Privacy Policy

Effective date: November 2026

Last updated: November 3, 2026

This is an English translation. If the Spanish and English versions conflict, the Spanish version prevails.

1. Who we are

HeyAmadeus (the "Service") is a Spanish-first personal artificial intelligence (AI) assistant. It runs as a web app at https://app.heyamadeus.tech and has an approval app at https://approve.heyamadeus.tech (the "Approval App").

The Service is operated by Angel De Leon, as an individual, in Mission, Texas, United States ("we" or "us"). If you have questions about this policy, email us at hello@heyamadeus.tech.

The Service is currently in private beta: access is by invitation only and limited to a small number of people.

2. What this policy covers

This policy explains what information we collect when you use the Service (the web app, the Approval App, and notifications), how we use it, who we share it with, how we protect it, how long we keep it, and what choices you have.

3. Information we collect

We collect only the information needed for the assistant to work:

• Account data: your name, your email address, and your time zone.
• Sign-in credentials (passkeys): we sign you in with passkeys (WebAuthn). We store only your passkey's public credential and technical details about it (for example, its name and when it was last used). Your fingerprint, your face (Face ID), or your device PIN never leave your device, and we have no access to them.
• Device sessions: when you sign in or link a device, we store a session so you don't have to sign in every time.
• Conversations and tasks: the messages you type in the chat, the assistant's replies, the tasks it plans or performs for you, and the steps of each task.
• Memory (in layers): things you ask the assistant to remember, or that the assistant saves to serve you better, organized in layers: your profile (for example, your name, preferences, and how you like to work with the assistant), individual memories, projects with the topics that build up over time, a journal with an automatic summary of what you talked about each day, and a readable history of your conversations. To search by meaning, we also store a numerical representation ("embedding") of each item. When the assistant saves something about you, it tells you ("I saved this about you") and you can ask it not to keep it. You can see, edit, search, and delete everything in the Memoria tab ("What HeyAmadeus knows about me").
• Sensitive information in your memory: if you mention health, family, finances, sexuality, religion, politics, legal matters, or credentials, we automatically mark it "never share". We use it only to serve you, and it is never shared: not with other people and not with helper assistants.
• Reminders and follow-ups: reminders or follow-ups you create, or that the assistant schedules at your request (up to 30 days ahead).
• Routines and background tasks: the routines you schedule (name, schedule, time zone, instructions, and options), the tasks you leave working in the background, and a record of each run: when it started and ended, its status, its result, and, if it was skipped, postponed, or stopped, the reason. We also keep follow-up reminders for tasks that are still open.
• Usage counters: so that one person's background work does not affect others, we count how many runs each account makes, how much AI processing each task and each day uses, and how many times a task is split among helper assistants. These are numbers only, without the content of your messages, and they delete themselves within 3 days at most.
• Approvals and action log: the actions the assistant requested, whether you approved or rejected them, their result, and any errors that occurred.
• Push notification subscription: the technical data your browser generates to receive notifications (Web Push), such as the notification service address and its keys.
• Google Calendar data: if you connect your Google account, we store the access permission Google gives us (a refresh token) and the email of the connected account, and we read your calendar events when needed to handle what you ask (for example, "what do I have tomorrow?" or "create an appointment on Thursday"). In addition, if Make.com sync is active (see section 7), we periodically receive a read-only copy of your upcoming events.
• Gmail data (read-only): if you connect Gmail, we use the same Google permission and read your email only when you ask the assistant (for example, "which important emails do I have?" or "read the email from my bank"): the sender, subject, date, a snippet and, if it opens an email, its text. Attachments are seen by name only; they are never downloaded. We do not copy your mailbox or read it in the background.
• Web searches and web tasks: when you ask the assistant to search the internet or check a web page, we store the search text, the addresses visited, and what the assistant found, as part of the task.
• Technical data: like any web server, our systems may log technical data such as IP address, browser type, date and time, and pages requested, to run the Service, limit abuse, and fix errors.

We do not collect payment data, because the Service is free during the beta.

