Compound

Privacy

Last updated October 29, 2026

Compound is a personal portfolio project by Daniel Zyrick Gayao. This page explains, in plain language, what it stores about you and why.

What we store

  • Your account: your name, email address and profile picture, from Google or GitHub when you sign in. We never see your password.
  • What you enter: your focus areas, your "About you" answers, habits and check-ins, learning tracks, answers and reflections, goals and their steps, notes, the expenses and income you record, and contacts you add (other people's names and details, which only you can see and which are never sent to the AI).
  • Settings: your timezone and currency.
  • AI usage: a log of AI requests (when, which model, and how many tokens) to enforce a daily limit. The log doesn't contain your text.

How it's used

Only to run the app for you: to show your days, progress, goals and spending, and to create lessons, plans and feedback. There are no ads, no tracking scripts, and your data is never sold or shared for marketing.

Services that handle your data

  • Vercel hosts the app.
  • Neon stores the database (PostgreSQL).
  • Anthropic (the Claude API) receives the text needed for AI features, such as a goal or topic you describe, your focus areas and "About you" answers (to fit the content to you), and the answers you ask feedback on. If you choose to fill in About you from a resume, the PDF is sent to Anthropic once to draft your answers; Compound doesn't store the file. Under Anthropic's commercial terms, API data isn't used to train their models.
  • Google or GitHub handle sign-in.

Google Calendar

Connecting Google Calendar is optional. If you connect it, Compound asks Google for read-only access and stores only an encrypted connection key, so it can show your upcoming events to you. Events are fetched from Google when you view them and aren't stored. They're never shared, never sent to the AI, and never used for anything except showing them to you. You can disconnect in Settings at any time, which removes Compound's access and deletes the key.

Compound's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

One essential cookie keeps you signed in. It's encrypted and contains only your account ID, name and email.

Your choices

You can change your name, timezone and currency in Settings, and edit or delete your habits, goals, steps and transactions at any time. To get a copy of your data or have your account and everything in it deleted, email daniel.gayao7@gmail.com. Requests are handled within 30 days.

Changes

If this policy changes, the date at the top will change too.

Back to home