Privacy Policy

1. Who we are

Trợ lý AI Nhắc việc is a Vietnamese-first personal assistant for working professionals: it turns Google Calendar and Gmail into hourly briefings, reminds you at the right time, gathers decisions, tracks delegated work and writes meeting minutes.

For any privacy question, email support@nhacviec.ai.

2. Data we collect

We only collect the data needed for the features you use:

• Google account: your name, email address and profile photo when you sign in with Google.
• Google Calendar: events (title, time, location, description, meeting link, guests) to build briefings, remind you on time and detect clashes. The assistant only creates, moves or deletes events after you tap to confirm.
• Gmail: email metadata and content (sender, subject, time, body) read with read-only access to find tasks, requests that need your decision and appointments. Permission to send email is used only when you confirm each time, for example to send minutes to meeting guests.
• Content you create: tasks, reminders, notes, conversations with the assistant and settings (briefing time, form of address, language, do-not-disturb hours).
• Photos you send in chat so the assistant can read them and turn them into tasks.
• Meeting recordings, the transcripts made from them and the minutes written by the assistant.
• Devices and notifications: device type, operating system, app version, time zone and push notification token.
• Plans and purchases: your current plan, trial period and renewal status reported by the App Store or Google Play. We never receive or store card numbers.
• Contact: the name, email, company and message you send through our contact or support forms.
• Technical logs: timestamps, error codes, latency and AI usage (tokens, audio minutes). Logs never contain the content of your email, conversations or photos.

3. How we use data

• Provide the features you ask for: hourly briefings, reminders, decisions, waiting on others, meeting minutes and photo-to-task.
• Sync your data across iPhone, Android, web and the Chrome extension on the same account.
• Send reminders and briefings at the times you choose.
• Apply plan quotas and verify Pro subscriptions.
• Keep the service secure, prevent abuse, fix problems and answer support requests.
• We do not sell data, do not use your data for advertising and do not use data received from Google to train generalized AI models.

4. AI processing

To understand what you say, summarize your calendar and email, extract tasks from photos and write minutes, the data needed for each request is sent by our servers to Anthropic (Claude models). The apps on your devices never call the AI provider directly.

Meeting audio is transcribed by a speech-recognition provider (planned: ElevenLabs); briefings may be read aloud by your device's system voice or Google Cloud text-to-speech. Data sent to these providers is used only to return results to you, not to train models.

AI-created tasks always show their source (“Original message”) and wait for you to pick them before joining your list, except small actions you have allowed the assistant to take, which can always be undone.

5. Chrome extension: asking about pages and acting for you

The Chrome extension has an “Ask about this page” side panel and an assistant that can act on the web at your request. Both work only when you ask or give a task:

• Reading pages: only when you send a question or press a button that needs the assistant. Opening the panel, switching tabs or scrolling sends nothing to our servers. Password fields, form fields and hidden text are never read.
• Images and video captions: only images you attach (capture the visible area, pick images on the page) and the existing captions of the video you're watching.
• Acting for you: the assistant only works in the tab you gave it, the tabs you choose for it (the “Tab” button) and the tabs it opens in the “Assistant” tab group. It never sees the titles or content of tabs you didn't choose and never closes or moves your tabs; history only records the domains of the tabs you let it use. Before sending, paying, deleting, posting, signing in, uploading or accepting terms it always asks you. It never types or sends passwords, card numbers or one-time codes.
• What is stored: your questions, the answers, short source quotes (up to 300 characters), thumbnails of images you attached, the task's step list and the actions you approved (logged in Activity). Full page text, page screenshots and captions are not stored.
• You can turn off page reading per domain, stop the assistant at any time (Stop button, or simply use the page to take back control), and delete conversations in Chat.
• Extension permissions: reading pages when you ask (scripting), side panel, context menu, tab groups, storage and alarms; no browsing history, cookies or downloads.

