Privacy Policy

Who we are

Airi (爱俐, "AI with love") is a personal-assistant app made in Singapore by Humanled AI Pte Ltd. For anything in this policy, contact us at hello@humanledai.sg. This policy is written to the principles of Singapore's Personal Data Protection Act 2012 (PDPA).

What stays on your device

Almost everything. When you add a bill, a child's exam date, a parent's appointment, a document photo, a spending entry, a favourite hawker stall, or connect your calendar, that information is saved in your phone's own local storage (and, on the native app, your device's secure storage). It is not uploaded to us, and it never forms an account profile on our servers. Because it lives on your device, you control it — you can view, edit, or delete any of it in the app at any time, and clearing the app's data or uninstalling removes it.

What we do not collect

• No advertising identifiers, no ad networks, no cross-app tracking.
• No third-party analytics or marketing pixels that identify you.
• No selling, renting, or sharing of your personal data — ever. There is no business model in your data; the subscription is how Airi stays alive, which is precisely why she doesn't need to.
• No shadow profile. There is no central database of your life on our side.

One honest exception, spelled out in full below: if you sign up for an Airi event, that form does ask for your name, email and mobile, and those are stored on the separate Airi Events service so the organiser can hold your place and let you in at the door. Nothing else in Airi works that way, and browsing events collects nothing. See "Signing up for an Airi event".

The limited data that does leave your device — and why

To be genuinely useful, a few things need the network. Here is every one, honestly:

1. Your access password

If your app is protected by a password, we store it only as a one-way salted hash — a scrambled value that can't be turned back into your password — purely to check that it's you unlocking the app. We never store the password itself, and the hash tells us nothing about your life inside the app.

2. "Smart read" — reading a photo (opt-in)

Airi's private-by-default way of reading a receipt, a HealthHub letter, or an event flyer is on-device (the text is read on your phone). If you choose the optional "Smart read", the image is sent once to our reader — powered by Alibaba Qwen-VL — to understand it, then the structured result comes back. The image is not stored, logged, or cached (zero-retention). We ask before sending, and the on-device path stays available if you'd rather not. This step processes the image on servers that may be outside Singapore (see "Data leaving Singapore" below).

3. Connecting your calendar (opt-in)

If you connect Google Calendar, Airi requests a single read-only permission (calendar.readonly) — she can see your events, and cannot create, edit or delete anything in your calendar. It is used only to show your upcoming events inside Airi, so your day and your reminders sit in one place. Airi works fully without it; you can simply tell her your plans instead.

When you connect with “Sign in with Google”, the access token stays on your device and your events are fetched straight from Google to your phone — they do not pass through, and are not stored on, any Airi server. If you instead paste your calendar's secret iCal (.ics) link, that link is kept on your phone, but the calendar itself is fetched through our relay (a browser cannot read Google's iCal endpoint directly); the relay passes the request through and stores nothing — neither the link nor your events.

You can disconnect at any time in the app, which removes the token and the events from your device, and you can revoke Airi's access yourself at myaccount.google.com/permissions. Erasing Airi's data clears what is on your phone — it never deletes anything from your actual Google Calendar.

Limited Use. Airi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, do not use it for advertising, do not transfer it except as needed to provide the feature you asked for or where required by law, and do not allow humans to read it — nor is it used to train any AI model.

4. Live Singapore & travel information

To show live conditions (NEA weather & PSI, HDB carpark availability, dengue zones), maps and directions, and overseas safety alerts, Airi fetches public information from official and third-party sources (e.g. data.gov.sg, OneMap, OpenStreetMap/Nominatim, USGS, GDACS). To show what's near you, an approximate location may be used to fetch nearby results; it is used for that request and is not stored by us or tied to your identity.

5. Downloading the on-device AI

The AI model that runs on your phone is downloaded from a content-delivery network (Hugging Face / public CDNs). This is an ordinary file download — no personal data is sent to obtain it.

6. Payment

Subscriptions are billed by the app store (Apple App Store / Google Play) or a payment processor. Your card details go to them, under their terms — we never receive or store your card number. We may receive a confirmation that a subscription is active.

7. Reminders & referrals (optional)

If you turn on push reminders, your device provides a push token so a reminder can reach you. If you use a referral code, that code is a non-personal tag — it isn't linked to your personal data.

8. Feedback

If you send feedback, you do so through your own messaging app or email — you initiate and send it. Airi never sends anything for you.

9. Signing up for an Airi event

This is the one part of Airi where you do give us personal details, and we want to be completely plain about it. It happens only if you choose to sign up for an event — browsing the Events tab collects nothing.

When you sign up, the form asks for your name, email address and mobile number, plus anything the organiser has asked (dietary needs, a plus-one). Those details, any message you send the organiser, and any payment screenshot you upload are stored on Airi Events — a separate service from the app, kept apart precisely because it holds other people's details rather than your own private life.

