Privacy Policy

Ayyo is designed to help users by connecting to the tools, accounts, files, and data they choose to connect.

We do not sell your personal information.

We do not use your private agent conversations, uploaded files, health data, financial data, connected account content, voice recordings, or agent memory to target ads.

We do not use your personal conversations, files, financial data, health data, connected-account content, or voice recordings to train or improve generalized AI or machine-learning models.

We may use limited analytics and advertising tools on our public website to understand traffic, measure marketing performance, and reach potential users. We do not use advertising pixels or retargeting tools inside private logged-in areas of the app where sensitive user content is handled. Google API user data is never provided to or used by these analytics, advertising, retargeting, or marketing tools.

Ayyo is intended for users who are at least 13 years old.

Ayyo is not intended for children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it.

Ayyo is intended primarily for users in the United States. Because Ayyo is a website and web app, it may be accessible from other countries. If you use Ayyo from outside the United States, you understand that your information may be processed and stored in the United States.

We collect information in the following categories.

A. Account and profile information. When you create or use an Ayyo account, we may collect: name; email address; password or login credentials; date of birth, age, or age range; phone number, if provided; profile photo or avatar, if provided; timezone; preferences; notification settings; subscription status; account settings; and authentication method, such as email/password, Google sign-in, or Apple sign-in.

B. Technical and usage information. We may collect: IP address; device type; browser type; operating system; approximate location derived from IP address; log data; pages viewed; features used; dates and times of access; error and diagnostic information; app performance information; and security and fraud-prevention data.

C. AI conversations and agent activity. Ayyo agents may process and store: user prompts; chat messages; agent responses; task instructions; generated summaries; agent activity history; approval history; task outcomes; reminders; agent memory; user preferences; facts the user tells an agent; and facts the agent learns from user interactions. Agent memory helps Ayyo personalize the user experience. Users can view, edit, and delete agent memory.

D. Voice and audio information. Ayyo may support voice conversations with agents. When you use voice features, we may process: voice audio; speech-to-text transcripts; text-to-speech outputs; call metadata, such as date, duration, and agent used; and voice interaction history. Ayyo does not use voice calls to train AI models without your permission. We do not intend to store raw voice recordings long-term unless technically necessary. Transcripts may be stored to support chat history, agent memory, and service functionality.

E. Uploaded and generated files. Users may upload or generate files such as PDFs, images, documents, spreadsheets, presentations, CSV files, screenshots, notes, audio files, and other user-provided files. Ayyo may use uploaded files to answer questions, create outputs, summarize content, generate new files, or complete tasks requested by the user. Users can delete uploaded files from Ayyo.

F. Connected account and integration data. Ayyo may let users connect third-party accounts and services. Depending on what you choose to connect, Ayyo may process information from services such as Google, Apple, Microsoft, Slack, Plaid, 1upHealth, Oura, Strava, Google Health or Google Health Connect, SendGrid, Stripe, and other productivity, finance, health, communication, file, calendar, email, and workflow tools. The exact information Ayyo can access depends on the integration, permissions granted, and features used. You can disconnect integrations from your account settings.

G. Email, calendar, and productivity data. If you connect email, calendar, file, or productivity accounts, Ayyo may process information such as email metadata and content; calendar events; meeting details; files and folders; documents; spreadsheets; presentations; tasks; notes; and collaboration data. Ayyo does not request access to your Google or Microsoft contact lists. When you first connect an inbox, Ayyo may review about a year of existing mail to seed useful facts for your agents (for example renewals, warranties, care dates, how you write email, or a family member who is clearly named as yours); after that, ongoing access is used for new mail and the features below. Ayyo uses this data to help agents perform requested tasks, prepare summaries, draft messages, manage schedules, create files, and provide proactive assistance. Ayyo agents require user approval before sending communications, contacting third parties, submitting forms, posting or publishing content, making or canceling reservations, changing events with other attendees, deleting files, archiving email, moving email to your email provider’s trash (where it remains recoverable under that provider’s retention period, typically about 30 days, before the provider deletes it), submitting unsubscribe requests to mailing-list senders, sharing personal information, or taking other sensitive external actions.

