App Privacy Policy

This policy describes the data processed when you use the Agely app on your phone. The agely.care website has its own privacy policy.

1. Data controller

The personal data processed by the Agely app is processed by AGELY, 60 rue François 1er, 75008 Paris, France, registered with the RCS Paris under number 992 097 360.

Data protection contact: dpo@agely.care

2. Who uses the app

Agely brings the members of a circle together around a loved one. Nobody creates their own account: the Agely team registers each member into their circle with their email address, then the member signs in with their Google account. The app is offered from age 13 (see section 10).

3. The data processed

3.1 Your account

The email address you were registered with, your Google account's identifier and address, the first name the circle knows you by, your profile photo if you have one (your Google account's, or a photo you choose or take), your time zone and the circle you belong to.

3.2 Your voice

During a conversation, while the app is open and the microphone is on, your voice is streamed to be transcribed into text, and Agely's answers are read aloud. We keep no audio recording.

3.3 What you say and write

• The transcript of your conversations with Agely and its answers.
• The memory: the lasting facts Agely keeps from what you tell it, and a summary of your exchanges, so that it answers with what it already knows.
• Your tasks, your appointments and the places you give them, the missions and searches you hand to Agely and their results.
• The messages you exchange with the members of your circle, your reactions and whether a message was read.
• Agely's answers you report with « Signaler », with their date.

You may talk to Agely about anything, your health, your family or where you live included. That information is then part of your conversations, and the memory may keep it to help you, for instance a health constraint to bear in mind for an appointment.

3.4 Your phone

An identifier used to send notifications to your phone, your notification settings (your quiet hours included) and the app's version. The ringtone chosen for reminders stays on your phone.

The app uses no advertising, no audience measurement and no advertising identifier. It reads neither your phone's location nor your contacts.

4. Purposes and legal bases

• Providing the service: your account, the conversation with Agely, its memory, your tasks, your calendar, your discussions, missions and searches, the weather, notifications and reminders. Legal basis: the performance of the service you use (Article 6(1)(b) GDPR).
• Securing the service, understanding and fixing its errors, and reviewing reported answers. Legal basis: our legitimate interest in providing a safe and reliable service (Article 6(1)(f) GDPR).
• Improving Agely from the conversations of the loved one being supported with the assistant, with their consent given at signup. They are kept for this use until that consent is withdrawn, which is possible at any time by writing to dpo@agely.care, without affecting the use already made.

5. What other members see

The members of your circle see your first name, your photo, the messages you send them and the tasks and appointments you share with them. A private task or appointment is seen only by the people it concerns. No other member sees your conversation with Agely or your memory. The members' accounts are managed by the Agely team.

6. Our service providers

Your data is accessible to the Agely team and to the following providers, each for its own task only:

• Amazon Web Services (Paris region, France): hosting of the service and its data.
• Amazon Bedrock (European Union), which provides Anthropic's Claude models: the text of your conversations, memory, tasks and calendar is sent to it to compose Agely's answers.
• Gradium (European Union): transcription of your voice and reading the answers aloud.
• Google: signing in with your Google account, and Firebase Cloud Messaging for notifications, which do not carry the text of your messages.
• Brave Search and Linkup: when Agely searches the web, it sends them a query it writes from your request, which may contain a member's first name or part of the conversation.
• The websites a search reads receive our server's request, without your identity.
• geo.api.gouv.fr (the French state) and Open-Meteo: for the weather, the name of a town.

7. Transfers outside the European Union

Google and Brave may process data in the United States. These transfers rely on the safeguards the GDPR provides: the European Commission's adequacy decision of 10 July 2023 (Data Privacy Framework) for the companies certified under it, or standard contractual clauses.

8. Retention

• Your data is kept for as long as your account exists. When you ask Agely to forget a fact, it stops using it, but the fact stays recorded in your account until the account is deleted.
• When your account is deleted, your conversations, memory, missions, reports and profile are erased at once. Your messages stay in their recipients' discussions, and shared tasks and appointments stay with the other members they concern.
• The server's technical logs are kept for 14 days. They name the member concerned and may contain an excerpt of a conversation or a search query.
• A mission's execution history is kept for 7 days after it ends.
• We take no automatic backup. A copy made by hand may hold the data of an account deleted since, for as long as that copy is kept.

9. Deleting your account

In the app, open « Profil et réglages », then « Supprimer mon compte ». You may also ask the Agely team to delete it by writing to dpo@agely.care from the address you were registered with.

10. Members aged 13 to 17

The app is offered from age 13. It is not meant for children under 13, whom the Agely team does not register. In France, a minor may consent alone to the processing of their data online from age 15; for a member under 15, their rights may be exercised by the holder of parental authority, at the address below.

11. Security

Exchanges between the app and our servers are encrypted. The data is hosted in France and access to it is limited to the Agely team.

12. Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to object, to data portability, and to set instructions for your data after your death. To exercise them, write to dpo@agely.care.

You may also lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés, www.cnil.fr).

13. Changes

We update this policy when the app changes. The date at the top of the page shows its last update.