Privacy policy
10 & 2 · last updated 3 November 2026
Who we are
10 & 2 is made by Self-Deprecated ApS, Aarhus, Denmark (CVR 46298446), the data controller. Write to privacy@selfdeprecated.ai about anything on this page.
What 10 & 2 does
10 & 2 is a voice assistant for your coding agents. You talk to its voice, Driver, on your iPhone; it tells you how the work on your computers stands, reads replies aloud, and passes on what you ask, when you confirm it. To do that it handles the following.
What we collect, and why
- Your account. You sign in with your Self Deprecated account (through Clerk), using Apple, GitHub or an email code. We keep your email address, your name if Apple or GitHub shares it, how you signed in and your account id. The same account signs you in to other Self Deprecated apps.
- Conversations. While a conversation is on, your voice goes through our server to OpenAI's realtime voice model, which answers you. We don't store audio. We keep the transcript of what you and Driver said, your conversation history, and the notes Driver remembers between conversations (for the number of days you choose in Settings; you can turn memory off or forget it at any time).
- Your coding agents' work. When you connect a computer, 10 & 2 reads your coding agents' threads on it (their titles, state and replies) to brief you and answer your questions, and sends the replies and instructions you dictate and confirm. These pass through our server, and OpenAI processes them to answer you.
- Readings. To read a reply aloud, its text goes to OpenAI to be turned into speech; the audio is kept for up to 7 days so a replay doesn't make it again.
- Debugging records. Each conversation's event log (the transcript, which tools Driver used and their results, timings; never audio, and with credentials removed) is kept for 14 days so we can find and fix problems, and longer only for a moment you flag yourself by saying "debug this". The app's own log, which records what the app did and never what was said or read, is sent to our server too.
- Usage analytics. 10 & 2 collects usage analytics with PostHog: when the app is installed and opened, sign-in, settings choices, and for each conversation, reading and dictation, when it started and ended, how long it took, how it ended, which tools Driver used and how quickly it answered, with error types and the app and server versions. These are linked to your account id. They never include what you say or hear, what your coding agents write, thread or project names, or anything from your computers. IP addresses aren't kept. Settings → Privacy → Share usage analytics turns it off: the app and the server stop sending anything for you.
- Payments. If you buy credits, Stripe or Apple handles the payment. We learn what you bought and when, never your card details.
Who processes it for us
- Clerk: accounts and sign-in.
- Cloudflare: our servers, and the storage that holds your account's conversations, memory and records.
- OpenAI: the voice and language models and speech. OpenAI doesn't train its models on what we send through its API, and keeps it for up to 30 days to monitor abuse.
- PostHog: usage analytics, unless you turn them off.
- Stripe and Apple: payments; Apple also for TestFlight, the App Store and Sign in with Apple. GitHub, if you sign in with it.
Some of these are in the United States. Transfers out of the EU rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Legal basis
We process your data to provide 10 & 2 to you (GDPR article 6(1)(b)), and for debugging and usage analytics on the basis of our legitimate interest in keeping it working and improving it (article 6(1)(f)), which you can opt out of as described above.
How long we keep it
Your account, conversations and memory are kept until you delete them. Deleting your account (in the app under Settings → Account, or on your account page) deletes your conversations, memory, records, credits and connected computers straight away, and deletes your Self Deprecated account, which ends your sign-in for every app that uses it. Debugging records go after 14 days and cached speech after 7. Ask us and we'll delete your analytics too.
Your rights
Under the GDPR you may see the personal data we hold about you, have it corrected or deleted, take it with you, object to processing based on legitimate interest, and withdraw consent. Write to privacy@selfdeprecated.ai. You may also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
Children
10 & 2 isn't meant for anyone under 16.
Changes
If this policy changes, we update the date above and tell you in the app when the change matters.