MyPal AI Companion ("MyPal," "we," "our," or "us") is built on privacy by design. This policy explains plainly what stays on your device, what leaves it, where it goes, and why.
1. The Short Version
Our Commitments
- MyPal does not store your conversations or personal information on any server.
- Your conversation history, memories, reminders, notes, saved places, and voiceprint are stored only on your device, never on our servers.
- To understand your speech, generate replies, and look up current information, MyPal sends content to three service providers, Google Cloud, OpenAI, and Tavily, described in Section 4.
- We do not sell your data, use it for advertising, or use it to profile you.
- Secure relay. To keep MyPal’s service keys safe, your messages to OpenAI and your search questions to Tavily pass through a relay that MyPal runs on Cloudflare. The relay forwards each request and does not store or log its content.
2. What Stays on Your Device
- Your voiceprint. Voice verification runs entirely on your device. Your voiceprint is never transmitted.
- Conversation history and memory. What MyPal remembers about you is stored only on your device.
- Your content. Reminders, notes, lists, timers, saved places, and preferences, including the name or alias you ask MyPal to call you.
- Silent Alert settings. Your trusted contacts' names and phone numbers, and your alert plan, stored encrypted on your device.
3. What We Do Not Collect
We do not collect your email address, phone number, or account credentials. MyPal has no accounts and no sign-in. The name or alias you ask MyPal to call you is stored on your device and included in requests to OpenAI so replies can use it. We do not use analytics, crash reporting, or advertising trackers.
4. What Leaves Your Device, and Why
To provide a voice companion, some content must be processed by service providers:
Speech Recognition (Google Cloud Speech-to-Text)
When you speak to MyPal, your audio is sent to Google Cloud to be transcribed into text. Google processes this audio to provide the service and, under its terms, does not store it.
Voice Replies (Google Cloud Text-to-Speech)
The text of MyPal's replies is sent to Google Cloud to be converted into speech.
Conversation Replies (OpenAI)
Your messages, along with relevant context from your conversation, are sent to OpenAI to generate MyPal's replies. Under OpenAI's API terms, this data is not used to train OpenAI's models. OpenAI may retain it for up to 30 days solely for abuse monitoring, after which it is deleted unless retention is required by law.
Web Search (Tavily)
When you ask about something that needs current information, such as news or weather, MyPal sends a short search query to Tavily and uses the results to answer you. The query is based on your request and may include a place name when you ask about local information. Tavily's privacy policy allows it to use search queries to improve its search results.
Secure Relay (Cloudflare)
Your messages to OpenAI and your search queries to Tavily pass through a relay that MyPal runs on Cloudflare. The relay keeps MyPal's service keys off your phone. It forwards each request and its reply, and does not store or log their content.
Location
MyPal uses your device's location only when you ask for something that needs it, or when you trigger a Silent Alert. When you ask where you are, about local weather, for directions, or to remember where you parked, MyPal finds your location using your phone's built-in location services and includes it in the request to OpenAI, and, for weather or other local information, in the search sent to Tavily. Saved places, such as where you parked, are stored only on your device. When you ask MyPal to share your location with someone, it is sent as a text message from your phone to the person you choose, not to us. Silent Alert is described in Section 5.
Calendar and Contacts
Calendar is included in the Confidant plan; Contacts is included in the Guardian Plan and Confidant. If you allow access, MyPal reads your device calendar or contacts only when you ask about them, for example "What's on my calendar today?" or "What's Mom's number?" The events or contact details you asked about are included in the request to OpenAI so MyPal can answer. MyPal does not upload your calendar or contact list, and it stores this information nowhere but your device.
These providers process your content only to deliver MyPal's features. Their handling of data is governed by their own terms and privacy policies. Anything you say to MyPal is sent to these providers, so we recommend not sharing information you would not want processed this way, such as financial account numbers or passwords.
5. Silent Alert System
If you set up the Silent Alert System, MyPal uses your device's location when an alert is triggered and each time you choose to send a location update while the alert is active. Your location is sent by SMS directly from your device, through your mobile carrier, to the trusted contacts you chose. It is not sent to us.
Because alerts are sent as text messages, copies of them remain in your device's messaging app, like any other text you send. If someone else may look at your phone, you can delete them there once you are safe. Your trusted contacts keep their own copies.
6. Subscriptions and Payments
Subscriptions are purchased through the Apple App Store or Google Play. Payments are handled entirely by Apple or Google. We never receive your payment details.
7. Backups
MyPal does not back up your data to any cloud service. Your device's own backup system (such as iCloud or Google device backup) may include app data, according to your device settings.
8. Your Controls
Within MyPal's settings, you can delete your conversation history, erase your voiceprint, reset MyPal's memory, disable memory features, and export your data. You can also turn off MyPal's access to your location, microphone, calendar, and contacts at any time in your device settings. Because your data is stored on your device, deleting the app also deletes it.
9. Security
MyPal protects your data with on-device voice verification, optional biometric and PIN access, encryption of sensitive data stored on your device, and encrypted connections (HTTPS) to service providers. You remain responsible for securing access to your device.
10. Children
MyPal is not intended for users under 13. We do not knowingly process information from children.
11. International Users
MyPal can be used worldwide. Content sent to service providers may be processed in the United States or other countries where they operate. You can exercise any privacy rights available to you where you live by contacting us.
12. Changes to This Policy
We may update this policy as MyPal evolves. We will post any changes on this page with a new effective date, and we will notify you in the app of significant changes.
13. Contact
Privacy Questions & Requests
For privacy questions, requests, or security matters:
Email: support@mypalapp.ai
Website: mypalapp.ai