Privacy Policy

Effective October 12, 2026 · Generative AI Teknoloji Anonim Sirketi

Summary

Pals is a personal AI assistant for iPhone. Your Pal does everyday and complex tasks for you across your phone, the accounts you connect and the web. Here is the short version of how we handle your information. The rest of this policy gives the details.

  • Your Pal acts on your requests. It reads your iPhone data, your connected accounts and the web to do what you ask, or to run a routine you set up.
  • You approve what speaks for you. Sending an email from your connected account, inviting people, replying to invitations, writing to Notion or Todoist, or calling a business needs your approval on an approval card. A call also needs Face ID. Small changes that affect only you, like adding a calendar event, may happen right away with an Undo option, depending on your settings.
  • We never sell your data. We do not share it for targeted advertising, and Pals shows no ads.
  • We don't train AI models on your content. Pals does not use your content to train AI models. Under the terms Pals uses, the AI model providers that work for Pals (Anthropic, OpenAI and Google) may not train on it either. Web-search companies may train on the search words they receive. So for 24 hours after your Pal reads one of your connected accounts, it sends its searches through Anthropic instead.
  • You get a private workspace. Your Pal runs in its own isolated cloud workspace. Your sign-ins to connected accounts are stored encrypted on Pals' servers. They are never kept in that workspace or on your iPhone.
  • You stay in control. You can see and change what Pals remembers, disconnect accounts, change iPhone permissions, pause Pals and delete your account in the app.
  • Pals is US only and 18+. Pals is offered in the United States, to adults 18 and older.
  • Your information is mainly in the United States. We store and process it mainly in the US. The team that runs Pals works in Türkiye and can access it to run, support and secure Pals.

Who we are

Pals is provided by Generative AI Teknoloji Anonim Sirketi, a joint-stock company organized under the laws of the Republic of Türkiye ("we", "us" or "our"). Our address is Idealtepe Mah. Dik Sk. No 13, Maltepe, Istanbul, Türkiye. We are the data controller for the personal information described in this policy: we decide why and how it is used, and we are responsible for it.

This policy covers the Pals iPhone app, your Pal's own email address and phone number when those features are available and you use them, and our website, pals.works, along with any other page where we post this policy. It also explains what happens to information about other people that your Pal handles for you, such as a business your Pal calls or someone who emails your Pal.

Pals is an AI assistant, not a person. When your Pal places or answers a call, or sends email from its own address, it says it is an AI assistant. Drafts you send yourself from Mail or Messages are your own messages, and so are emails your Pal sends from your connected email account after you approve them. Pals adds nothing to them.

You can reach us at any time:

  • Email: hello@aistudio.works
  • Mail: Generative AI Teknoloji Anonim Sirketi, Idealtepe Mah. Dik Sk. No 13, Maltepe, Istanbul, Türkiye
  • In the app: You → Privacy & data

Information we collect

We collect information in four ways: you give it to us, your iPhone shares it when you ask your Pal to do something, the services you connect send it, and some is created automatically as the app runs.

Information you give us

  • Account information. You sign in with Apple. Apple gives us a unique identifier for your Apple Account. We store it only as a keyed fingerprint. If you choose, Apple also shares your name and an email address, which may be a private relay address that forwards to you. You also give us the first name your Pal uses to sign its emails and introduce itself on calls.
  • Your requests and conversations. This covers what you type or send to your Pal, your Pal's replies, and the files, photos and documents you share for a task.
  • Things Pals remembers about you. These are preferences and facts you ask Pals to keep. Pals also keeps preferences and facts you state in your own words, through an automatic review of your conversations. A fact your Pal reads in an email or document waits for your confirmation. You can see, edit or forget each one in "What Pals knows."
  • Memory you import. You can import what another AI assistant knows about you, as pasted text or an export file. Pals pulls out up to 500 facts. Each one waits for your confirmation before Pals uses it. We delete the uploaded file as soon as the facts are extracted, and we never store or log pasted text.
  • Routines and reminders. These are the scheduled tasks you set up, such as a morning brief.
  • Your approvals and settings. This covers what you approved or declined on approval cards, and the settings you choose.
  • Your phone number, if you give it. When calls are available, you can ask your Pal to connect you to a call it places ("Join"), or to call you. For that, you give us your own phone number. We verify it with a code sent by text or voice call, and we record your consent to be called with the version of the text you agreed to.
  • Support messages. This is what you send when you contact us.

Information from your iPhone, when you ask

When a task needs it, your Pal can use your iPhone's contacts, calendars, reminders, location, photos, files, camera, clipboard and other features, through the permissions iOS gives you. The section "Your iPhone data" below explains each one.

Information from accounts you connect

If you connect Google, Notion or Todoist, your Pal can read and change information in those accounts, as the section "Connected accounts" below explains.

Information from your Pal's email address and phone number

When these features are available and you use them, we receive the email, calls and texts sent to your Pal's address and number. The section "Your Pal's email address and phone number" below explains how.

Information collected automatically

  • Device information. We collect your iPhone's model, iOS version, Pals app version, language and region settings, time zone, and which iOS permissions you have granted. We also keep security keys that let Apple's App Attest confirm that requests come from the genuine Pals app on a real device, and the push notification tokens that let us send you notifications.
  • Account details. We record your App Store country, the date you created your account and its status.
  • Usage records. We record which AI models and tools ran for you and how much computing they used. We use these records for your plan's limits and for billing. They never contain the text of your requests or your Pal's answers.
  • Service logs. Our servers log identifiers and error codes so we can keep Pals running and secure. We design these logs to leave out the content of your requests, your messages and the pages your Pal reads.
  • Network information. Like any internet service, our servers and our network provider see your device's IP address when the app connects.
  • Diagnostics. If the app sends crash reports or app usage statistics, they contain technical details and a pseudonymous identifier linked to your account. They never contain the content of your requests or what your Pal reads. Before the app sends them to any company, we will name that company in this policy.

