Harmonism Back to site

Privacy Policy

Last updated: 24 October 2026

In short

Who is responsible

This policy covers harmonism.io, Lodestone (the web app, the Android app, Lodestone Desktop, the browser extension and the Lodestone Sprite on the website), Lodestone on Telegram, and the Harmonic Profile Assessment. It is written to be read, and it is also meant to meet the transparency requirements of the European Union's General Data Protection Regulation (GDPR, Regulation 2016/679) and France's Loi Informatique et Libertés.

The data controller is Harmonia, a philosophical project led by Tahir Zniber, reachable at tahirzniber@proton.me. Until Harmonia incorporates as a registered legal entity, the founder acts as controller in a personal capacity. This page will be updated the moment that changes; you may always ask for our current contact details.

Where your memory lives

Lodestone's memory is what lets it carry on with you from one conversation to the next. It holds your conversations, the notes Lodestone keeps on what you have told it, your Wheel, your practices, your Harmonic Profile, your place in the Wisdom Canon, and, in Lodestone Desktop, notes from your life book.

Each device where you use Lodestone keeps its own full copy: Lodestone Desktop on your computer, the Android app on your phone, and a browser in its own storage for harmonism.io. Each browser counts as a separate device. On an iPhone, Safari and an app added to the Home Screen keep separate storage too.

The copy on a device belongs to you, and anyone who can use that device can open Lodestone there and read it. Your settings, the library, downloaded models and your OpenRouter key, if you use one, stay on the device. The key travels between your devices only if you tick that option in Sync, and then encrypted like the rest.

Sync between your devices

Sync lets your devices share one memory. It turns on by itself when you sign in to your harmonism.io account in Lodestone, and you can turn it off on any device under Settings → Sync.

What harmonism.io keeps. Before anything leaves a device, Lodestone encrypts it on that device (AES-256-GCM) under a key that your devices keep. The records' names are disguised too. harmonism.io stores the encrypted records and can see your account, how many records you sync, the size of each one and when each one changes. It cannot read what they contain.

How a new device gets the key. When you turn sync on, your device also leaves the key on harmonism.io, locked under a second key that your device derives from your harmonism.io password. Your password is sent only to our sign-in provider, Supabase, and never to harmonism.io. So when you sign in on a new device with your password, that device can open your memory by itself. A device that cannot (because you changed your password, for instance) is let in from a device you already use: both show a six-digit number, and when you confirm that the numbers match, the key passes sealed between the two devices. harmonism.io relays it and cannot open it. An optional recovery code holds the key itself, for the day no synced device is left.

What this protection depends on. Encryption protects the copy only as far as these three things hold.

Your devices, listed. Settings → Sync lists every device that syncs your memory, with when it last synced. Each device's name is stored encrypted like the rest of your memory. You can rename the device you are using and remove any other. A removed device stops syncing the next time it goes online. It keeps what it already holds until you erase it there. If a device is lost or may be in someone else's hands, remove it, change your harmonism.io password, then use Lost a device? to change the key: the device you lost cannot read anything synced after that.

Sync through your computer instead. Lodestone Desktop can keep the synced copy itself, on your computer, for the phones paired with it. Those phones sync while they are on the same Wi-Fi as the computer and Lodestone Desktop is open, and nothing goes to harmonism.io.

When you talk to Lodestone

A language model writes Lodestone's answers. With each message, Lodestone sends the model what it needs to answer: your message, earlier turns of the conversation, passages from the Harmonism corpus, and the parts of your memory that bear on what you said. Where that goes depends on the route you choose under Settings → Model.

The Lodestone Sprite on harmonism.io's pages thinks through your harmonism.io account, or anonymously when you are not signed in. Where Lodestone in the same browser thinks with your own OpenRouter key, the Sprite uses it too: harmonism.io builds the request as for any turn and hands it back, and your browser sends it to OpenRouter under your key, which never reaches harmonism.io. Such a turn draws nothing from the daily allowance.

What Lodestone learns of you

When you are signed in, Lodestone keeps its understanding of you up to date: a profile summary, your Wheel, where your conversations stand, and a summary of older conversations. harmonism.io does this work, with the same model it uses for the account route. To do it, it receives your memory and up to your last 160 messages, and returns the updated memory to your device without storing either. The Sprite sends them with every message you send it on harmonism.io's pages; the apps send them about once every ten answers.

Some messages never go. Conversations answered on your own computer or by no model stay on your device, and so do messages Lodestone answered as a crisis. Under Settings → Your data you can also stop a device from sending its app conversations at all; harmonism.io then learns only from your conversations on its own pages and in the extension. This runs only after you have given the consent described under Legal basis.