4. How we use your information

We use your information to:

• Give you access to your account and keep it secure.
• Reply to your messages, plan tasks, run web searches, check web pages for you, remember what you ask us to, and create reminders.
• Read, create, edit, or delete events in your Google Calendar when you ask.
• Search, read, and summarize your Gmail messages when you ask. It is read-only: the Service cannot send, draft, delete, archive, or label email.
• Run the routines you schedule at the time you choose; move forward the tasks you leave in the background; follow up on them until they are closed; and, when it helps, split parts of a task among internal helper assistants (section 5).
• Ask for your approval before any action that changes something (for example, creating or deleting an event) and send you related push notifications.
• Show you your history in the Qué hizo (What it did) tab, where you can see your tasks, approvals, actions, and errors. Sensitive values are hidden in that tab.
• Detect and fix errors, prevent abuse, and protect the security of the Service.
• Comply with legal obligations.

We do not sell your information. We do not show ads. We do not use your information for advertising.

5. How approvals work, including background work

Any action that changes something on your behalf (for example, creating, editing, or deleting a calendar event) requires your explicit approval in the Approval App, confirmed with your passkey or Face ID. If you do not approve, the action is not performed. We keep a record of each approval so you can review it and to protect your account.

Today the Service cannot send email. If we ever allow it, every send will also need your approval with your passkey or Face ID, showing you the exact recipients, subject, and text first.

Routines, background tasks, and helper assistants

• Only if you turn it on: autonomous work is off by default. To use it you must turn it on in the Rutinas (Routines) tab ("Allow autonomous work on my account"). You can turn it off at any time, pause, edit, or delete each routine, cancel a run in progress, or use Detener todo (Stop all), which immediately cancels everything that is running.
• Scheduled routines: only the routines you create run, at the time you choose and respecting your quiet hours. The same routine never runs more than once every 60 minutes.
• Background tasks: the assistant can keep working on a task even if you close the app. Each person has at most one run in progress at a time, and each run stops on its own if it takes longer than 2 hours (including the time it waits for your approval). If it stops, nothing is changed and we let you know in the Rutinas tab.
• Follow-up until closed: if a task is left open, the assistant can remind you about it: at most 3 reminders per task, one every 24 hours, and only if you turned on proactive reminders. These reminders only remind or ask; they never take an action on their own.
• Internal helper assistants (subagents): for longer tasks, the assistant can split parts of the work (for example, research, planning, or review) among helper assistants. They are part of the Service itself, not outside people or companies. They receive only the text of the task and what you marked in your memory for them (never sensitive information), they use the same AI providers as the rest of the Service (section 7), they cannot use tools or take actions, and what they return is treated as untrusted information. There is a maximum number of splits per task and per day.
• Outside actions always need your approval: a routine, a background task, or a helper assistant can never, on its own, send or post anything, buy, book, make a phone call, change your calendar, or take any other action outside the Service. If a task needs one of those actions, it stops and asks for your approval with your passkey or Face ID; if you do not approve, it does not happen. Today the Service does not make phone calls.
• Usage caps: to keep the Service working well for everyone, background work has per-person, per-day caps (for example, how many routines you can have, how many times they can run per day, and how much AI processing they can use). When a cap is reached, the run is postponed or skipped, without changing anything, and you can see it in the Rutinas tab.
• Never to NVIDIA: none of this work (routines, background tasks, follow-ups, or helper assistants) is sent to NVIDIA.

6. Google data (Limited Use)

If you connect Google Calendar or Gmail, the Service requests these permissions (only those for the service you connect; if you connect both, Google keeps them in a single permission):

• https://www.googleapis.com/auth/calendar.events (Google Calendar): view, create, edit, and delete events in your calendars.
• https://www.googleapis.com/auth/gmail.readonly (Gmail): view your email messages and settings, only to read them. We do not ask for permission to send, draft, delete, or change email.
• openid and email: know which Google account you connected, so we can show it to you.

We use these permissions only for the calendar and email features you see and request within the Service. We create, edit, or delete events only after you approve the action with your passkey or Face ID. With Gmail we only read: search, read one email, and summarize your inbox when you ask.