The Pals app does not use advertising identifiers. It does not track you across other companies' apps or websites.

Our website. pals.works uses no cookies, analytics, advertising or tracking scripts, and it loads nothing from other companies. Our hosting provider, Cloudflare, sees your IP address and basic request details (such as the page you asked for and your browser type) so it can deliver the pages and protect them from abuse. If you email us from the website, we receive what you write and your email address, and use them only to answer you.

Information from other sources

  • Apple. Apple shares your sign-in details. When you subscribe to Pals Plus or buy an optional add-on, Apple sends us the product, dates, renewals, refunds and your App Store country. Apple handles your payment. We never receive your card or bank details.
  • Services you connect. Google, Notion and Todoist send the information your Pal asks for on your behalf.
  • People who contact your Pal. When these features are available, this includes email sent to your Pal's address, and calls or texts to your Pal's phone number.
  • Phone number lookup. When calls are available, before your Pal calls a business, we check the number's line type and business listing with a lookup service.
  • The public web. Your Pal reads web pages and search results for your tasks.

How we use information

We use your information to:

  • Do what you ask. We answer your requests, carry out tasks, run your routines and reminders, and show your results.
  • Act on your iPhone and in your connected accounts, within the permissions and approvals you give.
  • Remember what matters to you. This keeps "What Pals knows" up to date so your Pal can help you better over time.
  • Keep you in charge of actions. We show approval cards, run a second safety check on actions your Pal proposes, and keep receipts of what your Pal did.
  • Run your Pal's email address and phone number, when they are available and you use them. That includes keeping sign-in codes locked away and honoring "stop calling" requests.
  • Protect you and others. We spot unsafe actions, scams, and instructions hidden in emails or web pages that try to steer your Pal. We also prevent fraud and abuse and secure our systems.
  • Manage your subscription and usage limits, with Apple.
  • Provide support and respond to your requests.
  • Keep Pals reliable. We fix problems and improve the service using usage records and error information that do not contain your content.
  • Meet legal obligations and enforce our Terms of Service.

We do not use your content to train AI models. We do not use your information for advertising.

Your iPhone data

Your Pal uses your iPhone's data only when a task needs it: when you ask, or when a routine you set up runs. Each kind of data is behind an iOS permission that you control. You can change any of them at any time in iOS Settings. Pals works without permissions you don't grant. The tasks that need them just won't be available.

Here is what your Pal can do with each:

  • Contacts. Your Pal can search the contacts on your iPhone, including those synced from iCloud, Gmail, Exchange and other accounts. It can also add or update a contact when you ask. If you give Pals limited access, it sees only the contacts you selected. Pals never reads the notes field of your contacts.
  • Calendars and reminders. Your Pal can read your events and reminders, and create, change, complete or delete them when you ask.
  • Location. Your Pal reads your location only while you are using the app, and only for a task that needs it. It uses an approximate, neighborhood-level location unless the task needs a precise one, and then only for that task. Pals does not track your location in the background.
  • Photos, files, scans and camera. Your Pal sees only the photos and files you pick in Apple's own picker, and the documents you scan or pictures you take for a task. Picking photos does not give Pals access to your photo library. Your Pal can save a photo or file to your iPhone when you ask.
  • Clipboard. Your Pal reads your clipboard only when you tap Apple's Paste control.
  • Mail and Messages. Your Pal can prepare a draft in Apple's Mail or Messages compose screen. Nothing is sent unless you tap Send yourself. Pals does not read your messages in the Messages app.
  • Phone calls from your iPhone. Your Pal can open the Phone or FaceTime app with a number filled in. You tap Call. Pals never places a call from your iPhone on its own.
  • Alarms, timers and notifications. Your Pal can set, list and cancel its own alarms and timers, and show local notifications.
  • Maps, web pages and Shortcuts. Your Pal can open Maps for directions, open a web page, or run a Shortcut you choose. Running a Shortcut needs your approval.
  • Device details. Your Pal can check your iPhone model, iOS and app versions, language, time zone and permission status. This tells it what it can do.

Face ID stays on your iPhone. When you approve something with Face ID, the check happens on your device. Pals never receives your face data.

What happens to what your Pal reads. Your Pal reads only what the task needs. What it reads becomes part of that conversation in your private workspace. It is also sent to the AI model providers described below, so they can work on that request. Some small changes that affect only you, like adding a calendar event, may happen right away with an Undo option or after you approve them, depending on your settings.

Connected accounts

You can connect other accounts to Pals. Today these are Google (Gmail, Google Calendar, Google Tasks, Google Contacts and Google Docs), Notion and Todoist. You choose what to connect. On Google's own consent screen, you can untick any permission you don't want to give.

What your Pal can do with Google, depending on what you allow:

  • Gmail. Your Pal can send emails that you approve. Where available, it can also read emails you ask about and write drafts.
  • Google Calendar. Your Pal can read your calendars and events, and create or change events. Inviting other people or replying to invitations needs your approval.
  • Google Tasks. Your Pal can read, add and update your tasks.
  • Google Contacts. Your Pal can read your contacts.
  • Google Docs. Your Pal can read documents you point it to. Where available, it can also search your Google Drive to find them.

When you connect Google, we also receive your Google account's email address and an account identifier, so we can show which account is connected.

Notion and Todoist. Your Pal works with these through the connection service that Notion or Todoist runs. When you ask your Pal to read or change something there, the request goes through that company's service.

