Privacy Policy
Version 2026-10-08. This policy explains what Iris collects, why, where it goes, how long we keep it, and what you can do about it. We wrote it in plain words on purpose. If anything is unclear, write to support@irisforu.com and a person will answer.
"Iris", "we" and "us" mean the team that makes and runs Iris, based in India. "You" means the person using Iris.
The short version #
- We collect only what Iris needs to help you. Each permission Iris asks for is explained on screen, with the reason, before you decide.
- Your screen is read on your computer. The raw text of your screen is never saved and never sent to us.
- We do not save your microphone audio. It is turned into text as it happens, and only speech meant for Iris is acted on.
- Iris remembers what you tell her, and you control it. You can see, delete, or switch off her memory at any time.
- We never sell your data, and we do not use it to train AI models. There are no ad or analytics trackers in Iris.
- You can delete your account from the app at any time. That erases your data from our servers.
- You can switch any of it off. Mute the microphone, stop Iris taking context from your screen, or turn off each permission, whenever you like.
1. What we collect, and why #
| What | Why we need it | Where it is kept |
|---|---|---|
| Account details: your email, name if you give it, your plan. You sign in with a code sent to your email (older accounts may still have a password, stored only as a salted hash) | To sign you in and keep your Iris the same on all your devices | Our servers in Mumbai, India |
| What you say or type to Iris, and her replies | So she can answer you, and so your chat history shows on your phone and computer | Our servers, in your chat history |
| Microphone audio (only while Iris is on and not muted) | To hear when you talk to her. Audio is turned into text as it happens | Not saved. Passed through our server to the speech service and discarded |
| Room speech not meant for Iris | So a request makes sense in context (for example, which "trip" you meant) | Held in memory on your computer for a few minutes only. Not saved |
| What is on your screen (only on your computer, and only with the Screen Recording permission) | So she understands what you are doing, for example spotting an error you are stuck on | Read on your computer. The raw text is never saved and never sent to us. Only a short note (like "an error is showing") plus the app and page titles go to the AI |
| Today's timeline: the apps and page titles you used today | So she can answer "what was I doing earlier?" | On your computer only. Cleared overnight |
| Memory: facts you tell her, or that she learns from talking with you | So she remembers your preferences and doesn't ask twice | Our servers, with your account, until you delete them |
| Voice notes, photos and documents you send her | To do what you asked with them | Our servers, in your chat, until you delete them |
| Device and permission settings: which permissions you gave Iris on each device, and your consent choices | So Iris doesn't try what she isn't allowed to, and so we can show what you agreed to | Your device and our servers |
| Diagnostic logs and crash reports | To find and fix bugs. During the early period these can include the words Iris heard and her replies | Our servers, tied to your account. On your computer, older log files are overwritten as new ones are written |
| Connected services you choose to link (for example Google Drive) | Only to do what you ask with that service | Access tokens on our servers, encrypted. Removed when you disconnect |
Location: we never use GPS. For weather and time, Iris works out an approximate location (about city level, roughly 1 km) from your internet address, using a lookup service. We do not collect your contacts list or your browsing history, and there are no advertising or analytics trackers in Iris.
2. Who else processes your data #
Iris uses a few trusted services to work. They process what we send them only to provide their service to us, and all of it travels encrypted.
| Service | What it receives | Why |
|---|---|---|
| Anthropic (AI model) | What you say to Iris, short notes about what you are doing, relevant memories | To work out her answer |
| Deepgram (speech to text) | Microphone audio, as it happens | To turn speech into text |
| ElevenLabs (voice) | Iris's replies, as text | So she can speak |
| Amazon Web Services (hosting in Mumbai, and email) | Everything we store; sign-in emails | To run our servers and send sign-in codes |
| Resend (email) | Your email address and the sign-in code | To deliver sign-in emails |
| Apple, Google (notifications) | A device token | To send you notifications |
| geojs.io, ip-api.com (location lookup) | Your internet address | To work out an approximate location for weather and time |
| Open-Meteo (weather) | An approximate location | To get the weather |
We never sell your data. We share it with others only if the law requires it, for example a valid court order, and we will tell you if we lawfully can.
3. AI training #
We do not use your conversations, memories, screen or voice to train AI models, and we do not opt in to any provider's training or model-improvement program. Anthropic, our AI model provider, does not train on data sent through its commercial service. Deepgram and ElevenLabs process what we send them under their own privacy policies, which may allow them to keep it for a limited time.
4. How long we keep things #
| What | How long |
|---|---|
| Raw screen text | Never saved. Held in memory only while Iris runs |
| Microphone audio | Not saved |
| Today's timeline (on your computer) | Cleared overnight |
| Other notes about your work (on your computer) | 1 to 30 days, depending on the kind |
| Chats, memories, voice notes, photos, documents | Until you delete them, or delete your account |
| Diagnostic logs on our servers | 7 days, plus a copy in our cloud log store for 14 days |
| Your consent records | As long as your account exists, so we can show what you agreed to |
| Everything else in your account | Until you delete your account |
When you delete your account, your account and its data are erased from our servers at once. Two copies age out separately: diagnostic logs in our cloud log store expire within 14 days, and server backups within 90 days. We never restore a deleted account from a backup.
5. Your choices and rights #
Under India's Digital Personal Data Protection Act, 2023, you have the right to:
- Know what we hold about you and how we use it. This policy, and the "What Iris remembers" view in the app, are a start. Ask us for more.
- Correct anything wrong. Edit or delete memories in the app, or write to us.
- Erase your data. Delete single items in the app, or delete your whole account in Settings > Delete account (or see Delete your account if you can't open the app).
- Withdraw consent at any time, as easily as you gave it. Each permission has its own switch. The Stop taking context button stops Iris reading your screen at once. Muting stops the microphone. Withdrawing consent stops future use; features that need it will tell you they are off.
- Nominate someone to exercise these rights for you if you cannot.
- Complain. Write to us first. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
6. Children #
Iris is for people aged 18 and over. We ask you to confirm your age when you sign up. If we learn that someone under 18 has an account, we will delete it.
7. Security #
Everything we send between your devices and our servers is encrypted. Passwords, where they still exist, are stored only as a salted hash (PBKDF2). Secrets that appear on your screen, like passwords, keys and card numbers, are blanked out on your computer before Iris even reads the text. Access to our servers is limited to the people who run Iris.
8. Changes to this policy #
When we change this policy, we update the version at the top. If a change affects what we collect or how we use it, Iris will tell you in the app and ask you to agree again before it applies.
9. Contact and grievances #
Questions, requests and complaints: support@irisforu.com. We reply within 7 days, and resolve grievances within 30 days.
See also: Terms of Use and What Iris sees, a longer plain explanation with how to turn each thing off.