Privacy, in plain language.

The short version first. The long version below.

What we collect

To run the service we collect: your account info (email, name if you give one — sign-in is handled by Clerk); the content you create (messages, photos you attach, voice-call transcripts, and the friend cards you make — name, voice choice, description, portrait — which sync so you can share and restore them) which is processed to deliver responses; your credit and purchase history (what was charged, when — so you can review every charge in the app); approximate location, only if you grant it, to answer "near me" questions; and usage & diagnostics (crashes, request timing). We don't log message content beyond what's needed to deliver the response.

What we don't collect

We don't build advertising profiles. We don't track you across other apps or sites. We don't sell your email or your usage data, and we don't "share" it for cross-context behavioral advertising as the CCPA defines it. We don't train models on your conversations. We don't sell aggregated "insights" to data brokers. We never see your full card number — Apple and Stripe handle payment details.

On-device first

Your memory store — the notes about you that let characters recognize you across sessions — lives on your device, protected by iOS file encryption and per-user keys in the Keychain. Your customized apps and their data live on your device too. Face detection, video decomposition, and much of the image analysis run on-device using Apple's Vision and Speech frameworks. We only send to the cloud what has to go there to generate a response.

Third parties we use

AI providers — Anthropic, OpenAI, xAI, Google, ElevenLabs, Deepgram (voice transcription), Magic Hour and Runway (video) generate responses, images, video, and voice. Requests route through our own inference proxy where possible, so providers see request content but not your identity, and their API terms prohibit training on that content. Voice calls — live call audio is carried by LiveKit's real-time infrastructure for the duration of the call. Search — web searches go through Tavily; image searches go through Brave; some map imagery comes from Google. Sign-in — Clerk manages authentication; if you use Sign in with Apple, Apple handles that sign-in directly. Payments — Apple (App Store purchases) and Stripe (web checkout) process payments and keep your card details; we receive only confirmation of what was bought. Infrastructure — Cloudflare hosts our servers and database. Each of these receives only what it needs for its job.

How long we keep things

Account data and your purchase ledger stay as long as your account exists. Chat history syncs so your sessions restore, and your on-device stores stay with the device. Delete your account (Settings → Account → Delete account) and we permanently remove your profile, chat history, memories, and other personal data from our systems; records we're legally required to keep (like payment records) are kept only as long as the law requires.

Your rights

Wherever you live, we honor the same set of rights: access and export your data from the app, correct what's wrong, and delete everything. California residents: we don't sell or share personal information as the CCPA defines those terms, and we won't discriminate against you for exercising your rights. EEA/UK residents: we process your data to perform our contract with you (running the service), for our legitimate interests (keeping it safe and improving it), and with your consent where required — and you can complain to your local supervisory authority. To exercise any right, use the in-app controls or email us.

Children

Gladys requires users to be at least 18. It is not directed to minors and we don't knowingly collect their data. If you believe someone under 18 has an account, email us and we'll delete it.

Security

Everything moves over TLS. On-device stores are protected with iOS file protection and per-user encryption keys held in the Keychain. Payment credentials never touch our servers. No system is perfectly secure, but if a breach ever affects your data, we'll tell you promptly.

Changes

If we materially change this policy, we'll tell you in the app and by email before the change takes effect. The date below always reflects the current version.

Contact

Questions, concerns, or you want to see what we have on file: privacy@heygladys.com. Gladys Ai, Inc.

Last updated: 2026-08-07