How your Pal uses connected accounts:

  • It fetches information when a task needs it. We do not keep a copy of your mailbox, calendar or files on our servers.
  • It treats everything it reads in your accounts as information, never as instructions. Emails and documents are usually condensed first by a separate reader that has no power to act. That reader runs on Google's Gemini. Your Pal gets the full text only when your task needs it. One-time sign-in codes and password reset links in your email are hidden from the AI.
  • A fact your Pal reads in an email, document or web page never becomes part of what Pals remembers about you unless you confirm it, or it is in your own words.
  • Sending email, inviting people, replying to invitations, and writing to Notion or Todoist all need your approval on an approval card first.
  • Your sign-ins to these accounts are stored encrypted on Pals' servers. They are never stored on your iPhone or in your Pal's workspace.
  • The AI model providers that receive content from your connected accounts may not train on it (see "Companies that help Pals work"). Web-search companies may train on what they receive, so for 24 hours after your Pal reads one of your connected accounts, and for the rest of that conversation, your Pal sends its web searches only through Anthropic, never Parallel or Exa. A fact you confirm into "What Pals knows" from an email becomes part of what Pals knows about you, and your Pal may use it in later searches.

Disconnecting. You can disconnect an account at any time in the app, or remove Pals' access in that account's own settings. When you disconnect in the app, we revoke Pals' access with the provider where the provider supports it, delete your stored sign-in, and your Pal stops using the account. Facts Pals picked up from that account, whether you confirmed them or they are still waiting for you, stay in "What Pals knows" until you forget them there.

Google, Notion and Todoist are independent companies. Their own privacy policies cover how they handle your information in their services.

Google user data

Pals' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

  • We use your Google data only to provide and improve the features you use in Pals, such as reading, drafting and sending email, managing your calendar and tasks, and finding contacts and documents.
  • We transfer your Google data only as needed to provide or improve those features, for security, to comply with law, or as part of a merger or acquisition. The AI model providers that process it for us are Anthropic, OpenAI and Google's own Gemini API. None of them may train their models on it.
  • We never use your Google data for advertising, and we never sell it.
  • We do not use your Google data to develop, improve or train generalized AI or machine learning models.
  • No one on our team reads your Google data unless you ask us to (for example, for support), it is needed for security or to investigate abuse, the law requires it, or the data has been aggregated and anonymized for internal operations.

Your Pal's email address and phone number

These features are not available yet. This section explains how they will work when they become available. We will update this policy if anything changes before then.

Your Pal's phone number and the calls your Pal places will be optional and opt-in. Before your Pal first sends or receives email, or places or answers a call, Pals will ask for your permission and name the companies involved.

Your Pal's email address

Your Pal can have its own email address on the pals.email domain. The address is based on your first name (or "pal") plus a few random characters. Your Pal can also create masked addresses for signing up with websites, and you can turn any of these off. We never give a Pal's address to anyone else, even after it is turned off.

Incoming mail. Mail reaches your Pal when you forward it, or when someone sends it to your Pal's address.

  • The incoming message is stored encrypted with Amazon Web Services. We delete it as soon as it is processed, usually within minutes. If processing fails, an automatic rule deletes it within about 2 days.
  • Messages larger than 25 MB are not accepted, and we tell you.
  • Pals never loads remote images or other remote content in these emails.
  • Attachments are listed by name and size but not stored.
  • Your Pal sees only a short extract of each email, never the raw message. It treats the extract as information, not instructions. When your Pal uses an extract for a task, the extract goes to the AI model providers for that task.

Sign-in code vault. Sign-in codes, magic sign-in links and password reset links that arrive at your Pal's address are sealed in a separate vault.

  • They are never shown to the AI, never logged, and never included in notifications.
  • A code that a website was expecting is held for at most 10 minutes. An unexpected code is held for at most 15 minutes. For an unexpected code, you see only the sender and the time.

What we keep from each email. We keep the sender, size, spam and virus checks, and, encrypted, the subject and the extract. The full text is kept, encrypted, only while it waits to be sorted.

  • Mail to your Pal's main address is kept for 1 year.
  • Mail to a masked address is kept for 90 days.

Outgoing mail. Your Pal sends email from its address only when you ask, one message at a time.

  • The first time your Pal writes to someone from its address, you approve that recipient on an approval card. Later emails to a recipient you approved don't need a new card.
  • Each email is sent as "Pals for" your first name and ends with "Sent by Pals, an AI assistant, on behalf of" your first name. It also carries a technical label marking it as AI-generated.
  • A message can go to at most 5 recipients. Your Pal can send up to 50 emails and reach up to 10 new recipients in any 24 hours.
  • If a message bounces or a recipient complains, your Pal stops emailing that recipient.
  • The message itself is stored, encrypted, only while it waits to be sent. We keep a record of each sent email (its recipients, the sending address, its status and time), your approved recipients and the addresses your Pal stopped emailing, until you delete your account.

Your Pal's phone number (optional)

You can turn on a US phone number for your Pal. The number comes from our telephone provider, Telnyx. It shows up as "PALS ASSISTANT" on caller ID. When you turn it on, we record that you accepted the number's terms, and which version you accepted.

When someone calls your Pal's number. Your Pal answers calls to its number, such as a business calling back about a call your Pal made. It always starts with "Hi, this is Pals, an AI assistant answering for" followed by your first name, and "This call may be recorded." Then it takes a message or the answer, and puts it in your Inbox with a transcript. Your Pal never pretends to be you. Your Pal takes one call at a time, and it does not answer calls to your own phone number.

Texts to your Pal's number. These are used only to catch sign-in codes for your tasks. They go straight to the sign-in code vault. We keep only the sender, the time and the length of each text, not its words. Pals doesn't send text messages from your Pal's number. If someone texts STOP or another opt-out word to it, their number goes on our opt-out list, and no Pal will call it.

Calls your Pal places for you (optional)

Your Pal calls a business only when you ask. Each call needs your approval with Face ID on an approval card that shows:

  • the business and its number
  • why your Pal is calling
  • the facts your Pal may share
  • the exact opening words
  • the number of minutes it may use

Who your Pal can call. Your Pal calls only US business landlines, fixed internet phone lines and toll-free numbers.

