Privacy policy

1. Who we are

Calynta is developed and operated by Devthinks LLC ("we", "us", "our"). Calynta is a personal AI assistant you can message or call. It remembers what you tell it, reads the photos and files you share, browses the web with you, makes pictures, and holds voice and video calls.

This policy covers the Calynta apps for iPhone and Android, the Calynta web app at app.calynta.ai, and this website, calynta.ai. It explains what we collect, how we collect it, every way we use it, and every company we share it with, including the AI services that help Calynta reply.

Questions about privacy go to hi@calynta.ai. A person reads every message.

2. What we collect and how

We collect what you give us, what the app needs to work, and a small amount of technical information. Here is all of it.

• Account details. Your name, email address, username, profile photo if you add one, and your time zone. You give these when you sign up. If you sign in with Apple or Google, we receive the identifier and the name and email that Apple or Google share with us. If you use a passkey, we keep its public key. Your password, if you set one, is stored only as a secure hash.
• What you share in conversations. Messages, photos, videos, files, voice notes, and the replies your assistant writes. You send these by using the app. If you choose fitness or wellbeing coaching, this can include health answers, exercise records and personal feelings. Budgeting help can include the income, spending and debt figures you choose to share. These features are optional.
• Safety controls. When you report content or a person, we store the reason, your explanation and a snapshot of the reported message or person for staff review. We also store who you block so their messages and invitations can be filtered for you.
• Calls. Your voice, and your camera when you turn it on, travel live during a call so the assistant can hear and see you. We keep a text transcript and a summary of each call. Calls are not recorded as audio or video.
• Memory. What your assistant learns about you from your conversations and calls, so it can pick up where you left off. It is created as you talk with the assistant.
• Browser sessions. When an assistant browses the web for you, we keep the pages it visited, the steps it took, and a screen recording of the session so you can watch it back. The browser screen says when it is recording. Sessions on email, banking, payment and brokerage sites are never recorded, and when you are asked to sign in, pay or enter private details, the page first moves to a browser that is not recorded. Sign-ins you make in the browser are saved so the assistant can return to that site for you.
• Connected apps. Only if you choose to connect an app such as your email or calendar, the assistant reads from or sends to it when your request needs it.
• Location and places. Only when you ask. If you share your location in a conversation, it is sent with that message. If you ask about a place, we look up the place and area you named. Calynta never tracks your location in the background.
• Purchases.Whether you have a subscription, which plan, and when it renews. The checkout method you choose determines who handles the payment: Apple, Google, Samsung In-App Purchase or Stripe. Calynta's servers do not receive your full card number.
• Device and diagnostic information. A push notification token so we can tell you about replies and ring you for calls, the type of device and app version, crash and error reports, and basic usage events such as a call finishing or a subscription changing. These are collected automatically by the app.
• Waitlist and contact details from this website. Your email address, and optionally your name and a note, when you join the waitlist or book a call with us.

The app asks your permission before it uses your microphone, camera, photo library, location, or notifications, and uses each one only for the feature you are using. Face ID, if you turn it on, stays on your device; we never receive your face data.

3. How we use it

• To provide Calynta. Replying to your messages, holding calls, remembering context, reading what you share, browsing and making pictures for you, and keeping your conversations available on each of your devices.
• To run your account and subscription. Signing you in, checking what your plan includes, and handling support requests.
• To notify you. Push notifications for replies and calls, and emails about your account, such as password resets.
• To keep Calynta safe and working. Preventing abuse, protecting accounts, and finding and fixing errors. Crash and error reports are set up to leave out the content of your messages.
• To improve Calynta. Counting how features are used, such as how many calls finish. These usage events carry an account number, not your name, email or messages.
• For the waitlist. Confirming your signup and telling you about access and updates. Every such email has an unsubscribe link.

We use your information because you asked us to provide the service, because you agreed (for example to the AI services in section 4 and to device permissions), because we have a legitimate interest in keeping Calynta secure and working, or because the law requires it.