H. Financial information. Ayyo’s money agent, LUX, may connect to financial data providers such as Plaid if you choose to connect an account. Depending on your permissions and the services used, Ayyo may process: account connection metadata; financial institution name; account balances; transactions; merchant names; spending categories; subscription or recurring-payment patterns; budget and goal information; and user-provided financial notes. Ayyo currently intends to avoid storing raw transaction, balance, merchant, or category data in the main application database unless needed for product functionality. Financial data may be fetched live, temporarily cached, summarized, and used to help LUX provide financial organization and decision support. Ayyo does not directly store bank login credentials. Ayyo does not move money. Ayyo does not provide investment, tax, legal, or professional financial advice. Ayyo may help contact merchants, prepare cancellation steps, or assist with subscription-related workflows only with user approval. Financial data is intended to be available only to LUX by default unless you choose otherwise.

I. Health, wellness, and healthcare information. Ayyo’s health agent, KNOX, may use health, wellness, and healthcare data if you choose to connect supported services such as Apple Health (via the Ayyo Health Sync shortcut), 1upHealth, Oura, Strava, Google Health, or similar providers. Depending on your permissions and the services used, Ayyo may process: health connection metadata; patient or member identifiers; demographics; conditions; medications; allergies; immunizations; lab results; vital signs; procedures; encounters; diagnostic reports; claims or Explanation of Benefits data; provider information; coverage information; activity data; sleep data; recovery data; fitness data; user-provided health goals; preventive care reminders; appointment-related information; health summaries; and KNOX memory. Ayyo currently intends to minimize storage of raw health records where possible. Health data may be fetched live, temporarily cached, summarized, and used to help KNOX provide whole-person health support, healthcare navigation, preventive-care reminders, appointment preparation, and wellness guidance. Ayyo may send relevant health data to AI model providers when needed for KNOX to answer health-related questions or provide requested assistance. Health data is intended to be available only to KNOX by default unless you choose otherwise. Ayyo is intended to be a consumer health app and not a HIPAA covered entity or business associate. However, we still treat health information as sensitive. KNOX is not a doctor and does not provide medical advice, diagnosis, or treatment. KNOX may help you understand health information, prepare questions for your clinician, track preventive care, and organize next steps, but your clinician should make medical decisions.

J. Relationship, family, and planning information. Ayyo’s people and planning agent, SOPHIE, may process information you provide about relationships, family, friends, plans, travel, conversations, birthdays, events, reminders, and shared-life logistics. SOPHIE is not therapy, crisis support, legal advice, or emergency help. SOPHIE may help prepare messages, organize plans, suggest communication approaches, and help think through disagreements, but users are responsible for their own decisions and communications.

K. Text messaging (SMS). If you opt in to Agent Texting, Ayyo collects your mobile phone number, verifies it with a one-time code, and records your consent (including the date, consent language shown, and IP address). With your consent, Ayyo agents may send you recurring automated text messages, such as daily brief headlines, budget updates, approval requests, and replies to messages you send them, typically up to about 5 messages per day. Message and data rates may apply. Message frequency varies. Consent is not a condition of purchase. You can opt out at any time by replying STOP to any message or by turning off Agent Texting in Settings, and you can reply HELP for help or contact support@ayyo.live.

We use information to:

• provide and operate Ayyo
• create and manage user accounts
• authenticate users
• personalize agent responses
• maintain agent memory
• process user instructions
• generate files and outputs
• support voice conversations
• summarize conversations, meetings, files, and connected-account content
• provide proactive agent assistance
• process subscriptions and payments
• connect to third-party integrations
• provide customer support
• send service messages
• send marketing emails where permitted
• measure public website performance
• measure ad campaign performance on public marketing pages
• detect, prevent, and address fraud, abuse, security issues, and technical problems
• comply with legal obligations
• enforce our terms and policies
• improve our Services using service-performance information and user feedback, not Google API user data

Google API user data (including Google Workspace and Google Health data). When you connect Google, Ayyo accesses only the Google data covered by the permissions shown during consent. We use that data solely to provide or improve prominent user-facing features you choose to use. Workspace features include inbox and agenda briefs, drafting and user-approved email actions, schedule-conflict checks, user-approved event scheduling, meeting support, and proactive briefs — plus, if you separately enable the optional Docs & Drive add-on, document and spreadsheet creation and Drive file organization. Google Health features include showing steps, activity, sleep, heart-rate measurements, weight, hydration, and related trends in KNOX, using those values to personalize the user's visible health dashboard, daily plan, and coaching, and — only if the user joins a Knox pack — showing the pack's race metrics to other members of that pack as described in Section 7.