  • It never calls mobile phones, homes, emergency numbers, 988 or other crisis lines, or premium numbers.
  • It never calls lists of numbers and never makes marketing calls.
  • It calls only within local calling hours.
  • Before dialing, we check the number's line type and business listing with Twilio Lookup. We reuse a result for up to 7 days, then look the number up again. Lookup results are stored by phone number and are not linked to your account.

What your Pal says. Every call starts with a recorded opening. It says that this is Pals, an AI assistant calling on your behalf, and that the call is recorded and transcribed. You see the exact words on the approval card.

  • Your Pal shares only the facts you approved. Those facts can never include card numbers, security codes, passwords, PINs, Social Security numbers or bank account numbers.
  • Your Pal says it is an AI whenever asked, and never claims to be you.
  • If an answering machine picks up, your Pal leaves a short voicemail. It says that this is Pals, an AI assistant calling on your behalf, and gives the reason for the call, a callback number, a reference and how to stop calls from Pals.
  • You can listen in or join the call. When you join, Pals calls your verified phone number and connects you.

What we keep from calls. When a call says it is "recorded," it means the call is transcribed as it happens. For calls your Pal answers and calls it places, we keep a written transcript, not an audio recording. We also keep the numbers involved, the business, the purpose, the facts you approved, the result, and how long the call lasted. Telnyx carries the call audio over the phone network. Pals does not ask Telnyx to record calls. An AI model listens and speaks on the call in real time.

"Stop calling." If anyone asks your Pal to stop calling, their number goes on an opt-out list that applies to every Pals user. We never call that number again. We keep this list even if you delete your account, because it protects the person who asked.

Limits. A call can last up to 20 minutes. Your Pal can place up to 10 calls a day, and up to 3 to the same number.

Companies that help Pals work

Pals is a personal assistant. To answer you and act for you, it sends parts of your data to a small number of companies that run computing services for us.

None of the AI model providers below (Anthropic, OpenAI and Google) may use your data to train their models under the terms Pals uses. Web-search companies (Parallel, and Exa if we add it) may use the search words Pals sends them to improve and train their services. So for 24 hours after your Pal reads one of your connected accounts, and for the rest of that conversation, Pals sends its searches through Anthropic instead. The AI model providers that receive content from your connected accounts may not train on it.

Your choice. Pals can't work without an AI model. Using Pals means your requests, and what your Pal reads for them, go to the AI model providers below. If you no longer want that, you can stop using Pals and delete your account. You can also limit what reaches them: turn off iPhone permissions, disconnect accounts, or forget facts in "What Pals knows."

AI model providers

These companies run the AI models that read your requests and write your Pal's answers. Your Pal's main AI model is either Anthropic's Claude or Google's Gemini. Whichever one answers you receives your whole conversation.

Anthropic (Claude)

  • What it receives: your messages, your conversation with your Pal, and what your Pal reads for the task, on accounts where Claude is the model that answers you. That includes web pages, notes Pals keeps about your preferences, and email or other content from accounts you connected. It also runs web searches for your Pal, as described in "Web search."
  • Why: it is the main AI model that answers you and decides what to do, on those accounts.
  • How long it may keep it: deleted within 30 days. Anthropic's zero-data-retention arrangement is active on our account today. Content Anthropic flags for misuse may be kept up to 2 years.
  • Trains on it: no.

OpenAI

  • What it receives: pieces of text. That can be a recent part of a conversation, an email, a web page, a document or other content your Pal read for you, or a notification.
  • Why: quick yes-or-no and category checks:
    • whether a conversation holds something worth remembering
    • how urgent an email is, and whether it is a scam
    • whether a page or email contains instructions aimed at an AI
    • how important a notification is
  • How long it may keep it: up to 30 days for abuse monitoring, then deleted.
  • Trains on it: no.

Google (Gemini API, paid)

  • What it receives:
    • your messages and your conversation with your Pal, on accounts where Gemini is the model that answers you
    • the work your Pal does in the background, such as a scheduled routine (a morning brief or a watcher), with the email, calendar or other content it reads
    • the full text of emails, documents and other content from your connected accounts, and other text from outside sources such as web pages, which a separate Gemini reader condenses before your Pal sees it
    • summaries and titles of your conversations
    • the review of what Pals remembers about you, and memory you import
    • an action your Pal proposes, for a second safety check
    • images and PDFs you share
    • a piece of text when OpenAI's check is unavailable
  • Why: answering you on some accounts; running routines in the background; condensing untrusted content safely; summarizing long conversations and keeping your Pal's memory of you up to date; checking risky actions; reading images and documents; and backing up the quick checks.
  • How long it may keep it: up to 55 days for abuse monitoring, then deleted. Google may also hold requests in an in-memory cache for up to 24 hours. To answer faster, Pals may also ask Google to hold your Pal's standing instructions for your session in a temporary cache. That cache can include what Pals remembers about you. It is used only for your account and lasts at most 6 hours.
  • Trains on it: no. Google's terms let it use its abuse-monitoring logs only to train the systems that enforce its usage policies.

If we add another AI model provider, for example as a backup when a provider is unavailable, or let you choose a different AI model, we will update this list before that provider receives your data.

When you ask your Pal to look something up, the search goes to one of these companies.

Parallel

  • What it receives: the search words your Pal writes for your request, your country, a random task identifier and the name of the AI model in use. It does not receive your account details. The search words can include details from your request, such as a place or a name.
  • When: for your searches, except for 24 hours after your Pal reads one of your connected accounts, and for the rest of that conversation.
  • How long it may keep it: not limited in its terms.
  • Trains on it: yes, its terms allow it. That is why Pals keeps it away from searches made after reading your connected accounts.

Exa (if we add it)

We may add Exa as a backup search company. If we do:

  • What it receives: the search words your Pal writes for your request.
  • When: only if Parallel does not answer, and with the same limit.
  • How long it may keep it: not stated in its terms.
  • Trains on it: yes, its terms allow it, with the same limit.