We use them for exactly three things: to hold your place and send your ticket, to send the reminders you chose and let you and the organiser message each other, and to check you in at the door. Your mobile is used for a nudge on the day. That is the whole list — no advertising, no profiling, no sharing with anyone else, and never used to train a model.

How long we keep it: 30 days after the event, your name, email, mobile, answers and messages are permanently removed from the record, and any payment screenshot is destroyed. What remains is an anonymous line — the event, the amount, whether it was paid, whether someone turned up — with no person attached, kept for accounting. This runs automatically every day; it is not a flag or an archive, the details are genuinely gone. The full schedule is published in RETENTION.md in the Events project.

If you only follow a category to hear about future events, we hold just your email and your interests, and delete both the moment you unsubscribe — one click from any email, no login needed.

You can ask the organiser to show, correct or delete your details at any time before then.

Data leaving Singapore

The optional "Smart read" image feature is processed by Alibaba's Qwen-VL service, which may run outside Singapore. As a safeguard, the image is used only to read that one item and is not retained. If you prefer to keep everything within your device, simply use the on-device reading path (the default) and don't enable "Smart read". Other network calls listed above fetch public information and do not send your personal identity abroad.

International users

Airi is made for life in Singapore, but she's available to download worldwide — whether you're planning a move here, studying, visiting, or simply curious about Singapore, you're welcome. Wherever you are, the same thing is true: your personal data stays on your own device, and we still don't collect, track, or sell it.

If you live somewhere with its own data-protection laws — for example the EU or UK (GDPR / UK GDPR), or elsewhere — you keep the rights those laws give you, including access, correction, and deletion. Because your data lives on your device, you can already exercise most of those directly in the app, and you can contact us at hello@humanledai.sg for anything we hold. Payments and any local tax are handled by the app store for your country under its terms.

Children's information

Airi helps parents and caregivers manage children's admin (school dates, immunisations, and the like). That information is entered by the adult using the app and stays on that adult's device, under their control. Airi is intended for adults; it is not a service directed at children, and it does not knowingly collect data from a child directly.

How long we keep things (retention)

• Your in-app data: kept on your device until you delete it, clear the app's storage, or uninstall.
• Your access password hash: kept only while your access exists, then removed.
• "Smart read" images: not retained at all.
• Payment records: held by the app store / processor under their policies; we keep only the minimum needed to run your subscription and meet legal or accounting duties.
• Event sign-up details: your name, email, mobile, answers and messages are permanently removed 30 days after the event, and any payment screenshot destroyed. Only an anonymous accounting line remains, with no person attached. Published in full as the Airi Events retention schedule.
• Event follower email: kept only while you're subscribed — deleted immediately when you unsubscribe.

In line with PDPA's retention-limitation principle, we don't hold personal data once its purpose is served and there's no legal or business need to keep it.

Your rights under the PDPA

Because your data lives on your device, you already have the most direct control there is — you can see and delete it yourself in the app. In addition, you may:

• Withdraw consent for any opt-in feature simply by turning it off (Smart read, calendar connect, reminders, location).
• Access or correct anything we may hold about you on our side (in practice, that is limited to operational data such as your access hash and subscription status) by contacting us.
• Ask questions or complain — reach our data-protection contact at hello@humanledai.sg. You also have the right to contact Singapore's Personal Data Protection Commission (PDPC).

Security

Keeping your life on your own device is itself the strongest protection — there's no central pool of personal data to breach. On top of that, passwords are stored only as salted hashes, network connections use HTTPS, and opt-in processing is zero-retention. No method is ever perfectly secure, so please also protect your device with a passcode and keep it updated.

Third-party services we rely on

Where a feature needs them, these providers have their own privacy terms: Alibaba Cloud (Qwen-VL) for opt-in image reading; Google for optional calendar connect and for Play billing; Apple for App Store billing; data.gov.sg / OneMap and other public data sources for live Singapore and travel information; and public CDNs for the on-device AI model.

Google ML Kit — on-device text recognition. When you snap a photo for Airi to read, the reading itself happens on your phone and the image never leaves it. The ML Kit component that Google ships inside the app does, however, report a small amount of technical data about itself back to Google: a device identifier, which of its features ran, and performance and crash diagnostics. It is not tied to your name and we never see it — but it is real, so we declare it on both app stores rather than claim we collect nothing. It is not used for advertising, and you can read Google's terms in their privacy policy.

Changes to this policy

If we change how any of this works, we'll update this page and its effective date, and — for anything significant — tell you in the app. Continuing to use Airi after a change means you accept the updated policy.

Contact

Questions, requests, or anything at all: hello@humanledai.sg. We're a Singapore company and we answer as people, not tickets.