[kcarnold]

Adds a Download my data section to the account page with three choices: Today, Past 7 days, and Everything.

Backend

• GET /api/me/data[?since=<epoch ms>] returns one JSON attachment: { exported_at, since, user_id, events, usage }
  • events: the user's study-log JSONL entries (in the shape they were written)
  • usage: their llm_usage rows (content-free billing records)
• Tool callers are refused (clientId set, which covers wtk_ grant tokens and device clients that identify themselves). They were granted AI calls, not a read of the user's history. Mindmap OAuth tokens are already rejected by resolveUser; this route is now in the e2e "elsewhere" list.
• 400 on a malformed since.

Frontend

• downloadMyData(token, since?) in api/account.ts. It uses fetch + blob because the route needs a bearer token, which a plain <a href> can't send.
• "Today" means the viewer's local midnight and is computed on the client. "Past 7 days" is a rolling 168 hours.

Docs

• Updated the privacy policy's "Access" bullet. It now describes the self-service download and says the PostHog profile is not included.
• Added a note to backend/CLAUDE.md.

Tests

• Backend: export contents, user isolation, since filtering, bad since, 401. All 140 tests pass.
• Frontend: the API wrapper's URL and auth. The vitest suites under src/api and src/account pass.

---

Generated by Claude Code