Anthropic

  • What it receives: the same search words.
  • When: every search for 24 hours after your Pal reads one of your connected accounts, and for the rest of that conversation.
  • How long it may keep it: as described above.
  • Trains on it: no.

Reading your iPhone data, such as your iPhone's calendar, contacts or location, does not move your searches to Anthropic. A search in such a conversation can still go to Parallel, with search words that come from that data.

When your Pal reads a web page, it fetches the page from Pals' own servers. It sends no cookies or sign-ins of yours, so the website sees a request from Pals, not from your iPhone.

Infrastructure

  • E2B holds your private Pals workspace: a small computer that runs your assistant, with its memory files and the content it works on. Each Pals user has their own isolated workspace.
  • Cloudflare (Workers and R2 storage) holds messages between your iPhone and your workspace while they are delivered, your Inbox, backups of your workspace, and files you upload or your Pal makes. It connects the app to your workspace through its worldwide network and stores the backups and files with a placement setting for Eastern North America.
  • Hetzner hosts Pals' own servers in Ashburn, Virginia, United States. These run the gateway that holds the AI companies' keys, records usage and passes your requests on, and the databases of your settings, memory, approvals and usage.
  • Amazon Web Services (Amazon SES, S3 and KMS), when your Pal's email is available, sends and receives your Pal's email and briefly stores incoming mail, encrypted. Location: United States.

Calls and email from your Pal

When these features are available and your Pal places or answers a phone call, sends or receives email at its own address, or receives a text at its own number, these companies take part:

  • Telnyx receives the live audio of the call and the numbers of both sides. It also handles text messages to your Pal's number, and your own phone number when you join a call or verify your number. It carries calls and texts on the phone network and provides your Pal's US number.
  • The call's voice engine (Google or OpenAI; we will name it here before calls become available) receives the live audio of both sides of the call and what your Pal says. It listens and speaks on the call. We will add how long it may keep that audio when we choose it.
  • ElevenLabs (text to speech), if used, receives the short opening your Pal says at the start of every call: who it is and for whom. It gives that disclosure a clear spoken voice.
  • Twilio Lookup receives the business phone number your Pal is about to call. It checks that the number is a business landline before dialing, to help us follow US rules on artificial-voice calls.
  • Amazon SES receives email to and from your Pal's own address, to send and receive it.

Other companies that receive information

  • Apple provides Sign in with Apple, App Store purchases and refunds, push notifications and App Attest. Notification content is encrypted for your device, so Apple's push service sees only encrypted content and a short notice text. If you ask Apple for a refund of an add-on and you have turned on the setting that lets Pals share usage information with Apple, we tell Apple how much of the add-on you used. Apple handles your information under its own privacy policy.
  • Google, Notion and Todoist receive the requests your Pal makes in your connected accounts, as described above.
  • People and businesses you ask your Pal to contact receive what you approve, such as an email or the facts your Pal shares on a call.

How we share information

We share personal information only in these ways:

  • With service providers that process it on our behalf and under our instructions, as listed in "Companies that help Pals work." The web-search companies are not on this list. See the next point.
  • With web-search companies. When your Pal searches the web, Parallel (and Exa, if we add it) receive the search words your Pal writes, as described in "Web search." Their terms let them use what they receive to improve and train their services, so we treat them as third parties, not as service providers. They don't receive your account details.
  • At your direction. This covers sending an email you approved, acting in an account you connected, or sharing approved facts on a call.
  • With Apple, for sign-in, purchases, refunds and notifications.
  • For legal reasons. We share information when we believe the law requires it, such as a valid subpoena or court order. Where the law allows, we tell you about the request. We also share it when needed to protect the safety, rights or property of you, other people or us, or to report child sexual abuse material as the law requires.
  • In a business transfer, such as a merger, acquisition or sale of assets. The information would stay subject to the promises in this policy.
  • With your consent, in any other case.

What we never do

  • We never sell your personal information. In the 12 months before this policy's effective date, we have not sold or shared personal information. We have no actual knowledge of selling or sharing the personal information of consumers under 16.
  • We never share your personal information for cross-context behavioral advertising (targeted ads based on your activity across other businesses).
  • We show no ads and never use your information for advertising.
  • We don't train AI models on your content. The AI model providers we use may not train on it under the terms Pals uses.
  • We don't let the AI model providers use your data for their own purposes, except for the security and abuse monitoring described above. The web-search companies' own use of the search words they receive is described in "Web search."
  • We don't track you across other companies' apps or websites, and we don't sell or give your data to data brokers.

How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires. Here are the periods that apply:

