Privacy Policy

Effective November 9, 2026

Who we are

Della ("the app") is a personal assistant operated by Dhruv ("the operator") for his own personal use. It has a single user, the operator. Questions about this policy: dhruvramu@gmail.com.

Information the app processes

• Messages and calls: text messages the owner sends to the app, the app's replies, and call status (for example, whether a wake-up call was answered and which key was pressed).
• Tasks, reminders, and notes the owner creates, including things the owner asks the app to remember.
• Google Calendar data (only after the owner connects it): the list of the owner's calendars and the events on the calendars the owner selects. The app creates, moves, or cancels events only when the owner explicitly asks.
• Gmail metadata (only if the owner connects it, read-only): sender, subject, a short snippet, and date of recent messages, used to check whether someone the owner is waiting on has replied. The app cannot send, delete, or modify email.
• Photos the owner chooses to upload for an accountability check. Location and camera metadata are removed before storage, and photos are deleted within 24 hours.
• Browser companion (optional): a check-in click and a coarse active/idle state. It never reads tabs, web pages, URLs, or browsing history.
• Operational data: timestamps, delivery status, usage counts, and security logs with phone numbers and secrets redacted.

How information is used

Only to provide the app's features to its owner: interpreting requests, sending reminders, placing requested calls, answering questions from the owner's own records, and keeping the service secure and within its usage limits. The app does not sell data, show advertising, build advertising profiles, or use data to train machine-learning models.

Google user data

The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the calendar and email features the owner requested, is not transferred to others except as necessary to provide those features (see service providers below), is not used for advertising, and is not read by humans except with the owner's consent, for security purposes, or where required by law.

Service providers

The app runs on, and sends data only as needed to:

• Cloudflare (hosting, database, storage)
• Twilio (text messages and phone calls to the owner)
• Google (Calendar, and Gmail if connected)
• OpenAI (to interpret free-form messages and, if enabled, to describe check-in photos; requests are sent with storage disabled where the API allows)
• The US National Weather Service (weather for a location the owner sets, if enabled)

These providers process data under their own terms and privacy policies.

Storage, security, and retention

Sensitive text is encrypted by the app before it is stored, and access to the dashboard requires the owner's secret. The app (and any provider it sends a request to) can read data while processing it; this is not end-to-end encryption. Message content is kept for 30 days by default, completed tasks for 90 days, uploaded photos for 24 hours, and saved memories until the owner deletes them. Google tokens are stored encrypted and deleted when the owner disconnects.

Your choices and deletion

The owner can export or erase all app data from the dashboard, delete individual memories by text ("forget that"), disconnect Google at any time from the dashboard or at myaccount.google.com/permissions, and stop all text messages by replying STOP. Copies held by service providers and existing backups are governed by those providers' policies.

Children

The app is not directed to children under 13 and has a single adult user.

Changes

Updates will be posted on this page with a new effective date.