What we never do.We do not sell your personal information. We do not use it for advertising, we do not show ads, and we do not track you across other companies' apps or websites. We do not use your conversations to train AI models of our own.

4. AI services we share data with

Calynta works by sending what you share to AI services run by other companies. We only do this after you agree. Before any of your data is sent, the app shows a step titled "How Calynta uses AI with your data" that explains it and links to the full list below. If you choose Not now, nothing is sent to these services; your assistants cannot reply or take calls until you agree. You can review the list, and when you agreed, at any time in the app under Profile, then AI services. If what we send or who we send it to changes in a meaningful way, the app asks you again.

Each service below receives only what it needs for its part of the work. Which chat model answers a message depends on the model chosen for the conversation. A service marked "reached through" another receives your data from that one rather than from us directly.

Services that run AI models

• OpenAI. Writes replies, understands photos and video, turns speech into text, and powers two call models (Aria and Duet).

  It receives:

  • Your messages, with the memory and file excerpts that help answer them
  • Photos and videos you send, so the assistant can see them
  • Text from files you add, to make them searchable
  • Voice notes, when Groq cannot take them
  • Your voice and camera during calls on the Aria and Duet models
  • Camera images during other calls, when you ask the assistant to look
  • Call transcripts, for the summary after a call

  Privacy policy: openai.com/policies/privacy-policy

• OpenRouter. Passes chat to the Claude, Gemini and GLM models, makes pictures, and passes browser steps to TypeSafe and Gemini. If you choose Free models, OpenRouter picks which free model answers. Browser steps go only to hosts that keep no copy.

  It receives:

  • Your messages, with the memory and file excerpts that help answer them, when one of those models replies
  • What you ask a picture to show, and any photos you give it to work from
  • The step the assistant is taking in the browser, and the names of the buttons, links and fields on the page

  Privacy policy: openrouter.ai/privacy

• Anthropic (Claude) (reached through OpenRouter). Writes chat replies when Auto picks Claude or you choose it.

  It receives:

  • Your messages, with the memory and file excerpts that help answer them

  Privacy policy: anthropic.com/legal/privacy

• Google (Gemini) (reached through OpenRouter). Answers quick questions when Auto picks Gemini or you choose it, and finds the right button or field for a browser step when TypeSafe is unsure. Browser steps run only on Google hosts that keep no copy.

  It receives:

  • Your messages, with the memory and file excerpts that help answer them
  • The step the assistant is taking in the browser, and an outline of the page: its buttons, links, fields and nearby text

  Privacy policy: policies.google.com/privacy

• Z.ai (GLM) (reached through OpenRouter). Writes chat replies when Auto picks GLM or you choose it. GLM runs only on US hosts that keep no copy (Together, Fireworks, Baseten, Crusoe, Parasail and Modal).

  It receives:

  • Your messages, with the memory and file excerpts that help answer them

  Privacy policy: docs.z.ai/legal-agreement/privacy-policy

• Microsoft (MAI Image) (reached through OpenRouter). Makes the pictures you ask for.

  It receives:

  • What you ask a picture to show, and any photos you give it to work from

  Privacy policy: privacy.microsoft.com/privacystatement

• TypeSafe (Jev) (reached through OpenRouter). Picks which button, link or field on a web page matches a step the assistant is taking in the browser for you. It keeps no copy.

  It receives:

  • The step the assistant is taking in the browser
  • The page address and title, and the names of the buttons, links and fields on it

  Privacy policy: typesafe.ai/legal/privacy-policy

• LiveKit. Carries every call, and runs the Ensemble call model (Google's open Gemma model) and the voices assistants speak with.

  It receives:

  • Your voice and camera during calls
  • What you say in a call, as text, with the memory that helps answer it

  Privacy policy: livekit.io/legal/privacy-policy

• AssemblyAI (reached through LiveKit). Turns what you say into text on Ensemble calls.

  It receives:

  • Your voice during calls on the Ensemble model

  Privacy policy: assemblyai.com/legal/privacy-policy

• Cartesia (reached through LiveKit). Speaks the assistant's replies aloud with a Cartesia voice.

  It receives:

  • The assistant's replies to you, to say them aloud

  Privacy policy: cartesia.ai/legal/privacy

• Fish Audio (reached through LiveKit). Speaks the assistant's replies aloud with a Fish Audio voice.

  It receives:

  • The assistant's replies to you, to say them aloud

  Privacy policy: fish.audio/privacy

• Groq. Turns your voice notes into text.

  It receives:

  • Voice notes you record

  Privacy policy: groq.com/privacy-policy

• Anam. Animates the assistant's face on video calls.

  It receives:

  • The assistant's spoken replies, so the face moves with them

  Privacy policy: anam.ai/privacy-policy

• Honcho (Plastic Labs). Keeps the assistant's memory of you and answers questions about it.

  It receives:

  • Your messages and call transcripts
  • Short excerpts of files you add
  • What the assistant did in the browser for you

  Privacy policy: app.honcho.dev/privacy

• Supermemory. Stores the files and sources you add so the assistant can search them, where this storage is turned on. Our hosted service now keeps this search on our own servers instead.

  It receives:

  • Files you add and their text
  • Notion, Google Drive or OneDrive content, only if you connect it
  • What the assistant searches for in them

  Privacy policy: supermemory.ai/privacy

Services that help the assistant act for you

These are not AI services, but they receive your data so an assistant can do what you asked.

• Browserbase. Runs the web browser assistants use to search, read pages and do things on sites.

  It receives:

  • What the assistant searches for and the pages it opens
  • Anything you type when you take over the browser

  Privacy policy: browserbase.com/privacy-policy

• Composio. Connects the apps you choose to link, such as email or calendar.

  It receives:

  • What the assistant reads from or sends to an app you connected, only after you connect it

  Privacy policy: composio.dev/privacy

• Google Places. Finds places, addresses and opening hours.

  It receives:

  • The place you asked about and the area you named

  Privacy policy: policies.google.com/privacy

• OpenStreetMap. Finds places when Google Places is not available.

  It receives:

  • The place you asked about and the area you named

  Privacy policy: osmfoundation.org/wiki/Privacy_Policy

• E2B. Runs code in a private sandbox during longer tasks.

  It receives:

  • Code and data the assistant works with for your task

  Privacy policy: e2b.dev/privacy

How these services must protect your data

We only use AI services and other providers whose agreements with us, together with their API and business terms, give your data the same or equal protection as this policy. Under those terms each provider must:

• use your data only to provide its service to Calynta, and not for its own purposes;
• keep it secure and confidential;
• not sell it or use it for advertising;
• not use it to train its models. The business API terms of the major AI providers we use do not allow them to train on data sent through their APIs, and we have not opted in to any such use. For browser steps and GLM replies we go further and choose only hosts that keep no copy at all.

One exception you control: if you pick Free models as a chat model, OpenRouter chooses which free model answers, and some free model hosts keep prompts under their own terms. The paid models are the default; avoid Free models for anything private.

5. Other companies that help us run Calynta

These providers do not run AI on your conversations. They host, deliver, or support the service, under the same protections described above.

• Hosting and storage.Calynta's servers and database run on servers we operate in the United States (Virginia). Photos, files and other uploads are stored with Cloudflare R2 cloud storage.
• Payments.Apple In-App Purchase, Google Play Billing and Samsung In-App Purchase handle purchases when you choose that store's payment method. If card checkout is offered in the Galaxy app or on the web, Stripe processes the payment. Stripe's payment components send card details directly to Stripe; Calynta's servers do not receive your full card number. RevenueCat keeps track of your subscription status for us across these payment methods; it receives your account number and purchase records, not your conversations.
• Sign-in. Sign in with Apple and Google Sign-In, if you choose them.
• Notifications.Apple Push Notification service (including PushKit for incoming calls) on iPhone and Firebase Cloud Messaging on Android receive your device's push token and the notification itself.
• Error reporting and usage counts. Sentry receives crash and error reports, and PostHog receives usage events. Both are set up to leave out the content of your messages, and neither is used for advertising.
• Email. An email delivery provider sends account emails such as password resets. Resend stores waitlist signups from this website and sends waitlist emails under its privacy policy.
• Scheduling. If you book a call with us on this website, Cal.com handles the booking under its own privacy policy. See our Cookie policy for the cookies it may set.