  • Account information: while you have an account. Deleted when you delete your account.
  • Conversations: kept in your private workspace for up to 365 days. Older conversations are deleted automatically. This includes what your Pal read during them. Copies can stay in the encrypted backups of your workspace for a short time after that.
  • What Pals knows (memory): until you forget or edit a fact, or delete your account. When you forget a fact, its content is deleted, and your Pal won't use it again. The conversation where you mentioned it stays until that conversation is deleted. A small record without the content (an identifier and a fingerprint) is kept for up to 400 days, so a backup can't bring the fact back.
  • Imported memory files: deleted as soon as the facts are extracted, and in any case within 24 hours.
  • Files you share for a task and files your Pal makes: kept in our storage while you have an account, and deleted when you delete your account.
  • Sign-ins to connected accounts: until you disconnect the account.
  • Messages in transit: messages between your iPhone and your workspace are kept by our delivery service for up to 24 hours. Messages waiting for your workspace to wake up are kept for up to 7 days.
  • Inbox items: up to 7 days.
  • Safety review context: the recent part of your conversation that our second safety check reads is kept for 48 hours, and removed within about 3 days.
  • Approval requests: an approval card expires after at most 24 hours.
  • Receipts of actions your Pal took: 24 months, or 36 months for receipts involving money.
  • Your Pal's email: incoming raw messages are deleted once processed, and within about 2 days if processing fails. Extracts and details are kept 1 year (main address) or 90 days (masked addresses). Sign-in codes are kept at most 15 minutes. Records of sent emails and your approved recipients are kept until you delete your account.
  • Texts to your Pal's number: we keep only the sender, the time and the length. The text goes only to the sign-in code vault.
  • Calls your Pal answers: transcripts and call records are kept until you delete your account.
  • Calls your Pal places for you: we will state how long we keep these records here before this feature becomes available.
  • Phone line lookups: reused for up to 7 days, then refreshed. They are stored by phone number, not linked to your account.
  • Usage records: as long as needed for billing, plan limits, accounting and security.
  • Purchase and subscription records: while you have an account, and afterwards as long as needed for tax, accounting and legal reasons.
  • Records of your consents (for example, to your Pal's number terms): while you have an account, and afterwards as long as needed to show we had your permission.
  • Push tokens: until you sign out or remove the device.
  • Device records: until you delete your account.
  • Service logs: only as long as needed for security and troubleshooting.
  • Backups: your workspace backups are encrypted with a key unique to your workspace. See "Deleting your account" for how backups are handled.
  • Retired addresses and numbers: once your Pal's email address or phone number is retired, we keep only a keyed fingerprint of it, permanently, so it is never given to anyone else. A turned-off phone number is held out of use for 90 days, or 365 days if it ever received a sign-in code, or one year after account deletion. Then it goes back to our telephone provider, unlinked from you.
  • "Stop calling" opt-outs: kept permanently, to protect the people who asked.

AI model providers and other companies keep data for the periods described in "Companies that help Pals work."

Your choices and controls

  • iPhone permissions. Turn contacts, calendars, reminders, location and other access on or off at any time in iOS Settings.
  • Approval cards. Approve or decline what your Pal proposes. Sending email from your connected account, inviting people, writing to Notion or Todoist, and anything that can't be undone need your approval. Your Pal's own email address needs your approval the first time it writes to someone. A phone call also needs Face ID.
  • Pause Pals. Stop running tasks, pause routines and cancel approvals you gave for tasks in progress, all at once. Your Pal can still read and reply.
  • What Pals knows. See each fact Pals remembers and where it came from. You can confirm, edit, mark it outdated or forget it. You can undo a just-saved memory within 24 hours, and forget everything from an import at once.
  • Connected accounts. Disconnect any account in the app.
  • Your Pal's email address and number. When these features are available, you can turn off masked addresses, and turn your Pal's phone number on or off.
  • Notifications. Manage them in iOS Settings.
  • Your subscription. Manage or cancel it in your Apple Account settings in iOS Settings.

Deleting your account

You can delete your account in the app under You → Privacy & data → Delete account. To protect you, we may ask you to sign in with Apple again and confirm with Face ID.

  • A 7-day grace period. Deletion starts after 7 days. During that time you can cancel. You can also choose "Delete now" to skip the wait. Your routines may keep running until the grace period ends. To stop them sooner, choose "Delete now", or pause Pals before you delete your account.
  • Your subscription. Deleting your account doesn't cancel your App Store subscription. It keeps renewing until you cancel it in Settings (manage subscriptions). Any unused credits or call minutes end with your account.
  • Your connected accounts. Deleting your account disconnects them: we ask Google, Notion or Todoist to revoke Pals' access, then destroy your stored sign-ins. If a provider doesn't answer, we keep asking for up to 72 hours, then destroy your sign-ins anyway. You can also remove Pals' access in that account's own settings at any time.
  • On your iPhone. The app removes its local data the next time it opens.

What we delete:

  • We sign you out of every device and delete your devices, push tokens and Live Activities.
  • We delete your private workspace, including your conversations, memory files, routines and scheduled reminders, and we stop any task or call still running.
  • We destroy the encryption key for your workspace backups, so they can no longer be read, and delete the backups themselves.
  • We delete "What Pals knows," including memory you imported.
  • We disconnect your connected accounts and destroy your stored sign-ins, as described above.
  • We delete the files you shared for tasks and the files your Pal made.
  • We delete approval requests, the receipts of actions your Pal took, your Inbox items and our audit records of them.
  • We delete your Pal's email records and retire its addresses, and delete the records of your Pal's phone number, its calls, their transcripts and any number you verified.
  • We delete your plan's credit balance and usage records, and the records our AI and web-search gateways keep of your usage.
  • We delete the messages our delivery service holds for you.
  • We revoke Pals' Sign in with Apple access and delete your account.

When it is done. Usually within minutes after the grace period, and we aim to finish within 30 days of your request in every case. A few copies expire on their own shortly after:

  • copies in our database backups expire within 14 days;
  • older versions of files in our storage expire within 7 days, and your backups can no longer be read once their key is destroyed;
  • the internal history of tasks and approvals in our workflow system expires within 7 days.

What we may keep after deletion:

  • the keyed fingerprints of your Pal's retired addresses and number, so they are never reassigned
  • the "stop calling" opt-out list, which belongs to the people who asked
  • your purchase and billing ledger, which we keep for tax and accounting under a random identifier that no longer links to you
  • records we must keep by law, or for an open dispute, fraud prevention, security or legal claims (for example, records under a legal hold)
  • information that no longer identifies you, such as totals

Apple keeps its own records of your purchases under Apple's privacy policy.

Health information

Pals is not a health service, but health details can come up when you use it. This includes health facts you tell your Pal, health facts Pals keeps in "What Pals knows," and health details in emails, calendars or documents your Pal reads for a task.

  • Why we use it: only to do what you ask and to help you in the way you prefer.
  • How Pals treats it: Pals marks health and money facts in "What Pals knows" as sensitive and asks before using them.
  • Who receives it: the AI model providers and infrastructure companies in "Companies that help Pals work," for the task that uses it. We never sell it or use it for advertising.
  • Your rights: you can see and forget these facts in "What Pals knows," delete your account, or contact us at hello@aistudio.works to access or delete your health information.

