A
Legal
Privacy Policy
Last updated: September 2026 · Effective immediately
AMI is a personal AI companion app built to help you reflect, plan, and grow.
Your privacy is not a footnote — it is core to how AMI is designed.
This policy explains what we collect, why, and how we protect it.
By using AMI, you agree to this policy. If you do not agree, please do not use the app.
1. Who we are
AMI is operated by AMI ("we", "us", "our").
You can reach us at hello@heyami.app
or support@heyami.app.
2. What data we collect
2a. Data you give us directly
- Account information — email address and password when you create an account. Creating an account is optional; AMI works fully without one.
- Diary entries — the text you write in your diary, including mood, title, and content.
- Schedule events — events, dates, times, and reminders you create.
- Projects and tasks — project titles, descriptions, tasks, and notes.
- Personal memory fields — information you voluntarily share during onboarding and in Settings (your name, companion name, life mode, core focus, goals, key person, and similar fields). Sensitive fields are stored encrypted on your device.
- Voice input — audio is processed in real time for speech-to-text and is never recorded or stored.
- Budget data — if you use the budget feature, spending entries and category limits you enter.
2b. Data collected automatically
- Crash reports — if the app crashes, Sentry captures an anonymised error report. No diary content, names, or personal memory fields are included.
- Usage analytics — PostHog captures anonymised events (e.g. "diary entry saved", "schedule event created") to help us understand how features are used. No message content is captured. Your IP address is not stored.
- Push notification token — a device token used to deliver reminders. Stored in Supabase linked to your account. Not used for marketing.
2c. What we do NOT collect
- We do not read, store, or sell the content of your diary entries, conversations, or voice sessions.
- We do not collect your location.
- We do not build advertising profiles.
- We do not sell your data to any third party.
2d. Google Calendar access (optional)
If you choose to connect Google Calendar, AMI requests permission to view, create, and edit
events on your Google Calendar. This access is optional — AMI's core features work fully
without it — and is used solely to power scheduling features within the app:
- Showing your existing Google Calendar events in AMI's Schedule and Planner.
- Creating and editing events on your Google Calendar when you ask AMI to schedule something.
- Avoiding time conflicts when planning with you.
We only access your Google Calendar data when you have explicitly connected your Google
account in Settings → Connected Accounts. We do not share this data with any third party,
use it for advertising, or allow anyone to read it except as necessary to provide the
scheduling features described above or to respond to a support request you initiate.
You can disconnect Google Calendar at any time in Settings → Connected Accounts, which
immediately revokes AMI's access to your calendar.
AMI's use and transfer of information received from Google APIs adheres to the
Google API Services User Data Policy,
including the Limited Use requirements.
3. How we use your data
- To provide and improve AMI's features (diary, schedule, planner, voice, insights).
- To personalise AI responses — your memory fields are included in AI prompts so AMI can give contextually relevant replies.
- To send reminders and notifications you have configured.
- To sync and manage calendar events, if you choose to connect Google Calendar (optional).
- To back up your data to the cloud when you are signed in (Supabase).
- To diagnose crashes and fix bugs (Sentry).
- To understand feature usage so we can improve the product (PostHog).
- To send transactional emails — account verification, password reset. We do not send marketing emails without your explicit consent.
4. AI processing
AMI uses the Anthropic Claude API to generate responses in the chat, diary replies, voice conversations, and weekly reflections.
When you interact with AMI, your message and relevant memory fields are sent to Anthropic's API to generate a response.
Anthropic does not use your conversations to train their models under their standard API terms.
Conversations are processed transiently and are not stored by Anthropic beyond what their API requires to return a response.
AMI is not a medical, psychiatric, therapeutic, or crisis service.
AI-generated responses may occasionally be inaccurate or inappropriate.
Users experiencing emergencies or severe mental health crises should contact local emergency services or a licensed professional immediately.
5. Data storage and security
- On your device — all data is stored locally first. The app works fully offline.
- Cloud backup (Supabase) — if you create an account, your data is synced to Supabase servers located in the EU. Supabase uses AES-256 encryption at rest and TLS in transit.
- Sensitive memory fields — fields like your core focus, life goal, emotional context, and key person are encrypted on your device using your operating system's secure storage (iOS Keychain / Android Keystore).
- Passwords — we never store your password in plain text. Supabase handles authentication using industry-standard bcrypt hashing.
- Guest users — if you use AMI without creating an account, all data stays on your device only. Nothing is sent to our servers except AI API calls.
6. Third-party services
AMI uses the following third-party services. Each has its own privacy policy.
7. Data retention
- Active accounts — your data is retained for as long as your account exists.
- Deleted accounts — when you delete your account, all your data (diary entries, schedule events, projects, memory fields) is permanently deleted from our servers within 30 days. Local data on your device is deleted immediately.
- Guest users — uninstalling the app removes all local data permanently. There is no cloud copy to delete.
- Crash reports — retained by Sentry for 90 days, then automatically deleted.
- Analytics events — retained by PostHog for 12 months.
8. Your rights
You have the right to:
- Access your data — use Settings → Export My Data to download a full JSON export of your diary, projects, and schedule.
- Delete your data — use Settings → Delete Account to permanently remove all your data. Alternatively, email support@heyami.app.
- Correct your data — edit any memory field directly in Settings → Memory Bank.
- Portability — your data export (JSON) is human-readable and machine-readable.
- Object to processing — if you object to any processing described in this policy, stop using AMI and delete your account.
If you are located in the EU or UK, you have additional rights under GDPR / UK GDPR including the right to lodge a complaint with your local data protection authority.
To exercise any of these rights, email support@heyami.app.
9. Children
AMI is not directed at children under the age of 13 (or 16 in the EU).
We do not knowingly collect personal data from children.
If you believe a child has provided us with personal data, please contact us at
support@heyami.app and we will delete it promptly.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you
in the app or by email at least 14 days before the change takes effect.
The "Last updated" date at the top of this page reflects the most recent revision.
Continued use of AMI after changes take effect constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions, requests, or complaints:
We aim to respond to all privacy requests within 5 business days.