Privacy Policy

Effective date: June 27, 2026

Overview

AIPA ("the App") is an AI personal assistant that connects to your messaging platforms. Your privacy is fundamental to our design: all message data stays on your device.

Data We Collect

OAuth tokens: When you connect Slack, Discord, Gmail, or Telegram, we facilitate the OAuth flow through our server. The resulting access tokens are stored exclusively on your device in the iOS Keychain or Android Keystore.
Messages: Messages are fetched from your connected platforms directly to your device and stored in a local database. They never pass through or are stored on our servers.
Voice data: Voice conversations are streamed directly between your device and OpenAI's Realtime API using your own API key. We do not intercept, store, or process voice data.
LLM API keys: Your API keys for AI services (OpenAI, Anthropic, etc.) are stored in your device's secure enclave. We never see or store these keys on our servers.

Data on Our Servers

OAuth state: Temporary state tokens during the OAuth connection flow, automatically deleted after 10 minutes.
Slack installations: Workspace ID, team name, and encrypted bot token stored in Firebase Firestore to facilitate the OAuth flow. No message content is stored.
Gmail installations: Email address and encrypted refresh token stored in Firebase Firestore for token renewal. No email content is stored.

Third-Party Services

The App communicates directly with these services using your credentials:

Slack API (slack.com)
Discord API (discord.com)
Gmail API (googleapis.com)
Telegram Bot API (telegram.org)
OpenAI API (openai.com) — for voice and text AI
Anthropic API (anthropic.com) — for text AI

Each service has its own privacy policy. We recommend reviewing them.

Data Retention

Messages accumulate on your device indefinitely. You can delete all data by uninstalling the App. Server-side OAuth records can be removed by disconnecting your accounts.

Children's Privacy

The App is not intended for children under 13. We do not knowingly collect data from children.

Changes

We may update this policy. Changes will be posted on this page with an updated effective date.

Contact

Questions about this policy? Email privacy@aipa.site.