Privacy Policy

Last updated: October 16, 2026

1. Who we are

Assi (HeyAssi, "we", "us", "the Service") is an AI-powered personal assistant for tasks, reminders, lists and calendar events that you use through WhatsApp, Telegram and the web app at app.heyassi.ai.

2. Information we collect

• Account information: the email address of the Google account you sign in with, your WhatsApp phone number or Telegram account when you connect them, and the preferences you set (name, language, time zone).
• Content you create: lists, reminders, tasks, automations, calendar events, and the facts you ask Assi to remember about you.
• Messages: the text of the messages you send to Assi, and the transcripts of voice messages, used to fulfill your requests and to keep the conversation's history.
• Files: a file you send to Assi is held, encrypted, for a few hours (24 at most) so a follow-up message can use it again; it is kept longer only if you agree to that when asked.
• Calendar and task data: if you connect Google Calendar, Google Tasks or an Outlook calendar, we read your calendars and create, update or delete events and tasks on your behalf.
• Technical data: the cookies and tokens needed to keep you signed in, and standard server and error logs needed to operate and secure the Service.

3. Google API Services and Limited Use

Assi uses Google APIs for sign-in and, when you choose to connect them, for your calendar and tasks. We request the following OAuth scopes:

• openid and email: to identify your account.
• https://www.googleapis.com/auth/calendar.calendarlist.readonly: to list your calendars.
• https://www.googleapis.com/auth/calendar.events: to read your events and create, update or delete the events you ask Assi to manage.
• https://www.googleapis.com/auth/tasks: to keep your Google Tasks in sync with Assi, when that is offered with the calendar connection.

Assi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained from Google APIs is never used to develop, improve, or train generalized AI or machine learning models, is never sold, is never used or transferred for advertising purposes, and is never read by humans except (a) with your explicit consent, (b) for security purposes such as investigating abuse, or (c) to comply with applicable law.

4. How we use your information

• To provide, maintain, and improve the Service for you.
• To process your requests through our AI providers in order to create lists, reminders, tasks and calendar events on your behalf.
• To send you the reminders and messages you have scheduled.
• To secure your account and prevent abuse.

We do not sell your personal data. We do not share it with third parties for advertising. We do not use your private content to train AI models.

5. Sub-processors

We rely on a small set of infrastructure providers to operate the Service:

• Supabase: database and sign-in.
• Cloudflare: hosting of the web app and the server, and file storage.
• OpenAI: the AI model that understands and answers your messages, voice message transcription, and web search when you ask for it.
• Anthropic: an additional AI model provider.
• Meta (WhatsApp Business Platform): sending and receiving WhatsApp messages.
• Telegram: sending and receiving messages, when you connect Telegram.
• Google: sign-in, and Google Calendar and Google Tasks when you connect them.
• Microsoft: Outlook calendar, when you connect it.
• Stripe: payment processing, when paid plans are offered.
• Sentry: error monitoring for the web app and the server.

6. Storage, security, and retention

Your data is stored with the infrastructure providers listed above, which encrypt it at rest. Connections to the Service use HTTPS, and the access tokens of the services you connect are additionally encrypted by us. Data is retained until you delete the relevant items or your account.

7. Your rights and choices

• Access, correction and export: you can view and change your data in the app, and ask us for a copy of it by email.
• Delete: you can delete individual items in the app or request full account deletion. See our data deletion page.
• Revoke Google access: at any time, disconnect it in the app or visit myaccount.google.com/permissions.

8. Cookies

We use only the cookies and browser storage needed to keep you signed in. We do not use third-party advertising or tracking cookies.

9. Children

The Service is not directed to children under 13. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the latest revision.

11. Contact

For privacy questions, account deletion requests, or data inquiries, please email support@heyassi.biz. See also our Terms of Service.