Voice

Dictation and spoken replies run on your device unless you choose a provider. Lodestone asks before your first recording goes to one, and a natural voice reads answers aloud only once you choose it in Settings or give a key for voice. On the account route, your recordings or the text to be read go to harmonism.io and on to xAI or OpenRouter. With your own key they go to OpenRouter (which may pass them to a voice service such as ElevenLabs or Google), or straight to xAI or OpenAI for a key of theirs. Lodestone downloads its speech and language models from Hugging Face, which sees your device's IP address when it does.

Looking things up

Look this up runs only when you press it, for one question. On the account route and with your own OpenRouter key, the question goes to OpenRouter's web search, run by Exa; otherwise the web app asks Wikipedia. Lodestone Desktop sends the question to DuckDuckGo (or Brave Search, if you have set a key) and to Wikipedia, then fetches the top pages it finds from your computer, so those sites see your computer's IP address. In every case only the question leaves, never the conversation or your memory.

Without an account

You can talk to the Lodestone Sprite, the browser extension and the Lodestone app without an account. Your messages then go to harmonism.io marked as anonymous, and on to OpenRouter to be answered, and harmonism.io does not store them. Your IP address is kept for about twenty-four hours to limit abuse, and a count of your messages is kept in your browser. The Sprite and the assessment set a cookie, harmonia_client_id, holding a random identifier that lasts a year, so that a returning visitor's conversation and assessment can be told apart from others'. The Lodestone app without an account keeps its memory on that device alone and does not sync.

The Harmonic Profile Assessment

The assessment is scored in your browser. With your explicit consent, given on the results page before anything is shared, your results go into your Lodestone memory on that device, and nothing is sent to harmonism.io. From then on they are part of your memory: they travel encrypted if you sync, and they are read like the rest of your memory when Lodestone answers you or updates what it has learned of you.

The results include Enneagram typing (type, wing, instinctual stack, health level), constitutional data (Ayurvedic dosha, Wu Xing, Yin-Yang, Jing reserve), your eight Wheel engagement levels and your developmental altitude. Some of this, particularly what relates to physical health, vitality and psychological state, is "special category" data under Article 9 of the GDPR.

Sharing a conversation to help Lodestone improve

Under Settings → Help Lodestone improve, you can send us one conversation so that we can check how Lodestone holds people and whether it stays true to Harmonism. Nothing is sent unless you do this. Before anything leaves your device, Lodestone proposes replacements for the names in the conversation, which you can change or add to, and you can leave out any turn. Email addresses, phone numbers, keys, card numbers and links (other than to harmonism.io and Wikipedia) are removed. You read the whole copy and tick that you have read it, and only then is it sent. We read shared conversations ourselves, with the help of AI models.

The copy is kept without your account, email address or IP address. To limit sharing to ten a day, harmonism.io keeps a hashed form of your email address or IP address for two days, which during that time could be matched to the copy. Your device keeps a receipt that lets you withdraw the copy at any time. Each shared copy is deleted after one year.

Older stores, deleted on 17 December 2026

Lodestone on Telegram. A Telegram chat has no device on your side that could hold your memory or a key, so Lodestone on Telegram keeps its memory on harmonism.io, where Harmonia can read it. Voice messages sent to it are transcribed by OpenAI, and its spoken replies come from xAI. It closes on 17 December 2026, and its memory is deleted that day.

Website memory from before October 2026. Until October 2026, the website kept members' Lodestone memory on harmonism.io. On a member's next signed-in visit, that memory moves to their device and is deleted from harmonism.io once it has synced. Whatever remains is deleted on 17 December 2026.

Your own Telegram bot. Lodestone Desktop can answer you in a Telegram bot of your own, from your computer. Those messages pass through Telegram, which does not encrypt bot chats end to end, and Harmonia takes no part in them.

What harmonism.io keeps on you

When you create an account we collect your email address, a display name if you give one, your password and your preferred language. Supabase, our sign-in provider, keeps your email address, a hash of your password and sign-in records. harmonism.io keeps your email address, your consent records and counts of your use: messages per day, updates to what Lodestone learns of you, and voice use (the voice records for two days). We use your email address for account messages (confirmation, password reset) and, if you consent to it, for occasional writing from Harmonia; every such email carries a link to stop them.

To run and protect the site, harmonism.io's server keeps access logs (IP address, browser, pages requested) for thirty days, and our host builds visitor counts from them. When something goes wrong or Lodestone meets a sensitive moment, the server's error log records a short note that carries no words of yours: for instance the kind of crisis detected, the kind of reason that chose which model answered, or that a summary failed to process. The error log keeps thirty days.

The site's pages load fonts from Google Fonts and some scripts from jsDelivr, and a podcast page loads YouTube or Rumble when you press play. Like any server, these receive your IP address and browser details when your browser asks them for a file.

Deleting your data

Settings → Your data also lets you export your whole memory as a file at any time.

Why we process this data

To provide Lodestone and the site: answering you, keeping your memory in step across your devices, reflecting your Harmonic Profile back to you, protecting the service from abuse and sending account messages. With your separate consent, we also send occasional writing from Harmonia. You can withdraw that consent at any time without affecting the rest of the service.

