Emily AI — Privacy Policy
DRAFT — FOR LEGAL REVIEW ONLY
Version: 2026-06-01
Effective date: [TBD]
Controller: Emily AI ([EMILY_DATA_CONTROLLER])
Contact: [email protected]
1. Who we are
Emily AI (“Emily,” “we,” “us”) provides an AI academic tutor and campus assistant delivered primarily through Telegram. This Privacy Policy explains how we collect, use, store, and share personal information when you use Emily.
This draft is based on Emily’s actual product architecture. Do not publish until reviewed by qualified legal counsel.
2. Who this applies to
Emily is designed for university students who are 18 years of age or older. If you are under 18, you may use Emily only with involvement of a parent or legal guardian who accepts our Terms on your behalf.
3. Information we collect
3.1 Information you provide
- Messages — text and voice conversations with Emily
- Profile information — name, campus, timezone, preferences you share
- Files — documents, photos, and audio you upload for tutoring or proofreading
- Assistant data — reminders, contacts, todos, notes, shopping lists, timetables
- Optional integrations — when you connect Google, Notion, Uber, or Spotify, we access data according to the permissions you grant
- Location — when you share your location in Telegram for directions or campus features (short-lived)
- Optional wellness features — mood logs and household information if you opt in
3.2 Information collected automatically
- Telegram user ID — to identify your account
- Usage metadata — mode, action type, approximate token usage, response timing
- Safety logs — redacted snippets and hashes when content violates academic/safety rules (retained briefly for abuse prevention)
- Terms acceptance — timestamp and policy version when you agree to our Terms
3.3 Information we do not intentionally collect
- We do not sell your personal information
- We do not use Emily for advertising profiling
4. How we use information
We use your information to:
- Provide tutoring, proofreading, and campus assistant features
- Remember facts you ask us to remember (unless privacy mode or “don’t save this” is active)
- Connect to third-party services you authorize
- Maintain safety guardrails and prevent misuse
- Improve reliability and security (aggregated or anonymized metrics)
- Comply with law and enforce our Terms
We anonymize or pseudonymize personal identifiers in prompts sent to third-party AI providers when that feature is enabled.
5. Legal bases (EEA/UK users)
Where GDPR applies, we rely on:
- Contract — to provide the service you request
- Consent — for optional memory, integrations, mood tracking, and location
- Legitimate interests — safety logging, fraud prevention, service improvement (balanced against your rights)
6. How we share information
We share information only as needed to operate Emily:
| Recipient | Purpose |
|---|---|
| Telegram | Message delivery |
| AI providers (e.g. Google, OpenAI) | Generate responses; speech-to-text and text-to-speech |
| Calendar, Gmail, Drive (if connected) | |
| Notion | Assignments and planner (if connected) |
| Mapping / weather providers | Directions and briefings |
We may disclose information if required by law or to protect rights, safety, and security.
A current subprocessor list is available at [emily-ai.net/subprocessors] (TBD).
7. Where data is stored
Emily is local-first: your tutoring data is primarily stored on servers operated by or for Emily AI (currently dedicated hardware under our control), not in a multi-tenant student database.
If you use export to Google Drive, copies are stored in your Google account.
Backups may exist on encrypted external storage for disaster recovery for a limited period.
8. Retention
| Data type | Retention |
|---|---|
| Conversations and memory | Until you delete them or delete your account data |
| Uploaded files | Short-term (typically 24 hours) unless exported |
| Live location | Minutes |
| Safety violation logs | Up to 30 days |
| Terms acceptance record | Until you delete your data |
When you use forget or export my data, see in-app instructions for what is included and any exceptions (e.g. files already in your Google Drive, backup tapes).
9. Your choices and rights
Depending on your location, you may have the right to:
- Access a copy of your data (
/exportdatain Telegram) - Delete your data (
/forget everything) - Correct inaccurate profile information (tell Emily or contact us)
- Restrict new memory collection (
/privacy on, “don’t save this”) - Withdraw consent for integrations (disconnect in
/google,/notion, etc.) - Object to certain processing (contact [email protected])
Canadian users may exercise similar rights under PIPEDA. We respond to verified requests within applicable deadlines (typically 30 days).
10. Security
We use technical and organizational measures including:
- Access controls during closed pilots; the public bot is open to any Telegram user who accepts Terms
- Encryption for sensitive household fields
- LLM anonymization before third-party inference
- Local violation logging (not shared with AI providers for training)
No system is perfectly secure. Report concerns to [email protected].
11. International transfers
If you are outside the country where our servers operate, your data may be processed in other countries (including the United States) by our subprocessors. We use appropriate safeguards where required by law.
12. Children
Emily is not directed at children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent.
13. Changes
We may update this Policy. We will post the new version at [https://emily-ai.net/privacy] and update the version date. Material changes may require you to accept updated terms in the app.
14. Contact
Privacy: [email protected]
Support: [email protected]
This document is an engineering-informed draft. It is not legal advice.