HeyAmadeus's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• Only for your calendar and email features: we use your Google Calendar and Gmail data only to provide or improve the user-facing calendar and email features in the Service.
• No unnecessary transfers: we do not transfer your Google data to third parties except as necessary to provide or improve those features (for example, to the AI providers that process your request), to comply with the law, or as part of a merger, acquisition, or sale of assets with prior notice to you.
• No advertising: we do not use or transfer your Google data to serve ads, including personalized, retargeting, or interest-based ads.
• No training of generalized AI models: we do not use your Google data to develop, improve, or train generalized AI or machine learning models.
• No human reading: no person reads your Google data, except (a) with your express consent for specific cases, (b) when necessary for security purposes, such as investigating abuse, (c) to comply with the law, or (d) when the data is aggregated and anonymized for internal operations.
• No selling: we do not sell your Google data.
• No memory from your email: the content of your email cannot make the assistant save anything to your Memoria (Memory), and the text of an email can never give the assistant orders: it is treated as untrusted information.

How much Gmail data we keep: what the assistant reads from Gmail is kept in the server's memory for at most 5 minutes (so we don't ask Google for the same thing several times) and is removed sooner if you disconnect Gmail. In the task's internal record, email content is removed when the task ends; if the task fails or is cancelled, it is removed within about 15 minutes (25 at most). While a task is still running or waiting for your approval, that content stays in its internal record until it ends. The assistant's final reply (for example, the summary it shows you) stays in your chat history like any other reply. Technical logs only note that a Gmail tool was used, never the content of your email.

Important: the AI providers that receive your request have their own terms. Our AI providers, Groq and Cloudflare Workers AI, say in their terms that they do not use that content to train AI models, and we use Groq with Zero Data Retention turned on. We no longer send your data (including events from your calendar and text from your Gmail messages) to NVIDIA. See each provider's details in section 7.

You can disconnect Google Calendar or Gmail at any time from the Conexiones (Connections) tab. When you disconnect, we revoke the permission with Google and delete the stored token. Because Google keeps a single permission for both, disconnecting one also disconnects the other (the app warns you first). You can also revoke access at https://myaccount.google.com/permissions.

7. Who we share your information with

We share information only with providers that help us operate the Service, and only as needed:

• AI model providers: to generate replies, the text of your request and the context needed to handle it (for example, messages in the task, relevant memories, events from your calendar, the text of Gmail messages the assistant read, or the text of a web page the assistant checked) is sent to one of these large language model providers, which act as our subprocessors:
  • Groq (GroqCloud, API at api.groq.com; gpt-oss-120b model), as the main provider, with Zero Data Retention turned on.
  • Cloudflare Workers AI (Cloudflare API; gpt-oss-120b model), as the fallback if Groq fails, is too slow, or reaches its usage limit.

  The numeric representations ("embeddings") we use to search your memory are created on our own server, with an open-source model: for that purpose, the text of your memories and your requests is not sent to any AI provider.

  NVIDIA is not used for your data. Until November 2026 we used NVIDIA (integrate.api.nvidia.com; Nemotron model) as the main provider and to create the embeddings, with Inception Labs (api.inceptionlabs.ai; Mercury model) and APInex (api.apinex.bond, an intermediary that provides access to Google Gemini models) as fallbacks. We no longer send them your requests, your memory, or the content of your calendar or email. What they received before remains subject to their terms, summarized below.

  We use these providers' free or trial tiers, and each one handles data under its own terms. According to what they publish (reviewed in November 2026):

