Privacy Policy

Last Updated: December 19, 2024

What We Do

Iris is a personal AI assistant that helps you manage tasks, communications, and productivity. We take your privacy seriously and keep things simple.

Information We Collect

Account Information

  • Email address and name (when you sign in)

  • Authentication credentials (managed by our auth provider)

Usage Data

  • Chat messages you send to your AI assistant

  • Tasks, notes, and objectives you create

  • Files you upload (audio recordings, documents)

  • Calendar and email data you choose to connect

Technical Data

  • Browser type and device information

  • IP address and general location

  • Log data for debugging and security

How We Use Your Information

  • Provide the service: Process your requests, generate AI responses, manage your data

  • Improve the product: Fix bugs, develop features, optimize performance

  • Security: Detect and prevent unauthorized access or abuse

  • Communications: Send service updates, respond to support requests

AI Processing

We use Anthropic's Claude AI models to power the assistant. Your messages are sent to Anthropic's API for processing. Anthropic's data usage policies apply to this processing. We do not train AI models on your data.

WhatsApp Integration

If you use our WhatsApp backup channel:

  • Messages are processed in real-time only

  • No conversation history is stored

  • Data is immediately discarded after we send your response

  • We use Meta's WhatsApp Business API (Meta's privacy policy applies)

Third-Party Services

We integrate with services you choose to connect:

  • Google (Gmail, Calendar, Drive)

  • Apple (Reminders via CalDAV)

When you authorize these connections, those services' privacy policies apply to data accessed through them. We only access what you explicitly grant permission for.

Data Storage

  • Your data is stored in secure databases in the EU/UK region

  • We use industry-standard encryption for data at rest and in transit

  • Backups are performed regularly and stored securely

Data Retention

  • Active accounts: We keep your data as long as your account is active

  • Inactive accounts: Accounts inactive for 12+ months may be deleted

  • Deletion requests: You can request immediate deletion at any time

Your Rights

You can:

  • Access your data at any time through the app

  • Export your data (contact us)

  • Delete your account and all associated data

  • Revoke third-party integrations

  • Opt out of non-essential communications

For GDPR requests, email privacy@adapt-works-studio.com

Data Sharing

We do not sell your data. Ever.

We only share data when:

  • You explicitly authorize it (e.g., connecting Google Calendar)

  • Required by law (e.g., valid legal subpoena)

  • Necessary for service operation (e.g., cloud hosting provider)

Cookies and Tracking

We use essential cookies for:

  • Authentication and session management

  • Remembering your preferences

We do not use advertising cookies or third-party tracking.

Security

We implement industry-standard security measures:

  • Encrypted data transmission (TLS)

  • Encrypted data storage

  • Regular security audits

  • Access controls and authentication

No system is 100% secure. If we detect a breach affecting your data, we'll notify you promptly.

Children's Privacy

Iris is not intended for users under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy occasionally. Material changes will be communicated via email or in-app notification.

International Users

Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place for international data transfers.

Contact Us

Questions about privacy? Email Max@adapt-works-studio.com

Legal Basis (GDPR)

We process your data based on:

  • Contract: Providing the service you signed up for

  • Consent: When you authorize integrations or optional features

  • Legitimate interests: Improving our service, security, and fraud prevention

This privacy policy is effective as of the date above and governs all use of the Iris service.