Ayyo may store Google OAuth credentials and limited connected-account snapshots needed to keep those features working. Ayyo and its contracted AI and infrastructure processors may process Google API user data only as needed to deliver those features, maintain security, or comply with law. Google API user data is never sold; used for advertising, retargeting, marketing, unrelated analytics, creditworthiness, or lending; or used to develop, improve, or train generalized AI or machine-learning models. Google API user data is not used for general product improvement unrelated to the specific integration features the user selected. Human access is prohibited except with the user's affirmative consent to view specific data, where necessary for security, where required by law, or for privacy-safe aggregated internal operations permitted by Google policy.

Ayyo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Ayyo uses third-party AI, voice, speech, and image-generation providers to operate the Services. These may include OpenAI, Anthropic, Google Gemini, Meta open models served through OpenRouter, ElevenLabs, and other AI or infrastructure providers as our Services evolve.

Depending on the feature used, we may send these providers prompts, messages, transcripts, files, health information, financial information, connected-account data, or other information necessary to generate a response or complete a user-requested task.

We use business/API accounts and provider settings where available to protect user data.

Ayyo does not use your personal conversations, files, health data, financial data, connected-account content, or voice recordings to train or improve generalized AI or machine-learning models. Google API user data is used only to deliver or improve the specific user-facing Google integration features described in this Policy.

Ayyo may use cookies and similar technologies.

We use necessary cookies for login, security, payments, account management, and app functionality.

We may use analytics and advertising tools on public marketing pages, such as:

• Google Analytics
• Google Ads
• Meta Pixel, if we run Meta ads
• email marketing tools
• retargeting tools limited to public website activity
• error logging tools

These tools help us understand public website traffic, measure marketing performance, and reach potential users.

We do not use advertising pixels or retargeting scripts inside private logged-in areas of the app where users interact with agents, upload files, connect accounts, discuss health or financial information, or manage agent memory.

We do not use private agent conversations, health data, financial data, uploaded files, connected-account content, or agent memory to target ads.

Google API user data is never shared with or used by analytics, advertising, retargeting, audience-building, or marketing systems. Public-site analytics use only activity from the public marketing website, not data obtained through Google APIs.

Where required, we will provide cookie choices or other privacy controls for non-essential analytics and advertising technologies.

We may share information with:

A. Service providers. We share information with vendors who help us operate Ayyo, such as hosting providers, database providers, AI model providers, voice providers, payment processors, financial data providers, health data providers, email providers, analytics providers, security providers, and support tools. These providers may process information only as needed to provide services to Ayyo, subject to their terms and our agreements with them.

B. Connected integrations. When you connect a third-party service, Ayyo may exchange information with that service to provide the requested functionality. Your use of third-party integrations may also be governed by the privacy policies and terms of those third parties.

C. Payment processors. Payments are processed by Stripe or another payment processor. Ayyo does not directly store full credit card numbers.

D. Legal and safety reasons. We may disclose information if we believe it is necessary to comply with law, respond to legal process, protect rights, safety, and security, prevent fraud or abuse, enforce our terms, investigate security incidents, or respond to privacy or data requests.

E. Business transfers. If Ayyo is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

F. Knox packs (user-to-user sharing you turn on). If you join a Knox pack, Ayyo shows other members of that pack your first name, profile photo (if you added one), and the race metrics for that pack. Those metrics are limited to steps, workouts, sleep duration, active minutes, recovery/readiness score, and resting heart rate — whichever the pack is racing. Members can also tap a face to see that person's hourly heart-rate graph and sleep-stage graph (awake, REM, light, deep) when the tracker sent them. Some of those numbers may come from Google Health or another tracker you connected. Ayyo does not share Gmail, Google Calendar, Drive files, weight, body composition, or overnight vitals such as HRV or blood oxygen through packs.

Knox's public pack shows those race numbers and tap-in graphs to anyone else who has joined that same public pack. A private friends pack works the same way for its members.

Joining a pack is the consent for this share. Leaving the pack stops future sharing with that pack. Starting or joining a private pack is a choice; you can race Knox without joining the public pack.

Text messaging opt-in data: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except with vendors and service providers who assist us in the delivery of text messages (such as our SMS delivery provider), and only for that purpose.

Ayyo does not sell your personal information.

Ayyo does not sell health data, financial data, private chats, uploaded files, connected-account content, voice recordings, transcripts, or agent memory.

Users can:

• delete their account
• delete chats
• delete uploaded files
• view, edit, and delete agent memory
• disconnect integrations
• leave a Knox pack, which stops sharing your race numbers with that pack
• manage notification preferences
• opt out of marketing emails
• request access to personal information
• request deletion of personal information
• request correction of personal information
• request a copy of personal information, where required by law

Ayyo may not provide a fully automated self-serve data export tool at launch. Users may request a copy of their data by contacting support@ayyo.live.

Some information may be retained when required by law, for security, fraud prevention, accounting, dispute resolution, or backup purposes.

We retain information as follows unless a different period is required by law or reasonably necessary for security, fraud prevention, dispute resolution, or legal compliance:

• Account data is kept while the account is active.
• Chats, files, generated outputs, and agent memory are kept until the user deletes them or deletes their account.
• Raw voice recordings are not stored long-term unless technically necessary.
• Transcripts may be stored for chat history and memory.
• Payment records are kept as required for accounting and legal purposes.
• Deleted account data is deleted or de-identified within 30–90 days unless legally required to retain it.
• Backups may retain deleted data temporarily for security and disaster recovery.

We use administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include:

• encryption in transit
• encryption at rest where supported by infrastructure
• OAuth for connected accounts
• server-side API key storage
• access controls
• token protection
• limited admin access
• logging and monitoring
• security review of sensitive workflows
• restrictions on access to health and financial data

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Users are responsible for keeping account credentials secure.

Because Ayyo may process consumer health information, we take health privacy seriously.

If we experience a security incident involving identifiable health information, we will evaluate whether notice is required under applicable law, including consumer health privacy or health breach notification rules that may apply to non-HIPAA health apps.

Ayyo is intended primarily for users in the United States.

If you access Ayyo from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate.

Laws in those countries may differ from the laws where you live.

Depending on where you live, you may have rights regarding your personal information, including the right to:

• know whether we process your personal information
• access your personal information
• correct inaccurate personal information
• delete personal information
• obtain a copy of personal information you provided to us
• opt out of targeted advertising, sale of personal information, or certain profiling
• appeal a denied privacy request where required by law

To exercise privacy rights, contact us at support@ayyo.live. We may need to verify your identity before fulfilling certain requests.

We may send marketing emails if permitted by law.

You can unsubscribe from marketing emails using the unsubscribe link in the email or by contacting us.

Even if you opt out of marketing emails, we may still send service-related messages, such as account, security, billing, trial, subscription, or support communications.

Text messages (SMS). Agent text messages are sent only to users who explicitly opt in inside the Ayyo app by verifying their phone number and accepting the consent language shown on screen. Message frequency varies (up to about 5 messages per day). Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. You can also turn off Agent Texting at any time in Settings → Notifications.

Ayyo may link to or integrate with third-party services. We are not responsible for the privacy practices of third parties.

You should review the privacy policies and terms of any third-party services you connect to Ayyo.

We may update this Privacy Policy from time to time.

If we make material changes, we will take reasonable steps to notify users, such as posting the updated policy, updating the “Last Updated” date, or sending notice through the app or email.

Your continued use of Ayyo after an updated Privacy Policy becomes effective means you accept the updated policy.

For privacy questions or requests, contact:

Ayyo, LLC
3224 Essex Dr
Mansfield, TX 76063
support@ayyo.live