People you choose to share with.If you invite someone into a conversation, group or call, they see what is shared there. What you say as a guest in someone else's conversation becomes part of that conversation.

When the law requires it.We may disclose information if we must by law, or to protect someone's safety. If Calynta is ever sold or merged, this policy would continue to apply to your information, and we would tell you first.

6. How long we keep it and how to delete it

We keep your information while you have an account, so your assistant can remember and you can return to past conversations.

Deleting your account. In the app, go to Profile, then Privacy, then Delete account. After you confirm, your account and its owned conversations, calls and transcripts, files, memory, connection records, push tokens and local subscription state are removed from our database. Supported provider cleanup is queued and retried, and we aim to complete it within 30 days. Data held by retired services may need manual cleanup; contact us for help. Copies in our backups are removed as those backups expire.

A few things we want you to know about deletion:

• Deleting your account does not cancel a subscription. Cancel it where you bought it: in the App Store or Google Play, or through Galaxy Store → Menu → Subscriptions for Samsung In-App Purchase. If you subscribed through Stripe, open Profile, then Manage in Calynta to manage or cancel it, or contact us for help.
• Sign-ins and recordings saved by the shared browser are not yet removed from Browserbase automatically. Write to us and we will have them deleted.
• What you said in someone else's conversation stays in that conversation, because it is part of their history.
• Purchase records may remain with RevenueCat, Apple, Google, Samsung (for Galaxy Store purchases) or Stripe. We may keep a limited record where the law requires it, such as for tax and payment records. Safety reports made by other people and their evidence may remain so we can investigate abuse. Contact us to request review or removal.

If you cannot use the app, email hi@calynta.ai from the address on your account and we will delete it for you within 30 days. Waitlist details are deleted on request in the same way.

7. Your rights and choices

• See and correct. You can see and edit your profile in the app, and ask us for a copy of the information we hold about you.
• Delete. Delete your account in the app at any time, as described above.
• Withdraw your agreement to AI services. Write to us and we will stop sending your data to them. Because your assistants depend on these services, they will stop replying and taking calls until you agree again. Deleting your account also ends all sharing.
• Device permissions.Turn the microphone, camera, photos, location and notifications on or off at any time in your device's Settings app.
• Emails. Unsubscribe from waitlist and update emails with the link in any of them.
• Object or complain. Depending on where you live, you may have the right to object to or restrict some uses, to move your data, and to complain to your data protection authority.

To use any of these rights, email hi@calynta.ai. We reply within 30 days and never treat you differently for asking.

8. Children

Calynta is for adults aged 18 and over, as stated in our terms of service. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

9. Security

Your data travels over encrypted connections. Access to it is limited to the people and services that need it to run Calynta. Passwords are stored only as secure hashes. No system is perfectly secure, so if something goes wrong that affects your information, we will tell you and the authorities as the law requires.

10. Where your data is processed

Calynta is run from the United States, and your information is stored and processed there. Some of the services in sections 4 and 5 may process it in other countries. Wherever it goes, it stays under the protections in this policy and the safeguards the law requires for international transfers.

11. Changes to this policy

When we change this policy, we update the date at the top. If a change matters, such as a new AI service receiving your data, the app asks for your agreement again before your data goes to it, and we tell you by email or in the app.

12. Contact us

For any question about this policy or your information, email hi@calynta.ai.