Your world stays yours.

Alfred Privacy Policy · updated October 15, 2026

This privacy policy explains the data processed by Alfred, a personal-agent service operated by Dyrra, and the choices available to you.

Who to contact

For privacy questions, access, correction or deletion requests, contact support@dyrra.dev. Include your account email so we can verify the request. Do not send passwords or payment card details.

Data Alfred processes

Alfred processes your account identifier, name and verified sign-in email; messages and reactions; selected attachments; recordings and transcripts; saved memory and its sources; task plans, actions, confirmations and results; personality, privacy and voice settings; and subscription status. If you connect a service or computer, Alfred processes the credentials and task data needed for that connection. Device session information and push tokens support account security and notifications. We do not ask for full access to your photo library to attach selected photos.

Why data is used

Data is used to authenticate you, respond to requests, execute permitted tasks, retrieve relevant memory, verify results, synchronize devices, provide notifications, prevent abuse and administer subscriptions. Your source-backed preferences help personalize Alfred. Memory is editable and may be forgotten. Temporary conversations do not add memory automatically; an explicit request to remember something is treated separately. We do not sell personal data or use it for advertising.

Continuing across your devices

While the iPhone or Mac app is open, Alfred advertises the availability of that signed-in app session, its platform and last-seen time to your account. The session name comes from your sign-in settings. Continuing elsewhere is an explicit action: it stores references to the selected conversation and, when applicable, its related task for up to 30 minutes of access. The other device opens the same conversation only after you choose to continue there. Temporary conversations are excluded. No microphone, screen capture, passwords or new task permissions are transferred, and existing tasks are not restarted. Expired or revoked references are hidden immediately and periodically cleared. Minimal command fingerprints and revision receipts prevent duplicate or stale navigation; they contain no conversation contents, are not used for memory or training, and are removed with account deletion.

AI providers and your permission

With your explicit AI-processing permission, relevant messages, selected files, recordings and permitted memory may be sent to the configured AI providers, including AiDostup, OpenAI or Anthropic to generate responses or execute your request. OpenAI also provides voice synthesis, transcription and embeddings. Only the context needed for the feature is sent. You can withdraw this permission in Intelligence; withdrawal stops new AI processing and may make those features unavailable. It does not retroactively cancel a request already sent. Provider processing and retention are subject to the provider contract and applicable settings; we do not promise zero retention. Providers must process data only for the agreed service and provide protections consistent with this policy.

Messenger chats

When you write to Alfred in Telegram, WhatsApp, iMessage or Slack, that messenger delivers your messages, reactions, button taps and the files you send to our server, and Alfred replies through the same messenger. Your first message creates an Alfred account linked to your messenger identifier, display name and language setting; no other contacts or chats are read. AI processing starts only after you tap Start, and payments and passwords are confirmed on a secure web page, never by a chat button. The messenger operator (Telegram, Meta, Apple through our iMessage delivery provider Sendblue, or Slack) processes these messages under its own terms. You can stop at any time by blocking the bot or deleting your account; a linked web or app account stays available.

Infrastructure and connected services

Render and PostgreSQL hosting support the server and stored account data. Resend processes sign-in and Alfred email. Apple processes App Store transactions and push notifications. Polar processes web subscription purchases. Telnyx processes enabled phone and SMS features. Optional search services and services you explicitly connect receive the information necessary for your task. A third-party purchase, booking or message may disclose the information shown in the approval flow to its recipient. Payment card details are handled by the payment provider rather than requested in Alfred chat. Service providers must protect data at least as described in this policy.

Improving Alfred with your chats

Starting Alfred authorizes AI processing only. "Help improve Alfred" is a separate, optional choice, off by default in every channel. If you enable it, future private requests, answers, task outcomes and your feedback can be retained as training and evaluation examples. Files and voice require their own additional choices. Temporary, shared, archived and sensitive-domain conversations are excluded; organization permission is also required for organization accounts. Requests from before the current consent are not collected retroactively.

Recognised email addresses, phone numbers, card numbers, credentials and passwords are removed automatically before examples are stored. This reduces identifying information but does not guarantee complete anonymization. Reactions indicate your feedback; they do not prove that an answer is factually correct. Export rechecks consent, source ownership and retention before including a row.

Use /privacy in Telegram, say "privacy off" in iMessage, or use You in web / Privacy & data in the apps to stop sharing. Turning improvement or a media category off removes retained training examples linked to your account. Re-enabling starts with future requests. Conversation retention also limits training collection. Deleting the active collection does not promise to undo processing or training already performed outside it; backups follow the retention described below.

Optional Apple Health summaries

Health sharing is off by default. On a supported iPhone, you can permit read-only access to sleep and step data, preview totals locally, and separately choose to share those totals with Alfred. Device permission alone does not enable server sharing. The feature sends aggregate sleep duration for the preceding 24 hours and step totals for the preceding local calendar day, together with their time windows, timezone and measurement time. It does not upload raw HealthKit records or write to Health. The latest shared summary is encrypted, linked to your account and retained for up to 48 hours in active storage. It is displayed dynamically in the current morning brief, not copied into past brief records or notification text. Summaries shared through this feature are not sent to AI providers, saved as conversational memory or used for improvement examples, advertising or tracking. Missing data is not treated as zero, and these activity totals are not medical advice. Stop sharing in Health settings to delete the active server summary and prevent future uploads; manage device access separately in Apple Health. Account deletion also deletes the active summary. Infrastructure backups remain subject to the backup retention described below.

Living dashboards and work metering

Saved dashboards retain an account-scoped specification and version history; current tasks, pending decisions and activity are read when the dashboard is opened or refreshed. Authored notes are not independently verified results. With AI-processing permission, permitted dashboard specifications can be supplied as context when you ask Alfred to change them. