Privacy Policy

1. Who we are

Amiva is an AI personal assistant that helps you manage reminders, calendars, tasks and personal notes through WhatsApp and a web dashboard. This policy explains what data we collect, why, how it is protected, and the controls you have over it.

This policy applies to the Amiva WhatsApp assistant, the web application, and any Amiva mobile applications.

2. Data we collect

Account data: your name, email address, phone number, timezone and preferences, collected when you create an account.

Content you give Amiva: messages you send to the assistant, reminders, tasks, lists, and information you explicitly ask Amiva to remember (memories). Voice notes are transcribed to text to fulfil your request.

Connected provider data: if you connect Google Calendar, we access only the data covered by the permissions you grant, and only to deliver the features you use. You can disconnect a provider at any time, which immediately revokes our access.

Usage and device data: technical logs (with personal content masked) used for security, reliability and support.

3. How we use your data

We process your data solely to provide Amiva's features: interpreting your requests, executing the actions you approve, delivering notifications on the channels you choose, and retrieving information you ask for.

We do not sell your personal data. We do not use your content, including your calendar and memories, to train AI models.

Consequential actions (cancelling meetings, deleting data, sharing information) always require your explicit approval before execution, and every such action is recorded in an activity log you can review.

4. Google API Services: Limited Use disclosure

Amiva's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Specifically: Google user data is used only to provide user-facing features you request; it is not transferred to third parties except as necessary to provide those features, to comply with law, or as part of a merger or acquisition with prior notice; it is not used for advertising; and humans do not read it except with your explicit consent, for security purposes, to comply with law, or when the data is aggregated and anonymised.

Google user data — whether raw, aggregated, anonymised or derived — is never used to create, train or improve any machine-learning or artificial-intelligence models, whether ours or anyone else's. When fulfilling a request involves an AI service provider, the relevant data is processed transiently through that provider's API solely to produce the response or action you asked for, under terms that prohibit the provider from using it to train their models.

5. WhatsApp processing

Conversations with Amiva on WhatsApp are delivered through the WhatsApp Business Platform operated by Meta. Message delivery metadata is processed by Meta under its own terms. The content of your conversation with Amiva is processed by us solely to provide the service.

6. Storage and security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Your data is hosted with our infrastructure providers in the European Union (Amsterdam). Provider access tokens are stored in an encrypted vault. Access to production systems is restricted, logged and audited.

Personal content and identifiers are masked in operational logs.

7. Retention and deletion

Your data is retained while your account is active. You can edit or permanently delete individual memories, reminders, tasks and lists at any time from the dashboard.

You can delete your entire account from the privacy centre. Deletion deactivates your account immediately, revokes all connected provider tokens, and permanently removes your data from active systems within 14 days and from backups according to our backup rotation policy.

8. Your rights

You may access, correct, export and delete your personal data at any time through the dashboard's privacy centre, or by contacting us. We honour applicable rights under the Nigeria Data Protection Act (NDPA), the Kenya Data Protection Act 2019, South Africa's POPIA, and other applicable data protection laws.

9. Service providers

We use a small number of infrastructure providers (cloud hosting, AI inference, speech-to-text, email delivery, payments) as processors, bound by data processing agreements that prohibit them from using your data for their own purposes, including training their models. A current list is available on request.

10. Children

Amiva is not directed at children under 16, and we do not knowingly collect their data.

11. Changes to this policy

We will notify you of material changes through the service before they take effect. The effective date above always reflects the current version.

12. Contact

For privacy questions or data requests, contact support@tryamiva.com.