privacy: [email protected]