6. Storage and security

• Account data, tasks, conversations and minutes are stored in a Supabase (Postgres) database with Row Level Security: each account can only read its own data.
• Recordings, photos and attachments are kept in private storage and opened only through signed links that expire quickly.
• Google access tokens stay on our servers and are encrypted at rest; the apps on your devices never hold them.
• All connections use HTTPS (TLS); data is encrypted at rest by our infrastructure providers.
• Our providers' servers may be located outside Vietnam; we transfer data only as needed to run the service and in line with Vietnamese personal data protection law.

7. Who processes data for us

We only share data with the providers we need to run the service, for those purposes:

• Anthropic: Claude AI models (summaries, task extraction, photo reading, minutes).
• A speech-recognition provider (planned: ElevenLabs) and Google Cloud Text-to-Speech: transcribing meeting audio and reading briefings aloud.
• Supabase: database, sign-in and file storage.
• Google: sign-in, Google Calendar and Gmail under the permissions you grant.
• Apple App Store, Google Play and RevenueCat: payments and Pro subscription management.
• Expo, Apple Push Notification service and Firebase Cloud Messaging: delivering reminder notifications.
• Vercel and Cloudflare: hosting our website and secure connections to our servers.
• YouTube (privacy-enhanced mode): only when you open a tutorial video on the landing page.

8. Retention

• Account data, tasks, conversations, photos, transcripts and minutes: kept until you delete them or your account.
• Original meeting audio: deleted automatically 30 days after the minutes are completed, or as soon as you delete the recording, the meeting or your account.
• Data read from Gmail and Google Calendar: we keep only what a feature needs (for example an extracted task with its source) and delete it when you disconnect or delete your account.
• Technical logs and contact requests: kept as long as needed to run the service, keep it secure and reply to you.
• When you delete your account, data is removed from our live systems immediately and Google access is revoked; infrastructure backups expire on their regular cycle.

9. Your rights

• View and edit your profile, settings, tasks and minutes right in the app.
• Disconnect Google Calendar or Gmail in Me & settings → Connections, or revoke access at https://myaccount.google.com/permissions.
• Delete individual tasks, conversations, photos, recordings and minutes.
• Delete your account in Me & settings → Delete account: all data is permanently deleted and Google access is revoked.
• Request a copy (export) of your data, or withdraw consent to processing, by emailing support@nhacviec.ai.
• Complain to the competent personal data protection authority if you believe your rights have been violated.

10. Our commitment for Google user data

Trợ lý AI Nhắc việc's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Việc Trợ lý AI Nhắc việc sử dụng và chuyển cho bất kỳ ứng dụng nào khác thông tin nhận được từ API của Google sẽ tuân thủ Chính sách dữ liệu người dùng của Dịch vụ API Google (Google API Services User Data Policy), bao gồm các yêu cầu về Sử dụng giới hạn (Limited Use).

Specifically, for Gmail and Google Calendar data, we:

• Use it only to provide and improve the user-facing features you see in the app: briefings, reminders, decisions and minutes.
• Do not transfer it to others unless necessary to provide those features (for example an AI provider processing your request), to comply with the law, or as part of a merger or acquisition with prior notice to you.
• Do not use or transfer it to serve ads, including targeted or interest-based advertising.
• Do not allow humans to read it unless you consent for a specific case, it is needed to investigate abuse or a security incident, to comply with the law, or the data has been aggregated and anonymized for internal operations.
• Do not use it to develop, improve or train generalized AI or machine-learning models, and do not sell it.
• Read the full policy at https://developers.google.com/terms/api-services-user-data-policy.

11. Children

The service is intended for people aged 16 and over. We do not knowingly collect data from children under 16; if we find any, we will delete it.

12. Changes to this policy

When we change this policy, we update the date at the top of the page. Important changes are announced in the app before they take effect.

13. Contact

Email: support@nhacviec.ai. We reply within 1 business day.