Privacy Policy

iReplyd ("we", "us") is a personal relationship management app available at ireplyd.com and as a mobile app. This policy explains what data we collect, why, and what control you have over it. The short version: your contacts are yours. We store them to power the product for you, we never sell personal data, and you can delete everything at any time.

Data we collect

• Account data. Your email address and password (stored as a hash), used to create and secure your account.
• Contact data you add or import. Names, email addresses, phone numbers, companies, job titles, locations, notes, and interaction history for the people you choose to manage in iReplyd. This data is stored with our database provider, Supabase, on servers located in the United States.
• Usage and diagnostics. Crash reports and error diagnostics (via Sentry) so we can find and fix bugs. These may include device and app-state information.

Integrations you connect

iReplyd only accesses third-party services that you explicitly connect from your account settings, and only to power features you use:

• Google. When you connect Google we request these scopes, and use each only as described: Gmail metadata (gmail.metadata: sender, recipients, subject and date of your messages, to record who you have been in touch with and when; message bodies are not read); Google Calendar (to show upcoming meetings with your contacts and to create events you ask for); Google Contacts read (to import your address book); and, only if you turn it on, Google Contacts write (to push edits you make in iReplyd back to Google). Mail and calendar data is fetched by our servers on a schedule and stored in your account as interaction records: who, when, subject and a short excerpt. You can disconnect Google at any time; disconnecting deletes our stored tokens and stops further access.
• Microsoft. Outlook mail metadata and Microsoft Calendar, for the same purposes as the Google integration.
• Slack. To surface conversations and send you reminders where you work.
• LinkedIn. Profile information you capture with our browser extension is saved to your own contact records. The extension runs only in your browser, with your own LinkedIn session, and sends what it reads to your iReplyd account and nowhere else.
• Location. To place contacts on the map, the city or address on a contact record is sent to a geocoding provider (Mapbox) to obtain coordinates and a time zone. Only the location text is sent, never names or other details.

You can disconnect any integration at any time from your account settings, which stops further access to that service.

iReplyd's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI processing

Some features — search, contact summaries, relationship insights, and voice-note transcription — are powered by AI. To provide them, contact text you have stored is processed by AI providers (OpenAI, Anthropic, and Google) through our servers. We send only what the feature needs, and these providers process the data to return results to you, not to build profiles of your contacts.

Two kinds of processing happen on our servers without you asking. Semantic search keeps an index of your contacts as numeric embeddings, generated by an AI provider from the text on each record and stored on our servers so that search can match meaning, not only words. Message-derived suggestions and the daily brief read the interaction records synced from your inbox to propose meetings, to-dos and people to reach out to. Nothing is created or sent on your behalf without your confirmation.

You can turn server-side AI processing off with the "Server-side AI" setting in your account (mobile: Menu, AI settings; web: Account). When it is off we stop generating embeddings and background suggestions for your account; features you invoke directly, like AI search or a summary you request, still run only when you use them. The "Learn from history" setting in the app controls whether your synced messages are used to draft suggestions at all.

Payments and email

• Payments. Subscriptions are processed by Stripe. Your card details go directly to Stripe; we never see or store them.
• Email. If you opt in to email digests, we send them via Resend. You can turn digests off in your account settings at any time.

What we do not do

• We do not sell your personal data or your contacts' data. Ever.
• We do not use your contact data for advertising.
• We do not share your data with third parties except the service providers named above, which process it on our behalf to run the product.

Security

Your data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and authenticated. No system is perfectly secure, but we treat your relationship data with the sensitivity it deserves.

Data retention and deletion

We keep your data for as long as your account is active. To delete your data, you can delete your account from account settings, or email support@ireplyd.com and we will delete it for you. Deletion removes your account data and all contact data you have stored, subject to short-lived backups that expire automatically.

Children

iReplyd is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect data from them.

Changes to this policy

If we make material changes, we will update the effective date above and notify you in the app or by email before the changes take effect.

Contact us

Questions about privacy? Email support@ireplyd.com.