🎙️ Arty: Voice-Powered Mobile Assistant

Privacy status: We're actively working toward a fully private, end-to-end local solution. Currently, the app uses OpenAI's API, which means user prompts and connector content are transmitted to OpenAI by design.

1. Data Collection and Use: Your credentials (API keys, OAuth tokens) never leave your device and are stored securely in iOS Keychain. User prompts and connector content are sent to OpenAI for processing. We do not store any of your data on our own servers.
2. Third-Party Services: We connect to OpenAI, Google Drive, and optional observability services. Your data is transmitted to these services to perform the requested tasks. Their handling of your data is governed by their respective privacy policies.
3. Data Storage and Security: All credentials are stored using expo-secure-store, which maps to iOS Keychain using kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly. Tokens are never written to plaintext disk. Transport security: All outbound requests use HTTPS with TLS.
4. Azure Private Endpoint: To keep all data within your cloud perimeter, Azure OpenAI Service with Private Link can be configured to ensure traffic remains within your virtual network infrastructure.
5. User Rights: You have the right to delete your data at any time. Optional recordings remain on-device. You have rights under GDPR, including the right to access and control your personal data.
6. Contact Us: If you have privacy-related questions or need stronger privacy guarantees, contact us. We're actively developing self-hosted and fully local execution options.