HeyAmigo
EN, Language
EspañolEnglishFrançaisDeutschItalianoPortuguêsTürkçe

Privacy policy

Last updated: · Controller: {{ENTITY_NAME}}

Available in: Español English Français
On this page
  1. 1. Who is responsible
  2. 2. What data we collect
  3. 3. Why we use your data
  4. 4. Artificial intelligence and OpenAI
  5. 5. Who receives your data
  6. 6. Transfers outside Switzerland and the EEA
  7. 7. How long we keep your data
  8. 8. Your rights
  9. 9. Security
  10. 10. Minimum age
  11. 11. Delete your account
  12. 12. Changes to this policy
  13. 13. Contact

1. Who is responsible

{{ENTITY_NAME}} ({{ENTITY_COUNTRY}}, registration number {{ENTITY_REG_NO}}), with its address at {{ENTITY_ADDRESS}}, is the controller of your personal data when you use the HeyAmigo app and this website. In this policy, “we” means {{ENTITY_NAME}}. You can write to us at [email protected].

2. What data we collect

We collect the data you give us, the data created when you use the app and the data we receive from the sign-in provider you choose:

  • Account: email address, first and last name and date of birth. If you sign up with email, we also store a password, in hashed form only. If you sign in with Google or Apple, we receive the identity details they share with us, such as your email address and name. We ask for your date of birth with every sign-up method: email, Google and Apple.
  • Profile: what you tell us when you sign up and in your profile: nationality and second nationality, permit type, canton and city, arrival date or timing, whether you have started your paperwork, profession, languages you speak, family situation and composition, reason for moving, needs, age band, situation, gender, phone number, profile photo and preferred language.
  • Content: your messages to Amigo, attachments, voice notes, documents you upload and Amigo’s replies.
  • Finances: expenses and income that Amigo records for you when you mention them in the chat, including from a photo of a receipt.
  • Agenda: the events and reminders you save. If you connect Google Calendar, we also keep the access tokens that make the connection work, and the events we import from it. If you connect Google Calendar, synchronization imports your Google events into HeyAmigo and exports the titles, dates and times of events you create in HeyAmigo to Google Calendar.
  • Questions and answers: selected questions you ask Amigo and their answers are also saved, with their category and your canton, as candidates for our knowledge base (see section 4).
  • Usage logs: records of your requests to Amigo and of the AI’s replies, and technical events, which our staff can read for support and safety.
  • Subscription: your plan and purchase status, which we receive through RevenueCat. Apple or Google handles your payment details; we never see your card number.
  • Reports: if you report an AI reply, its message and conversation identifiers, the reason you choose and your optional note.
  • Friends and sharing: friend codes, requests, connections, messages, shared events and sharing permissions. People you connect with can receive your name (or email if no name is set), email, profile photo and profile details such as nationality and canton. Messages and shared events go to their recipients; agenda access depends on your sharing permission.
  • Technical data: your push notification token if you allow notifications, and the IP address and request data our infrastructure provider processes to deliver and protect the service.

3. Why we use your data

We use your data for the purposes below. Where the GDPR or the Swiss Federal Act on Data Protection applies, the legal basis is named for each purpose.

  • To provide the service you ask for: chat, agenda, places and your account. Legal basis: performance of a contract.
  • To generate AI replies. Legal basis: your consent, which you give before you first use the chat and can withdraw at any time.
  • To manage your subscription and restore purchases. Legal basis: performance of a contract.
  • To send notifications you allow, such as appointment reminders. Legal basis: your consent.
  • To improve Amigo’s answers: we save questions and answers as knowledge-base candidates, which a member of our team reviews before any reuse. Legal basis: our legitimate interests. You can object at any time by writing to [email protected].
  • To let our staff read conversations and AI logs when needed to give you support and keep the service safe. Legal basis: our legitimate interests. You can object at any time by writing to [email protected].
  • To keep the service secure, prevent abuse and review reported AI replies. Legal basis: our legitimate interests.
  • To meet our legal obligations. Legal basis: legal obligation.

4. Artificial intelligence and OpenAI

Summary. When you write to Amigo, we send OpenAI your messages, attachments and voice notes, together with your profile details and your agenda events, to produce the reply. We only do this after you agree in the app.

OpenAI is the only AI provider integrated for these features, when available. It runs the language model that writes Amigo’s replies, the speech-to-text model that transcribes your voice notes and the model that powers search. With your requests we send: your messages, attachments and voice notes; your profile details (name, date of birth, nationality, permit, canton and city, arrival date, profession, languages and family situation); and your agenda events, including events imported from Google Calendar if you connected it. {{VERIFY_OPENAI_DPA}}OpenAI acts as our processor under a data processing agreement.

According to OpenAI’s API data controls, API data is not used to train its models by default unless the customer explicitly opts in. By default, OpenAI keeps API requests and responses in abuse-monitoring logs for up to 30 days. It may keep them longer where the law requires it or where its terms for a specific feature say so, and some endpoints store data under their own rules. These periods are set by OpenAI, not by us. For the audio transcription endpoint used by voice notes, OpenAI currently lists no abuse-monitoring or application-state retention. Image inputs and other features can have specific exceptions; see the linked data controls.

We use Google Calendar data to synchronize your events with your HeyAmigo agenda and to give Amigo context when you ask it questions. We do not use it for advertising and we do not sell it. HeyAmigo’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Before you first use the chat, the app asks for your explicit permission and names OpenAI. You can withdraw it at any time in Profile, under AI data sharing. Without your permission, AI features including chat and voice transcription are unavailable. You can still use features that do not need AI.

