Get the Hey Asistan app
Hey Asistan
How it works Apps MCP Contact Web App
TREN

Privacy Policy

Last updated: 18/09/2026

1. What Data We Collect and How

  • Account information: name and email from your Google or Apple account when you sign in.
  • Note text: depending on your app version, you can add notes by voice, by typing, or from the camera. Except for voice notes in the smartwatch app, only text reaches our servers:
    • Voice note (phone, tablet, computer): your speech is converted to text by your device's speech recognition; the raw audio recording never leaves your device.
    • Voice note (Huawei smartwatch app): because the watch has no on-device speech recognition, the audio recording of your note is sent over an encrypted connection to our servers and from there to OpenAI, our data processor, to be converted to text. The recording is processed only for the duration of the conversion; it is not stored on our servers and is deleted once the conversion is complete. Only the resulting text is kept. The watch app asks for your separate consent to this on first use.
    • Camera note: printed text in the photo you take is extracted on your device by an offline text-recognition library (Google ML Kit). The photo itself never leaves your device, is not sent to our servers, and is not stored; only the extracted text is sent.
    • Typed note: the text you enter is sent directly to our servers.
  • Calendar data: if you explicitly grant permission, Google Calendar access for creating/reading events. This permission is requested separately in the app and can be revoked at any time.
  • Usage data: in-app operation logs and error/crash records (Firebase Crashlytics/Analytics).
  • Marketing measurement data: to measure which advertising/marketing channel the app was installed from — device identifiers (IDFV; IDFA if you consent), IP address, device/operating-system information, and in-app events (AppsFlyer). See the Marketing Measurement and Advertising Attribution section below for details.

Camera and microphone access is activated, with your device's permission, only while you are using the corresponding note-taking method; nothing is recorded or captured in the background.

2. How We Use Your Data

We use audio recordings sent from the smartwatch app only to convert them to text. We use your note text (whether spoken, typed, or extracted from the camera) to categorize and summarize it, extract task/event suggestions, and generate your daily summary (morning brief). For this processing, your note text is sent to our servers and from there to OpenAI, our AI data processor. This only happens if you have given explicit in-app consent to this sharing; you can withdraw that consent from the app's Settings screen, after which your note text is no longer sent to OpenAI. Data may be processed on servers located outside your country.

3. Who We Share Data With

  • Google / Apple: for authentication and (if you granted permission) Google Calendar integration.
  • OpenAI: for processing your note text (summarization, categorization, task/event extraction) and for converting audio recordings sent from the smartwatch app to text. OpenAI processes the data as a data processor, does not use it to train models, and is contractually bound to provide protection equivalent to ours.
  • Firebase (Google): crash and usage analytics.
  • AppsFlyer: marketing campaign attribution, fraud prevention, and aggregated performance analytics. Limited data is shared with the relevant advertising network partners (e.g. TikTok, Meta, Google) for the purpose of reporting attribution results.

We do not sell your data for advertising purposes. For the limited sharing of data with advertising network partners as part of marketing measurement, see the Marketing Measurement and Advertising Attribution section below.

4. Retention Period

Your data is retained for as long as your account is active. When you delete your account, your notes, tasks, and categories are permanently deleted. Audio recordings sent from the smartwatch app are not stored; they are deleted immediately after conversion to text.

5. Your Rights

If you are subject to the Turkish Personal Data Protection Law (KVKK), see the KVKK Aydınlatma Metni for details. Users in other jurisdictions may contact us using the details below to request access to, correction of, or deletion of their data.

6. Data Security

Your Google OAuth tokens are stored encrypted. Our admin panel uses an authentication system fully isolated from end-user login.

7. Marketing Measurement and Advertising Attribution

We use AppsFlyer Ltd. to measure which marketing channel a user installed the app from and to evaluate the performance of our advertising campaigns. Data processed for this purpose:

  • Device identifiers (IDFV; IDFA if you consent), IP address
  • Device and operating-system information, language, carrier, network type
  • App install time and in-app events (e.g. sign-up, subscription start)

Purpose: marketing campaign attribution, fraud prevention, aggregated performance analytics.

Sharing: This data is shared with AppsFlyer and, for the purpose of reporting attribution results, with the relevant advertising network partners (e.g. TikTok, Meta, Google).

International transfer: AppsFlyer servers are located outside Türkiye (data centers in the European Union and the United States). This transfer is carried out based on your explicit consent.

Retention: Raw personal data is retained by AppsFlyer for a limited period, after which it is anonymized or deleted. See AppsFlyer's privacy policy for details.

Your controls:

  • On iOS, you can decline the App Tracking Transparency prompt to prevent IDFA sharing.
  • You can turn off marketing measurement in Settings > Privacy within the app.
  • AppsFlyer privacy policy: appsflyer.com/legal/services-privacy-policy

8. Contact

For privacy-related questions: [email protected]

© 2026 Hey Asistan · heyasistan.com Terms of Use · Privacy Policy · Account Deletion · Contact