  • Groq: its "Your Data in GroqCloud" page says that, by default, Groq does not retain data from inference requests; that it always collects usage metadata that does not include the content of requests or responses; and that it may only temporarily keep that content (up to 30 days) to troubleshoot failures or investigate abuse, unless the account turns on Zero Data Retention in Data Controls, in which case it does not keep it for those purposes. We use Groq with Zero Data Retention turned on. When Groq retains data, it does so in Google Cloud in the United States. Its Services Agreement (Groq Services Agreement) says that Groq may not use what is sent to it or what it generates to train or fine-tune models unless the customer explicitly permits or instructs it, and we do not.
  • Cloudflare Workers AI: its "Data usage" page (updated October 16, 2026) says that, for standard requests, Cloudflare does not retain what is sent to it or what it generates once the request has been handled, subject to limited exceptions (for example, legal obligations); that it does not use that content to train AI models, including content it must keep for legal reasons; that it does not make it available to other customers; and that it only keeps operational metadata without content (for example, timestamps, request sizes, and token counts).
  • NVIDIA (until November 2026): its API trial terms ("NVIDIA API Trial Terms of Service", version of September 19, 2025) say that, with some exceptions, NVIDIA does not store or use content at the end of each session. But they also say that NVIDIA collects, without identifying specific users, the content sent to it and the content it generates, to improve its products and services, including its AI models, and that it logs use to monitor for security, fraud, and abuse. They do not publish how long those logs are kept. This means the text we sent it until November 2026 (which may include events from your calendar, text from your email, and your memories) may be used by NVIDIA to improve its models.
  • Inception Labs (until November 2026): its Terms of Use say it may use what is sent to it to provide the service and also to train its models, unless the account turns off the "Improve the model for everyone" option. We turned that option off on our account (Settings → Data & Privacy; confirmed on November 3, 2026), so, according to its terms, what we send it from then on is not used to train its models. Its privacy policy does not set a fixed period: it says it keeps data for as long as needed to provide the service and for its business purposes.
  • APInex (until November 2026): its privacy policy (updated September 28, 2026) says it logs data about each request (model, token counts, response time, status, the start of the access key, and the time), that request and response content may be processed to fulfill requests and is not sold, that it uses other model providers to run the service, and that it keeps its records while the account is active and as long as it needs for business, security, or legal reasons. One of its guides says it does not keep request content. It does not say whether it uses content to train models, and we have not been able to confirm which end provider handles each request or that provider's terms.
  • You.com: its services agreement (Master Services Agreement, October 2026) says it does not use content to train models without prior written consent, and that it keeps it only as long as reasonably necessary to provide the service, and no longer than the period stated in its documentation. We have not found that period published. Its "zero data retention" option is only available under enterprise agreements, and we do not have it.

  These providers may change their terms. If we change providers or their terms change in an important way, we will update this section.

• You.com: when the assistant runs a web search, it sends the search text (up to 128 characters) to the You.com Search API to get results.
• Websites the assistant visits: when you ask it to check a page, our server opens it in its own browser. That website sees the visit as coming from our server, not from your device.
• Google: to connect and use your Google Calendar and, if you connect it, to read your Gmail, through Google OAuth.
• Make.com: when active, a Make.com sync reads your upcoming Google Calendar events and sends us a signed, read-only copy, as a backup to the direct connection. Make.com handles that data under its own terms.
• Oracle Cloud: hosts the app and database in the United States (Chicago region, us-chicago-1).
• Google Drive (backups): we store daily backups off the main server, in Google Drive. They are encrypted (AES-256) before they are uploaded, so Google cannot read their contents.
• Push notification services: your browser's notification service (for example, Apple's, Google's, or Mozilla's) delivers the notifications we send you.
• ImprovMX and Gmail: ImprovMX forwards the emails you send to hola@heyamadeus.tech or hello@heyamadeus.tech to our Gmail (Google) mailbox, where we read and answer them.
• get.tech / Namify: for domain registration and DNS. This provider does not receive the content of your conversations.

We may also share information if required by law, to protect the rights, safety, or property of the Service, its users, or others, or as part of a merger, acquisition, or sale of assets (with prior notice to you).

We do not sell your personal information or share it for cross-context behavioral advertising.

Shared memory and providers: your memory is private. During the beta it is shared only with HeyAmadeus's internal helper assistants (subagents) that you allow, only with what you mark for them, and only until you withdraw that permission. Your memory is not shared with other people or their accounts. Sensitive information is never shared. Layered memory (profile, projects, journal, and history) is never sent to NVIDIA: neither to generate embeddings nor as context for a reply. The same applies to routines, background tasks, and helper assistants: they use only Groq or, as a backup, Cloudflare Workers AI.

8. Where your information is stored

Your information is hosted on Oracle Cloud in the United States (Chicago region). Encrypted backups are stored in Google Drive. Some providers, such as the AI model providers, Make.com, or You.com, may process data in other locations. By using the Service, you understand that your information is processed in the United States and, where applicable, in the countries where our providers operate.

