Epic 11: Privacy, trust & data

[Tar-ive]

Reshaped from docs/user-stories.md. Legend: ✅ Live · 🟡 Partial · ⚪ Planned.

Personas: Privacy-minded user

• 11.1 Understand data handling ✅ — As a Privacy-minded user, I want a clear explanation of what's collected and why, so that I can consent confidently.
  • /privacy covers soft-profile consent + data handling; linked from invite and share sheet.
• 11.2 PII never reaches the AI raw ✅ — As a Privacy-minded user, I want sensitive identifiers redacted before AI, so that my data isn't exposed.
  • Server-side redaction of emails and phone/payment/ID numbers before model calls.
• 11.3 Own and delete my data 🟡 — As a Privacy-minded user, I want to own and delete my data, so that I stay in control.
  • Encrypted at rest with least-privilege access; self-serve export/delete UX is next.