Your US state privacy rights

Depending on where you live, US state privacy laws, such as the California Consumer Privacy Act (as amended by the CPRA), give you rights over your personal information. We give these rights to every Pals user in the United States, whatever state you live in.

  • Right to know and access. You can ask what personal information we have collected about you, where it came from, why we use it and whom we disclosed it to. You can also ask for a copy in a portable format.
  • Right to delete. You can delete your account in the app, or ask us to delete personal information we collected from you.
  • Right to correct. You can fix inaccurate information. You can edit what Pals remembers in "What Pals knows", or ask us.
  • Right to opt out of sale and sharing. We do not sell your personal information or share it for cross-context behavioral advertising. If you send an opt-out request, we will confirm that.
  • Right to limit the use of sensitive personal information. We use sensitive personal information only to provide the services you ask for, to keep Pals secure and to meet legal obligations. Pals marks health and money facts as sensitive and asks before using them.
  • Right to opt out of profiling for decisions that produce legal or similarly significant effects. Pals does not make such decisions about you.
  • Right not to be discriminated against. We will not deny you service, charge you a different price or give you a lower quality of service because you used your privacy rights.

Sensitive data and your permission. Pals uses your precise location only after you allow it in iOS, and only for a task that needs it. You can withdraw that permission at any time in iOS Settings.

How to make a request. To delete your account, use the app (You → Privacy & data → Delete account). For any other request, including a copy of your information, a correction or a limit on use, email hello@aistudio.works. Your Pal cannot make a privacy request for you.

Verification. To protect you, we confirm your identity before we act on a request. If you have a Pals account, we usually ask you to sign in to it. If you don't have a Pals account (for example, you run a business our Pal called), we verify your request by matching details you give us, such as the phone number or email address involved and the approximate date. We may ask you to confirm that you control that number or address. We use the information you give us for verification only for that purpose.

Authorized agents. You can ask someone to make a request for you. We will ask for your signed permission, and we may ask you to confirm your identity with us directly.

Our response. We confirm that we received your request within 10 business days. We respond within 45 days. If we need more time, we tell you why, and may take up to 45 more days.

Appeals. If we decline your request, you can appeal by replying to our decision or emailing hello@aistudio.works with "Appeal" in the subject line. We answer within 45 days. If you are not satisfied, you can contact your state attorney general.

Global Privacy Control. If your browser sends a Global Privacy Control signal when you visit our website, we treat it as a request to opt out of sale and sharing. We don't sell or share personal information in any case.

Do Not Track. Pals does not track you over time or across other companies' websites or apps, so it does not respond differently to a browser's Do Not Track signal. We do not allow other companies to collect information about your activity over time and across other websites or apps through Pals.

California "Shine the Light." We do not share personal information with third parties for their own direct marketing.

De-identified information. When we keep information that no longer identifies you, we keep it in that form and do not try to identify you from it.

Turkish data protection law

Because our company is established in Türkiye, Türkiye's Law No. 6698 on the Protection of Personal Data (often called KVKK) may also apply to how we handle your personal information. Where it applies, we are the data controller under that law, and you have the rights set out in its Article 11. In plain words, you can:

  • learn whether we process personal information about you
  • if we do, ask us for information about that processing
  • learn why we process it, and whether we use it for that purpose
  • know who receives it from us, in Türkiye or abroad
  • ask us to correct it if it is incomplete or inaccurate
  • ask us to delete or destroy it, under the conditions that law sets
  • ask us to tell those who received it from us about any correction, deletion or destruction
  • object to a result that goes against you and comes only from automated analysis of your information
  • claim compensation if unlawful processing of your information causes you damage

To use these rights, email hello@aistudio.works or write to us at the address in "Contact us." To protect you, we may first confirm your identity, as described in "Verification" above. We answer within the time that law sets, which is 30 days.

These rights add to the rights described in "Your US state privacy rights," which we give to every Pals user in the United States.

Notice at collection

This is a summary of the personal information we collect, why, whom we disclose it to for a business purpose, and for how long. For every category below:

  • Sources: you, your iPhone (when you ask), the accounts you connect, Apple, people who contact your Pal, our lookup and telephone providers, and the public web.
  • Sold or shared for targeted advertising: no.

The categories we collect and disclose for a business purpose:

  • Identifiers.
    • Includes: your Pals account ID, a keyed fingerprint of your Apple identifier, email addresses Apple or Google share with us, your Pal's email address and phone number, your own verified phone number (if you use Join), device and notification identifiers, and IP address.
    • Why: running your account, security, delivering messages and notifications, and the features you use.
    • Disclosed to: our cloud hosting providers, Apple, and when those features are available, Telnyx (phone numbers) and Amazon SES (email addresses).
    • How long: while you have an account, then as described in "How long we keep information."
  • Personal records.
    • Includes: your name and phone number.
    • Why: your Pal's signature and introductions, and calls you join.
    • Disclosed to: our cloud hosting providers, the AI model providers, and when those features are available, Telnyx, Amazon SES and the people your Pal contacts at your direction.
    • How long: while you have an account.
  • Commercial information.
    • Includes: your subscription, add-on purchases and refunds through Apple, and your use of your plan's allowance and call minutes.
    • Why: managing your plan, limits and billing.
    • Disclosed to: Apple and our cloud hosting providers.
    • How long: while you have an account, and afterwards as needed for tax, accounting and legal reasons.
  • Internet or other electronic network activity.
    • Includes: how you use the app and its features, usage records, device information and service logs.
    • Why: providing, securing and fixing Pals.
    • Disclosed to: our cloud hosting providers.
    • How long: as long as needed for billing, plan limits, security and troubleshooting.
  • Geolocation.
    • Includes: your location, only when a task needs it.
    • Why: location-based tasks such as directions or nearby places.
    • Disclosed to: the AI model providers and our cloud hosting providers. A place name can also appear in search words sent to a web-search company.
    • How long: as part of the conversation, up to 365 days.
  • Audio, electronic and visual information.
    • Includes: photos, files, scans and camera pictures you share. When calls are available, the live audio of calls your Pal places or answers, and their written transcripts. Pals itself keeps only the transcript.
    • Why: the tasks you ask for and your call results.
    • Disclosed to: the AI model providers and our cloud hosting providers, and when calls are available, Telnyx and the call's voice engine.
    • How long: photos and files as described in "How long we keep information"; call transcripts as described there.
  • Inferences.
    • Includes: preferences and facts in "What Pals knows," including those an automatic review of your conversations keeps.
    • Why: helping you in the way you prefer.
    • Disclosed to: the AI model providers and our cloud hosting providers.
    • How long: until you forget them or delete your account.
  • Content.
    • Includes: your requests and conversations, content from your connected accounts, and email sent to your Pal.
    • Why: doing what you ask.
    • Disclosed to: the AI model providers, our cloud hosting providers, Google, Notion and Todoist (for your connected accounts), and the people your Pal contacts at your direction. Web-search companies receive the search words your Pal writes.
    • How long: as described in "How long we keep information."
  • Sensitive personal information.
    • Includes: precise location (only when a task needs it), the contents of email and other messages your Pal reads for you, your sign-ins to connected accounts (stored encrypted), and any health, financial or other sensitive details you choose to tell Pals or that appear in what your Pal reads for you. Examples are religion, sex life or sexual orientation, racial or ethnic origin, and citizenship or immigration status.
    • Why: only to provide what you ask, keep Pals secure and meet legal obligations. Pals marks health and money details in "What Pals knows" as sensitive and asks before using them.
    • Disclosed to: the AI model providers and our cloud hosting providers, for the task that uses it.
    • How long: as described in "How long we keep information."

We do not collect biometric information, and Pals does not ask for government ID numbers.

Information about other people

When you use Pals, your Pal may handle information about other people, such as your contacts, the people in your emails and calendar, people who email or call your Pal, and businesses your Pal calls. We use it only to do what you ask. Please share other people's information with your Pal only when you have the right to.

Your Pal declines to gather personal details about private individuals. It also declines to send other people's personal information, like your contact list, in bulk to an address that isn't yours.

If you are not a Pals user and your Pal called you or emailed you:

  • Say "stop calling" on a call, and your number goes on our opt-out list for every Pals user.
  • Pals doesn't send text messages. If you text STOP or another opt-out word to a Pal's number, we add your number to our opt-out list.
  • Contact us at hello@aistudio.works with questions or requests about your information.

Children

Pals is only for adults 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that someone under 18 is using Pals, we close the account and delete its information. If you believe a child is using Pals, contact us at hello@aistudio.works.

How we protect your information

We use technical and organizational measures designed to protect your information, including:

  • A private, isolated workspace for each user. Your Pal runs in its own separate cloud computer. AI company keys and your account sign-ins are never kept in it.
  • Encryption. Data is encrypted in transit between the app and our servers. We seal much of your sensitive data with keys unique to your account. This includes what Pals remembers, your Pal's email, the transcripts of calls your Pal answers, and your connected-account sign-ins. Workspace backups are encrypted with a key unique to your workspace.
  • Encrypted notifications. Notification content is encrypted for your device, so Apple's push service can read only a short notice text.
  • Genuine-app checks. Apple's App Attest confirms that requests come from the real Pals app on a real device.
  • Approvals and safety checks. Actions that speak for you, like sending email or calling a business, need your approval as described in "Your choices and controls." A separate safety check reviews them and can block an action even after you approve it.
  • Sign-in codes locked away. Codes and reset links your Pal receives are kept from the AI and from logs.
  • Content kept out of our logs. Our service logs are designed to hold identifiers and error codes, not your content.
  • Limited access. We limit who on our team can access systems that hold personal information.

No system is perfectly secure, and we can't guarantee the security of your information. If a security incident affects your personal information, we will notify you and the authorities as the law requires.

Where your information is processed

Pals is offered only in the United States. We store and process your information mainly in the United States:

  • Our own servers are in Ashburn, Virginia.
  • Your private workspace runs at E2B.
  • Cloudflare stores your workspace backups and the files you upload, with a placement setting for Eastern North America. Cloudflare does not guarantee that placement. It delivers messages between your iPhone and your workspace through its worldwide network.
  • When your Pal's email is available, it runs on Amazon Web Services in the United States.

Access from Türkiye. Our company is established in Türkiye, and the team that runs Pals works there. Members of that team can access your information from Türkiye when needed to operate Pals, provide support and keep Pals secure. This means your information can also be accessed from, and transferred to, Türkiye. We protect it with access controls that limit who can reach it, and with the other protections described in "How we protect your information." Google user data stays under the stricter limits described in "Google user data."

Other countries. Some AI model providers, including Anthropic and Google, may process your requests on their global infrastructure, which can include data centers outside the United States. They may also keep copies there for the periods described in "Companies that help Pals work." Other companies that help Pals work, such as Cloudflare with its worldwide network, may also handle your information outside the United States, as described in that section.

The privacy laws of these countries, including Türkiye, may differ from the laws where you live. Wherever your information is processed, we handle it as this policy describes.

Changes to this policy

We may update this policy as Pals changes or as the law requires. We will post the new version with a new effective date. If we make a material change, we will tell you in the app or by other appropriate means before the change takes effect. If a change would let us use information we already have in a materially different way, for example to train AI models, we will ask for your consent first.

Contact us

If you have questions about this policy or your information, contact us:

  • Email: hello@aistudio.works
  • Mail: Generative AI Teknoloji Anonim Sirketi, Idealtepe Mah. Dik Sk. No 13, Maltepe, Istanbul, Türkiye
  • In the app: You → Privacy & data