9. How we protect your information

We take reasonable measures to protect your information, including:

• Sign-in with passkeys (no passwords that can be stolen).
• Approval with passkey or Face ID for any action that changes something.
• Google tokens are stored only in HashiCorp Vault (an encrypted secrets store), never in the database or in logs.
• Push subscriptions are encrypted with HashiCorp Vault (transit encryption engine), and system secrets and keys are stored in Vault.
• What the assistant reads from the internet, your calendar, or your email is treated as untrusted information, so it cannot give the assistant orders.
• Encrypted daily backups stored off the server (in Google Drive).
• Sensitive values hidden in the Qué hizo tab.
• All traffic is encrypted over HTTPS; HTTP connections are automatically redirected to HTTPS.

No system is 100% secure. If we detect a security incident affecting your information, we will notify you as required by applicable law.

10. How long we keep your information

During the beta we do not automatically delete your conversations or history: we keep them while you have an active account, so you can look them up. The periods are:

If you delete your account, your data may remain in the backups until they are automatically deleted (up to approx. 60 days). We may keep some information longer if required by law, or to resolve disputes or investigate abuse.

11. Your choices and controls

• See your history: check the Qué hizo tab.
• See, edit, search, and delete your memory: in the Memoria tab, by layer (Profile, Projects, Journal, History, and Shared).
• Decide what is shared: every item is private by default. You can mark it "never share" or let your internal helper assistants (subagents) use it, and withdraw that permission at any time. During the beta your memory is not shared with other people, and sensitive information is never shared.
• Retention period: choose 30, 90, or 180 days, or no automatic deletion, for your history and journal.
• Forget everything: deletes all your memory (every layer) after a double confirmation that shows how many items will be deleted. Backups are deleted on their normal schedule (section 10).
• "Don't save": when the assistant tells you "I saved this about you", you can undo it right there, or turn the notice off.
• Disconnect Google Calendar or Gmail: from the Conexiones tab (disconnecting one disconnects both), or at https://myaccount.google.com/permissions.
• Push notifications: you can turn them off in the Approval App or in your browser or device settings.
• Routines and background work: in the Rutinas tab you can turn it on or off, pause, edit, or delete each routine, cancel a run, and use Detener todo (Stop all).
• Delete your account and data: email us at hello@heyamadeus.tech. We will respond within 45 days.

12. Your privacy rights (users in the United States)

Depending on the state where you live (for example, California under the CCPA/CPRA, or Texas under the TDPSA), you may have the right to:

• Know and access: ask what personal information we have about you, where it came from, what we use it for, and who we share it with, and receive a copy.
• Correct: ask us to correct inaccurate information.
• Delete: ask us to delete your personal information, subject to some legal exceptions.
• Portability: receive your information in a commonly used format.
• No sale or sharing: we do not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of.
• Limit use of sensitive information: we use sensitive information (such as sign-in credentials) only to provide the Service and keep it secure.
• Non-discrimination: we will not treat you differently for exercising your rights.

To exercise these rights, email us at hello@heyamadeus.tech. We may ask you to verify your identity (for example, from the email address linked to your account). An authorized agent may make a request on your behalf if they show they have your permission.

Categories of information (summary): identifiers (name, email, passkey public credential); communications content (messages, tasks, and memory); activity information within the Service (approvals, actions, errors, reminders); technical data (IP address, browser, notification data); and your calendar and email information when you connect them. We do not collect payment data or precise geolocation. In the past 12 months we have not sold or shared personal information for advertising.

13. Children

The Service is not directed to children under 13, and we do not knowingly collect information from children under that age. During the beta, the Service is only for people 18 years of age or older. If you believe a minor has given us information, email us at hello@heyamadeus.tech and we will delete it.

14. Cookies and storage in your browser

We use only what the Service needs to work. We do not use advertising, analytics, or third-party tracking cookies.

You can clear this data in your browser settings; if you do, you will need to sign in again.

15. Changes to this policy

We may update this policy. If we make material changes, we will notify you in the app or by email before they take effect, with at least 15 days' notice when possible. The "Last updated" date shows the current version.

This policy is available in Spanish and English. If the two versions conflict, the Spanish version prevails.

16. Contact

Angel De Leon
Mission, Texas 78572, USA
Email: hello@heyamadeus.tech