Ailoha Inc

Privacy Policy

How Ailoha handles personal information, connected services and your privacy rights.

Last updated: November 6, 2026

Ailoha Inc ("Ailoha!", "we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use the Ailoha application, APIs, websites, share pages, and related services (collectively, the "Services").

Information We Collect

Depending on the features you use, we may collect the following information:

  • Account and authentication information. Your name, email address, profile image, authentication-provider identifier, and sign-in information from providers such as Apple or Google.
  • Connected-service data. Data you authorize Ailoha to access from services such as Google or Feishu. This may include Gmail messages and drafts, Google Calendar or Feishu Calendar events and scheduling information, Google Contacts, the permissions you grant, and credentials used to maintain the connection.
  • Content you provide. Messages and requests sent to the assistant; tasks, events, notes, contacts, and feedback you create or import; and screenshots, images, files, voice recordings, and transcriptions you submit.
  • Sharing and invitation information. The content you choose to share, share-link identifiers, invitee or attendee details, and delivery or import status.
  • Device, usage, and diagnostic information. Device identifiers, operating-system and app versions, push-notification tokens, feature interactions, crash reports, troubleshooting logs, and related technical information.

How We Use Information

We use information to:

  • Authenticate your account and provide, synchronize, and personalize the Services.
  • Perform actions you request, such as drafting or summarizing email, scheduling and updating calendar events, importing contacts, creating reminders, and organizing tasks.
  • Process assistant requests, transcribe voice, analyze submitted content, and retrieve information relevant to your request.
  • Create share links, contact cards, task snapshots, and calendar invitations at your direction.
  • Provide support, troubleshoot failures, monitor reliability, and improve user-facing features.
  • Protect the Services, prevent abuse, enforce our terms, and comply with legal obligations.

Payments, Subscriptions and Referral Benefits

When you subscribe, restore a purchase, manage a subscription, or use a subscription-related invitation, we process account-linked billing and subscription records. These may include store or payment-processor customer and transaction identifiers, product and billing-plan information, purchase and receipt verification information, subscription and trial status, billing-period and renewal information, cancellation or refund status, and invitation or reward attribution.

Apple processes App Store purchases, and Stripe processes website purchases. Payment details are entered through the applicable payment provider; Ailoha! does not receive your full payment-card number. We exchange information with these providers as needed to verify purchases, provide and restore access, manage billing and eligible referral benefits, prevent duplicate subscriptions and fraud, provide support, and meet accounting or legal obligations. The provider's own privacy policy also applies to information it processes.

We retain billing and subscription records for as long as reasonably necessary for these purposes, including handling refunds, disputes and legal recordkeeping requirements. Account deletion may not remove records that must be retained for these purposes. Deleting an Ailoha! account does not itself cancel an automatically renewing subscription; cancel through the provider that bills you.

Withdrawal and Cancellation Notices

If you use our online withdrawal function or contract cancellation function, we record the name, account email (if provided), confirmation email, billing channel and contract details you submit, together with your notice, reference and receipt time. For a cancellation notice we also record the cancellation type, requested end date and any reason you provide. We use these records to acknowledge and handle your request and document applicable consumer rights. AWS hosts these records in us-east-1 and sends the confirmation email and a separate notice to our request handling team. We record delivery, bounce and complaint status to identify failed confirmations. The form does not require an Ailoha! account and does not use product analytics. Short-lived, keyed hashes of the viewer IP address and confirmation email help limit abusive submissions; the raw IP address is not stored in the withdrawal case record. Notice records are retained as reasonably necessary to handle the request, resolve disputes and satisfy applicable recordkeeping requirements.

Google API Services Disclosure

Ailoha's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

We access Google user data only after you authorize the relevant permissions and use it to provide or improve user-facing features you request. We do not use Google Workspace API data to develop, improve, or train generalized AI or machine-learning models. We do not transfer Google user data for advertising, data-brokerage, credit, or other unrelated purposes. Human access is limited to cases permitted by Google's policy, such as with your affirmative consent, for security or legal reasons, or for appropriately aggregated internal operations.

AI and Automated Processing

To provide assistant features, Ailoha may send the portions of your request and related context that are reasonably necessary to AI model and gateway providers, embedding providers, speech transcription providers, and search and content-retrieval providers. Related context may include messages, files, voice transcriptions, contacts, tasks, calendar information, or connected-service data when you ask Ailoha to use that information.

Depending on the feature and service configuration, automated processing may use services supplied by providers such as Anthropic, Google, or Amazon Web Services, as well as contracted model-gateway, transcription, search, and retrieval providers. Their processing is governed by the applicable service and data-processing terms. Ailoha uses this processing to respond to your request and operate user-facing features; we do not use your personal data, including Google Workspace API data, to train generalized AI or machine-learning models.

Data Sharing and Disclosure

The providers involved depend on the feature you use and the service configuration. The following providers support these functions:

  • Amazon Web Services (AWS): application hosting, databases, file and voice-recording storage, analytics infrastructure, and Amazon Bedrock embeddings.
  • Anthropic and Google: AI responses, extraction and related assistant processing. Some configured AI routes may also use OpenRouter as an intermediary.
  • Soniox and AssemblyAI: speech transcription using audio and associated transcription information.
  • SerpAPI, Tavily and Exa: search, content retrieval and people-related research. Apify and Jev support relevant profile retrieval and identity checks.
  • Google and Apple: sign-in and authentication. Google also processes the connected Gmail, Calendar and Contacts operations that you authorize. With your permission, our homepage and Android download page also use Google Analytics for page visits, traffic sources and download clicks. Google Analytics is disabled until you allow analytics.
  • PostHog: feature flags, experiments and product-usage analytics. With your permission, our homepage and Android download page also use PostHog for page visits and download clicks, including the app version, traffic source, referral website domain, invitation code when supplied, and browser/device information. These website fields are also shared with Google Analytics only after you allow analytics. Website analytics excludes form contents and raw URL query strings and does not record your screen. You can decline or withdraw permission through Analytics preferences on those pages, which also controls Google Analytics. Sentry: app crash and performance diagnostics.
  • Apple and Stripe: App Store and website payment processing respectively, as described above.
  • Cloudflare and Framer: hosting and delivery of different parts of our website at ailoha.ai. Cloudflare hosts our code-owned pages, including Support, legal pages and the withdrawal form, and processes network request metadata to deliver them. Withdrawal notices are submitted directly to our AWS intake service. Framer continues to host the remaining legacy website pages.

We may disclose information in the following circumstances:

  • At your direction. When you share contact cards, tasks, messages, files, or calendar invitations, we disclose the selected information to the people or services you choose. Anyone who has a share link may be able to access its content until the link expires or is disabled, and a recipient may copy or forward information after receiving it.
  • Service providers and processors. We disclose information as reasonably necessary to providers that support cloud hosting, databases, storage, caching, authentication, connected-service integrations, AI processing, embeddings, speech transcription, search and retrieval, email or calendar delivery, crash reporting, diagnostics, security, and support. These providers process information for us under their applicable service terms and safeguards.
  • Legal and safety reasons. We may disclose information when reasonably necessary to comply with law or legal process, protect users or the public, investigate fraud or abuse, or protect the rights, safety, and security of Ailoha and the Services.
  • Business transfers. Information may be disclosed in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law. Google user data will be transferred in such a transaction only with the explicit prior consent required by the Google API Services User Data Policy.

We do not sell, rent, or trade your personal information or Google user data. We do not disclose it to advertising platforms, data brokers, or information resellers, and we do not use it for personalized advertising or credit decisions.

Data Retention and Deletion

We retain information for as long as reasonably necessary to provide the Services, maintain security and reliability, meet legal obligations, and resolve disputes. Retention varies by data type and feature. For example, diagnostic logs and public share links may have feature-specific expiration periods. Cached copies and backups may remain for a limited period after information is deleted from active systems.

If you delete your account, Ailoha disables the account and deletes or marks associated product data as deleted from active use. We may retain limited records where reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or backup integrity. Information that you directed us to send to another person, or that a recipient copied, may remain with that recipient.

Uploaded voice recordings in our AWS voice storage are configured to expire from active storage after seven days. Previous versions are configured to expire seven days after they cease to be the current copy, such as when a recording is replaced or the active copy expires. AWS performs lifecycle deletion asynchronously, so a versioned cloud copy may remain beyond the first seven-day period. These storage settings are separate from retention of saved transcripts, notes, other account content, local copies on your device, and processing by transcription providers.

When Soniox is selected for speech transcription, its published API policy states that live audio and transcripts are processed transiently and that submitted content is not used to train or improve models. Recorded-audio transcription uses its Async API, which stores audio and transcripts during processing. We request deletion when a completed or failed job result is retrieved. Interrupted processing or unsuccessful deletion can leave data stored until Soniox's automatic deletion, which its current documentation specifies as 30 days for Async API audio and transcriptions. Content-free operational metadata follows separate provider retention rules.

Our PostHog project is configured to retain analytics events for one year. PostHog cleans up expired events in monthly batches, so an event may remain for approximately one additional month. This setting applies to events, not to person profiles, session recordings or all other analytics data.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. No storage or transmission system can be guaranteed to be completely secure.

Your Choices and Rights

  • You can revoke Ailoha's Google access at any time through yourGoogle Account connections.
  • You can choose whether to connect third-party services and whether to create or send shared content.
  • You can delete your Ailoha account in the app or request account and associated-data deletion by contacting us.
  • Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of certain personal information. Contact us to make a request. We may need to verify your identity.

Additional Rights in the EEA and United Kingdom

Subject to applicable conditions and exceptions, you may request access, correction, erasure, restriction of processing or data portability, and object to processing based on legitimate interests. Where processing relies on your consent, you may withdraw that consent without affecting the lawfulness of processing before withdrawal. You may also lodge a complaint with the data-protection supervisory authority where you live, work or consider that a violation occurred. Contactadmin@ailoha.ai to exercise these rights.

International Processing

Our primary application hosting, application databases, uploaded files, cloud voice-recording copies and analytics storage use AWS in the US East (Northern Virginia) Region, us-east-1. Our other service providers process information on their own infrastructure. Depending on the feature, information may be processed in the United States or other countries outside the European Economic Area or United Kingdom.

For customer data processed by AWS, theAWS Service Terms incorporate theAWS Data Processing Addendumand, where their conditions apply, the European Commission's Standard Contractual Clauses. Processing by other providers is subject to the applicable provider arrangements and law. Contact admin@ailoha.ai for information about relevant international processing and transfer safeguards.

Changes to This Policy

We may update this Privacy Policy as the Services evolve. We will post the updated version and revise the date above. If a material change affects how we use Google user data or other personal information, we will provide additional notice and obtain consent before the new use where required.

Contact Us

Ailoha Inc
8 The Grn Ste A
Dover, DE 19901
United States

The Ailoha Inc team handles privacy requests. For questions, privacy requests or account-deletion requests, contact admin@ailoha.ai.