Privacy Policy

What We Collect

HeyBryan collects the information you provide while using the app, including your email address, profile name, tasks, notes, lists, calendar planning details, notification settings, connected device records, and feedback you send to us.

If you use voice capture, HeyBryan processes Bryan call metadata, Listen Mode recording metadata, transcripts, summaries, and extracted action items so the app can turn a capture into tasks, notes, and events for review.

If you connect calendars, HeyBryan stores calendar connection metadata, imported calendar events, and encrypted OAuth tokens or subscribed ICS feed details needed to sync your schedule.

How We Use It

We use your information to provide the app, keep you signed in, sync your planning data, generate AI-assisted suggestions, troubleshoot bugs, improve the app, and respond to support requests.

We do not sell your personal information.

We do not use your personal information or Google user data for advertising, creditworthiness, lending eligibility, employment eligibility, insurance eligibility, or other sensitive eligibility decisions.

Service Providers

HeyBryan uses Supabase for authentication and database services, Vapi and Daily for voice calling, OpenAI for AI processing and audio transcription, Mem0 for memory-related AI features, Expo push for mobile notifications, Vercel for hosting and analytics, and Sentry if error monitoring is enabled.

These providers process data only as needed to operate the features you use.

Sharing, Transfer, And Disclosure

HeyBryan does not sell personal information or Google user data. We do not allow third parties to use Google user data for their own advertising, profiling, or unrelated purposes.

We may share, transfer, or disclose personal information and Google user data only to provide the HeyBryan service through trusted infrastructure and service providers; where you direct or consent to an action, such as creating, updating, summarising, or sending information through a connected service; where required by law, regulation, legal process, or enforceable governmental request; or as part of a merger, acquisition, financing, reorganisation, or sale of assets subject to appropriate confidentiality and data protection obligations.

Service providers are permitted to process data only on our behalf and only for the purpose of operating, securing, supporting, or improving the HeyBryan features you use.

Security And Data Protection

We use administrative, technical, and organisational safeguards designed to protect personal information, Google user data, and sensitive data from unauthorised access, loss, misuse, disclosure, alteration, or destruction.

These safeguards include HTTPS/TLS encryption in transit, secure cloud infrastructure, access controls, least-privilege access practices, secure authentication, operational logging and monitoring, and retention controls designed to keep data only for as long as needed to provide the service, comply with legal obligations, resolve disputes, or enforce agreements.

Where sensitive data is processed, we limit access, reduce unnecessary retention, and use trusted service providers with appropriate security controls.

Calendar And Voice Data

Calendar connections and imported calendar items are used to show your schedule inside HeyBryan. Voice captures include Bryan calls and Listen Mode recordings; transcripts and extracted actions are used to prepare reviewable planning items after a call or recording.

Raw audio is not retained by default after transcription unless explicit retention is enabled in a future opt-in setting. Voice captures are not exported or used for training without explicit opt-in.

Avoid entering highly sensitive personal, financial, medical, or legal information. Bryan is designed for life admin support, not emergency, legal, financial, or medical advice.

Google User Data

If you connect your Google account, HeyBryan may request access to Google user data only where needed to provide the features you enable, such as helping you manage calendar events, reminders, tasks, notes, email-related actions, or other life-admin workflows.

HeyBryan uses Google user data only to provide and improve user-facing features you request or enable. For example, we may use Google Calendar data to help you create, update, summarise, or manage calendar events, and Gmail-related data only where you have explicitly granted access for supported life-admin workflows.

HeyBryan does not use Google user data for advertising, does not sell Google user data, and does not use Google Workspace API data to develop, improve, or train generalised AI or machine learning models.

You can revoke HeyBryan’s Google account access at any time from your Google Account permissions page.

Retention And Deletion

Tasks, notes, lists, calendar events, Bryan memory, calendar connections, notification devices, and voice capture transcripts and extracted review actions are kept while your account is active unless you delete them from Settings.

You can delete local voice history, delete Bryan memory, revoke the private task calendar ICS link, or delete your account from Settings. Account deletion removes local Supabase-owned planner data, notes, events, calendar tokens, notification devices, Bryan call and Listen Mode capture transcripts and extracted review actions, Bryan memory, and matching launch-signup data where applicable.

Voice startup telemetry and smart notification delivery records are local operational records and are removed during account deletion. Usage and spend audit events may be retained without your user id for up to 90 days for abuse, reliability, and cost investigation.

Backups and provider logs may persist for a limited period after deletion. Local Settings controls create a deletion job for operator follow-up where processor-side deletion is available across OpenAI, Vapi, Daily, Mem0, Expo, Vercel, and other external processors.

Contact

For privacy questions, support, external processor deletion follow-up, or deletion requests you cannot complete in Settings, contact hello@heybryan.ai.

Google API Limited Use

HeyBryan’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. For Workspace APIs, HeyBryan also complies with the Google Workspace API User Data and Developer Policy.

You can revoke HeyBryan’s Google access from your Google Account permissions.