Legal basis

For your account, sync and account messages: performance of a contract between you and Harmonia (Article 6(1)(b) of the GDPR).

For processing your conversations to answer you and to keep what Lodestone learns of you up to date: your consent (Article 6(1)(a)), withdrawable at any time.

For special-category data (the Harmonic Profile and anything about your health or psychological state that you tell Lodestone): your explicit consent (Article 9(2)(a)), captured separately, before Lodestone first processes it.

For a conversation you share with us: your explicit consent, given for that conversation when you send it.

For occasional writing by email: your separate consent (Article 6(1)(a)), withdrawable through the link in every email.

For access logs, the error log and limits on anonymous use: our legitimate interest in keeping the service working and safe (Article 6(1)(f)), using only what that requires.

Who receives your data

Some of your data is processed by providers acting under contract with us, or by services your own choices send it to:

Services you choose yourself receive what you send them under your own account with them: OpenRouter, Anthropic, Venice, Hugging Face, xAI or OpenAI with your own key; Hugging Face for model downloads; Wikipedia, DuckDuckGo and Brave Search for Look this up.

We do not sell your personal data or rent it, and we share none of it with advertising networks or data brokers. Nothing you write is used to train AI models.

Transfers outside the European Economic Area

OpenRouter, xAI, OpenAI, Supabase, Resend and Google are established in the United States. These transfers rely on the EU–US Data Privacy Framework adequacy decision (Commission Decision C(2023) 4745) for providers certified under it, and on Standard Contractual Clauses (Commission Decision 2021/914) otherwise. Where a provider offers a European region, we use it.

How long we keep your data

Your rights

Under the GDPR you have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), objection (Article 21), and withdrawal of consent at any time (Article 7(3)). Because your memory is kept on your devices, you can see it, export it and erase it yourself in Lodestone at any time. For anything harmonism.io keeps, write to tahirzniber@proton.me; we answer within thirty days.

You also have the right to lodge a complaint with a supervisory authority. For France that is the Commission Nationale de l'Informatique et des Libertés (CNIL, www.cnil.fr). You may also contact the authority of the country where you live or where the alleged infringement took place.

The Lodestone browser extension

The Lodestone extension for Chrome, Firefox and other browsers shows the Lodestone Sprite on a page only when you call it there, with its toolbar button or the right-click item; until then it does not run on the page, and it reads a page only when you speak to Lodestone there. With each message you send from its panel, it sends harmonism.io your message, the conversation so far in that tab, the page's title and address, and the page's main text (up to about 11,500 characters) or the passage you selected. The extension sends nothing while you only browse, and it contacts no server other than harmonism.io and, if you sign in, Supabase. If you give it an OpenRouter key of your own in its options and allow it to reach OpenRouter, it answers under that key as the Sprite does: harmonism.io prepares each answer and hands it back, and the extension sends it to OpenRouter, which reads it under your account. You can withdraw that permission in the options at any time.

Without an account, the conversation is kept in the extension's storage for that tab and erased when the tab closes or the browser quits. Each anonymous reading (your question, Lodestone's answer, the page's title and address) is also kept in that browser alone, so that you can find it again under All readings; it is never sent anywhere, the newest 300 are kept, and you can forget them or switch this off for a page.

When you sign in, the extension holds your Lodestone memory in your browser and syncs it as described above, as a device of its own. Removing the extension deletes what it keeps in your browser.

Automated decision-making

Lodestone offers guidance and decides nothing for you. Nothing it says produces legal effects or similarly significant effects on you within the meaning of Article 22 of the GDPR. You remain the only decision-maker in every matter of health, finance, relationships and life direction you discuss with it.

You are talking to an AI

Lodestone is an artificial intelligence system. It speaks as a contemplative companion, but it is a language model configured to answer from within Harmonism: an open-weight model reached through OpenRouter, a model on your own computer, or a model from a company you choose with your own key. No member of the Harmonia team ever answers you in Lodestone's place. This disclosure is made in accordance with Article 50 of the EU AI Act (Regulation 2024/1689).

Security

Your synced memory is encrypted on your devices before it reaches harmonism.io. Passwords are kept only as hashes, by Supabase. Every connection is encrypted with TLS. harmonism.io stores no Lodestone conversation, apart from those you choose to share with us and the two older stores deleted on 17 December 2026. No security is perfect; if you find a vulnerability, write to tahirzniber@proton.me.

Children

Harmonia is not directed to children under sixteen, and we do not knowingly collect data from anyone under sixteen. If you believe a minor has created an account, write to us and we will delete it.

Changes to this policy

We update this page whenever the way we process your data changes in a meaningful way and, where the law requires it, we ask for your consent again before the change takes effect. The date at the top is that of the version in force.

Contact

For any question about your data, write to tahirzniber@proton.me.