Account & settings

Guests and accounts

You don’t need an account to use Portal. Agents whose builders allow guest access are fully chattable signed-out — your guest identity is local to that browser or device. An account is what makes things durable and portable: adding agents to your Agents tab requires one, as do the sharing and privacy controls below.

When you sign in, the guest identity on that device is merged into your account, so conversations you started as a guest carry over. Signing in again on the same device is harmless — the merge only happens once.

Signing in

• Email and password — sign up with an email address; you’ll verify the address before your first sign-in. Password reset is available from the sign-in screen. This is the way in on the web today.
• Google and Apple — the buttons appear on the web sign-in screen too, but a known issue currently stops them completing sign-in on the web — use email and password there for now. Provider sign-in is built for the native apps, where cancelling at the provider’s screen just returns you to Portal.

The Settings tab

Top to bottom:

• Account — your avatar and email, and Sign out. Guests see a sign-in card here instead.
• Build (signed in) — a My agents shortcut to the Agents tab.
• Region (signed in) — pick your market: South Korea, Japan, United States, or Global. Region changes are limited to once per 24 hours.
• Appearance — light, dark, or match system.
• Servers — your paired self-hosted ggui servers: the active one is badged, and each row shows a live reachability dot. Tap a row to switch to it; long-press a row (or the “…” button on the web) to rename or remove. Add a self-hosted server pairs a new one, and Check connections re-probes them all. Pairing is covered in Finding agents & chatting.
• Data & Privacy — the controls detailed below, plus Terms of Service and Privacy Policy.
• About — the app version.

Connected services

Settings → Connected services is where you manage the third-party accounts you’ve authorized agents to use. You authorize once per service — always from a card in chat, never from here — and this screen is the ledger of what that authorization is doing:

• Per connection, you see the service and which of your apps may use it.
• Per app, a toggle switches that app between allowed and blocked. Blocking is remembered: the platform refuses that app’s calls to the service, and the agent won’t re-ask you in chat.
• Disconnect removes a service entirely: the stored credentials are deleted, every app’s grant is dropped, and the service’s own authorization server is notified (best-effort). The row remains as history. If an agent needs the service again later, it simply asks again in chat.

There’s deliberately no “reconnect” button here — re-authorizing starts from the chat that needs it, so the grant always names the right app.

Linked accounts

Settings → Linked accounts lists app-specific identities you’ve linked by completing an app’s own sign-in flow (for agents whose builders bring their own user accounts — see Sign-in on the agent’s page). Unlinking removes the link permanently; to relink, go through that app’s sign-in flow again.

Profile sharing

Settings → Profile sharing is the consent ledger for your cross-app profile — what agents are allowed to know about you across apps (the cross-app profile is rolling out per environment — see State and memory). For each grant you can switch between read and read-write access, or revoke it. A revoked grant is remembered as an explicit “no”, so the agent won’t re-prompt you. Revoked grants stay listed so you can allow them again from here — this screen is the only way back once you’ve said no.

Per-agent notifications

Settings → Per-agent notifications shows, for each agent you’re subscribed to, whether it’s muted and which notification categories it has declared. This screen is display-only today — changing these from Portal isn’t available yet.

Deleting your data

Three scopes, smallest to largest:

• One agent’s memory of you — in the Agents tab, open the row menu of an agent under Your agents (long-press, or the “…” button on the web) and choose Delete memory. That agent forgets you; your account is untouched.
• Guest data — signed-out users get Clear guest data in Settings, which resets the device’s guest identity.
• Your account — Settings → Delete account schedules deletion about 30 days out and shows you the exact server-recorded deadline. Nothing is destroyed at request time: you stay signed in and can cancel from the same screen any time before the deadline. If your account still owns a workspace with other members, the request is refused and tells you which workspaces to resolve first. For an out-of-band audit trail you can also write to privacy@guuey.com.