Alfred · alfredaitech.com

Privacy Policy

Last updated: August 6, 2026

Alfred (“Alfred,” “we,” “us”) is an AI chief-of-staff app operated at alfredaitech.com. This policy explains what information we collect, how we use it — including Google user data obtained through Google APIs — and the choices you have.

1. Who this applies to

People who create an Alfred account, connect Gmail or Google Calendar, use Sign in with Apple, or continue without a mailbox. The Alfred mobile app and API at alfredaitech.com are covered.

2. Information we collect

• Account identity: name and email from Google Sign-In (openid, email, profile) and/or Sign in with Apple; Alfred session tokens we issue after sign-in.
• Google Gmail data (only if you connect Gmail): message metadata (sender, subject, labels, dates), short snippets, and — while processing — full message bodies fetched from Gmail to classify mail and draft replies. We do not store raw email bodies in our database after processing.
• Google Calendar data (only if you connect Calendar): event titles, times, locations, and attendees needed to show your schedule and (with your approval) create or update events.
• App content you create: preferences, drafts, approvals, commitments Alfred extracts, SMS/forwarded items you opt in to send, and similar product data.
• Technical logs: request IDs, approximate timestamps, and error diagnostics. Logs are redacted to avoid storing OAuth tokens or other secrets.

3. How we use Google user data

We use Google user data only to provide and improve Alfred’s core features for you:

• Read Primary inbox mail to prioritize what needs attention and extract commitments and deadlines.
• Update Gmail labels (for example mark as read) so Alfred stays in sync with your mailbox.
• Create reply or outbound drafts, and send mail only after you explicitly approve in the app.
• Read calendar events for schedule context; create, update, or delete events only after you approve.

We do not sell Google user data. We do not use Google user data for advertising. We do not train generalized AI/ML models on your Google user data. Limited inference calls to our AI provider process content needed for classification and drafting; that content is not used to train those models under our configuration and provider terms.

Google user data is not transferred to third parties except as needed to operate Alfred (infrastructure hosts, our AI inference provider under contract) or when required by law. Human review of Google user data does not occur except as needed to debug a problem you report, to comply with law, or with your explicit permission.

4. Google OAuth scopes we request

• gmail.modify — read mail, manage labels, create drafts, and send mail (send is always approval-gated in Alfred).
• calendar.readonly — read upcoming events.
• calendar.events — create/update/delete events when you ask Alfred to book time (approval-gated).
• openid, email, profile — identify your Google account.

You can revoke Alfred’s access at any time in your Google Account permissions or by disconnecting Gmail / deleting your Alfred account in the app.

5. Storage and security

• Google OAuth tokens are encrypted at rest (Fernet) before storage in our database. The mobile app never holds your Google tokens — only an Alfred session token in the device secure store.
• Raw Gmail bodies are processed in memory for classification/drafting and discarded; we persist metadata and short snippets, not full bodies.
• Data is hosted on our production servers (currently EU/US cloud VPS infrastructure serving alfredaitech.com) with TLS in transit.

6. Retention and deletion

We retain account and synced metadata while your account is active. You may delete your Alfred account in the app (You → delete account or equivalent). Deletion removes user-scoped data from our systems and attempts to revoke the Google OAuth grant. You may also disconnect Google without deleting the whole account. Residual encrypted backups are rotated out on our backup retention schedule.

7. Children’s privacy

Alfred is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes

We may update this policy as the product evolves. The “Last updated” date above will change when we do. Material changes affecting Google user data will be reflected here before new uses begin.

9. Contact

Privacy questions: privacy@alfredaitech.com
General support: support@alfredaitech.com

Limited Use: Alfred’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.