Knowledge base and staff access. Selected questions you ask Amigo and their answers are saved as candidates for our knowledge base. A member of our team reviews them before any reuse, and approved ones may be used to answer other users, without a link to your account. Our staff can also read conversations and AI logs when needed to give support and keep the service safe.

Every Amigo reply carries the label “AI-generated”. To report a reply, tap Report next to the label or press and hold the reply, then choose a reason. Replies can be wrong; read our terms of use before you rely on them.

5. Who receives your data

We share data only with the providers below, which help us run the service. Apple and Google act under their own terms and privacy policies; the others process data on our behalf.

  • OpenAI: your messages, attachments, voice notes, profile details and agenda events (including events imported from Google Calendar), to produce AI replies and search results. Only with your consent. {{VERIFY_OPENAI_DPA}}A data processing agreement is in place.
  • Supabase: hosts our PostgreSQL database in Zurich, Switzerland. It holds your account, profile, messages and agenda. {{VERIFY_SUPABASE_DPA}}A data processing agreement is in place.
  • Cloudflare: runs our API, so all app traffic passes through it, and stores the files you upload. {{VERIFY_CLOUDFLARE_DPA}}A data processing agreement is in place.
  • RevenueCat: your app user ID and purchase history, to manage subscriptions. {{VERIFY_REVENUECAT_DPA}}A data processing agreement is in place.
  • Expo: your push token and the content of notifications, to deliver them. {{VERIFY_EXPO_DPA}}A data processing agreement is in place.
  • Resend: when account email delivery is enabled, your email address and the content of account emails (sign-up confirmation, password reset codes), to deliver them. {{VERIFY_RESEND_DPA}}A data processing agreement is in place.
  • Apple and Google: sign-in if you choose it, store purchases, Google Calendar if you connect it, and delivery of push notifications (Apple Push Notification service and Firebase Cloud Messaging), which receive your push token and the notification content through Expo. For places searches, Google Maps Platform receives your search (for Local shops, a search built from the nationality in your profile) and your city or canton, without your name or account. If you connect Google Calendar, synchronization imports your Google events into HeyAmigo and exports the titles, dates and times of events you create in HeyAmigo to Google Calendar.

We do not sell your personal data. Data sharing with other people is described in section 2. Only share content you have the right to share.

6. Transfers outside Switzerland and the EEA

Some providers process data outside Switzerland and the EEA, in particular in the United States. {{VERIFY_TRANSFER_SAFEGUARDS}}To protect your data we rely on an adequacy decision, on the Swiss-US or EU-US Data Privacy Framework where the provider is certified, or on standard contractual clauses.

7. How long we keep your data

We keep your data while your account is active. Your chats stay until you delete the conversation or your account. Deleting a conversation does not remove the usage logs of your requests, which are deleted with your account, or the knowledge-base candidates described in section 4. When you delete your account, we delete your profile, conversations, files, agenda and sign-in details. Two things are kept with their account ID removed: the questions you asked Amigo and its answers, which may stay in our knowledge base, and the AI reports you filed. Purchase records held by Apple, Google and RevenueCat follow their own policies, and OpenAI keeps API data for the periods described in section 4. Deleting your account removes your HeyAmigo agenda, but does not delete events exported to Google Calendar. You can delete those copies in Google Calendar. Removing the account link does not remove names or other personal details inside questions, answers or report notes. This text is not automatically anonymized and may still identify you or someone else. Knowledge-base candidates and AI reports have no automatic expiry in the current service. Contact [email protected] to request review or deletion of personal details in retained text.

8. Your rights

Depending on where you live, you can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to a use of your data or withdraw your consent at any time. Write to [email protected]. We reply within 30 days.

You can also complain to a data protection authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC). In the EU it is the authority of your country of residence.

9. Security

Your data travels over encrypted connections, and access to our systems is restricted. No service can be completely secure, so we cannot guarantee absolute security.

10. Minimum age

HeyAmigo is for people aged 16 or over. The app asks for your date of birth when you create an account, whether with email, Google or Apple, and refuses accounts for anyone under 16. If you believe a younger person has an account, write to [email protected] and we will delete it.

11. Delete your account

You can delete your account in the app: open Profile, choose Delete account and type the confirmation word shown on screen. The deletion is immediate and cannot be undone. It removes:

  • your profile and personal data;
  • your conversations with Amigo;
  • Files and documents linked to your account in our stored records.
  • your agenda and reminders;
  • your HeyAmigo sign-in records for Apple, Google or email; this does not delete your Apple or Google account.

Some things are kept with their account ID removed: the questions you asked Amigo and its answers, which may stay in our knowledge base, as a candidate or, once approved by our team, as reusable content, and the AI reports you filed. Data sent to OpenAI stays with OpenAI for the periods described in section 4. Purchase records held by Apple, Google and RevenueCat follow their own policies. Deleting your account removes your HeyAmigo agenda, but does not delete events exported to Google Calendar. You can delete those copies in Google Calendar. Removing the account link does not remove names or other personal details inside questions, answers or report notes. This text is not automatically anonymized and may still identify you or someone else. Knowledge-base candidates and AI reports have no automatic expiry in the current service. Contact [email protected] to request review or deletion of personal details in retained text.

If you cannot open the app, write to [email protected] from the email address of your account and we will delete it within 30 days. Deleting your account does not cancel a subscription: cancel it first in App Store or Google Play. The steps are on the Delete account page.

12. Changes to this policy

If we change this policy, we will publish the new version here with its date. If a change needs your consent, we will ask for it again.

13. Contact

For any question about your data, write to [email protected] or to {{ENTITY_NAME}}, {{ENTITY_ADDRESS}}, {{ENTITY_COUNTRY}}.