Privacy

Thijn Hendrikus Franciscus Oorbals, self-employed (autónomo), NIE Y7546853S, Avenida del Mundo 5, 238/07, 30155 Murcia (España), is responsible for your data in Iris (the “controller”). For anything about your data, write to thijnoorbals@gmail.com.

Iris is a personal voice assistant. It is invite-only: only people the administrator has invited can sign in, with their Google account. Each person's data is kept separately; nobody can see another person's conversations, memories, documents or calls.

With your permission, and only when you ask for it in a conversation:

• Google Calendar: it reads your appointments and can add, change or delete them, only after you tap on the screen that shows exactly what will happen.
• Gmail: it can search and read your email, and send an email you asked for, only after you tap Send on the screen that shows the whole email. It never changes or deletes your email.
• Google Contacts: read only, to find phone numbers.
• Google Drive: it can search and read your files when you ask (never changes or deletes them), and saves the documents it makes for you in a folder called “Iris”.

These are read when you ask. What Iris reads during a conversation (an email, an appointment, a file) becomes part of that conversation's record, which is kept for 365 days (see below). It is not copied anywhere else, unless you ask Iris to remember or save something, or to read an email attachment.

You can connect Outlook (Microsoft 365 or Outlook.com) in the + menu. It works like Google above: mail, calendar (including Teams meetings, after you tap) and contacts, only when you ask, and only your own mailbox. Your Microsoft sign-in is stored encrypted; Disconnect in the + menu deletes it.

Meeting reminders: if you connect Outlook and allow notifications, Iris looks at your Outlook calendar every few minutes for the next 4 hours, to remind you before an appointment. For an appointment at a place, it asks Google Maps once how long the drive from your home address takes, so it can tell you when to leave. Turning notifications off stops this.

When you ask, Iris can open a website (for example a booking page) in a browser on its server, to look up availability or prices. It only looks: it never signs in, books, pays or fills in your details. The answer and a picture of the page are saved in your account so you can see them.

Iris only phones someone after you tap Call on the screen. At the start of every call it says that it is an AI assistant calling for you and that the call is recorded. The call is recorded and transcribed so you can see the result. The business you call hears your name and, only if they need a way to reach you, the mobile number you gave Iris. Iris never gives out ID, bank or card numbers, passwords or codes.

The people Iris calls on your behalf are also covered by this policy: their voice and what they say are recorded and kept for 90 days.

• Your account: email address, name, mobile number, language, what you want help with, chosen voice, and your home address if you give it.
• What you ask Iris to keep: memories, notes, to-dos, reminders and contacts, and the meeting reminders it sets for you.
• Documents: files, photos, pasted texts and email attachments you asked about, with their text and a summary; documents Iris creates for you.
• Website checks you asked for: the answer and a picture of the page.
• Your conversations with Iris, spoken or typed: what you said, what it answered and what it looked up for you during the conversation (such as an email or an appointment), so it can remember earlier conversations.
• Phone calls it made for you: who, the number, the goal, the result, the transcript and the recording.
• A log of emails Iris sent for you (recipients, subject, first words), for daily limits and so you can check.
• Usage: when each conversation started, minutes and calls used this month, and daily counters, to apply your plan's limits.
• On your phone: a sign-in cookie (your Google sign-in, encrypted), today's chat with Iris and a few settings. No advertising or analytics cookies.

• To provide the assistant you signed up for (contract, GDPR art. 6.1.b).
• Your Google and Outlook data, meeting reminders from your Outlook calendar, your location for travel times (your phone asks first) and phone notifications: only with your permission, which you can withdraw at any time (consent, art. 6.1.a).
• Security, preventing abuse and applying usage limits; recording the calls made for you so you get an accurate result (legitimate interest, art. 6.1.f).

Your data is not sold, not used for advertising and not used by us to train AI models. There are no automated decisions with legal effects.

These providers do the work behind Iris, each only for its part:

• Supabase: database and file storage (European Union, Ireland).
• Vercel: hosts the app (servers in the European Union, Paris).
• ElevenLabs: voice, the conversation itself, transcripts and recordings, and the phone calls.
• Anthropic (Claude): the AI that understands and answers you, reads documents, writes summaries, searches the web and reads the websites it checks for you.
• Zadarma: connects the phone calls to the phone network.
• Google: sign-in, your calendar, email, contacts and Drive, and Google Maps for travel times and meeting reminders.
• Microsoft: your Outlook, if you connect it.
• Apple / Google push services: delivering phone notifications.

Some of these companies are in the United States. Those transfers are protected by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

For the administrator's own family accounts only, Iris can also use a WhatsApp Business number (Meta) and the family company's CRM (HubSpot). Invited users' data never goes there.

• Conversations with Iris: 365 days, then deleted automatically.
• Phone call transcripts and recordings: 90 days, then deleted automatically. The call summary (who, goal, result) stays until you delete it or your account.
• Website checks: until you delete your account.
• Everything else: until you delete it, or until you delete your account.
• Backups of the database are overwritten within 7 days; server logs are kept for a few days.

In the + menu, tap “Delete my account”. That deletes your account and everything listed above: conversations and recordings, memories, notes, to-dos, reminders, contacts, documents and files, call records, your Outlook connection and usage records, and it cancels Iris's access to your Google account. Your own email, calendar and files in Google and Outlook are not touched. Records the phone operator keeps of calls (number and duration) are kept by them as the law requires.

You can ask to see, correct, delete, restrict or move your data, and object to how it is used, by writing to thijnoorbals@gmail.com. You can correct your details yourself in the + menu (“Your details”). If you think your data is not handled properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Iris is for adults (18 or older).

Iris's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Signing out of Iris also cancels its access to your Google account. You can check or withdraw it at any time at myaccount.google.com/permissions. For Outlook, tap Disconnect in the + menu, or remove Iris at myapps.microsoft.com.

thijnoorbals@gmail.com