Train only on data people agreed to share

How to do it

Store a training flag per user or per customer account, off by default. Build training sets only from rows where the flag is on, and remove personal data first. Choose provider plans that do not train on your data, as in send models only the private data they need. Say in the privacy policy whether data is used for training and how to opt out.

Example

SELECT count(*) FROM training_examples t JOIN accounts a ON a.id = t.account_id WHERE NOT a.allows_training;
-- PASS when the count is 0

const rows = await db.query('SELECT prompt_redacted, answer_redacted FROM ai_call_text t JOIN accounts a ON a.id = t.account_id WHERE a.allows_training');

rows = db.execute("SELECT prompt_redacted, answer_redacted FROM ai_call_text t "
                  "JOIN accounts a ON a.id = t.account_id WHERE a.allows_training").fetchall()

How to check

The script that builds training sets selects only rows with the flag on. A test with one opted-in and one opted-out user produces a set with only the first user's data.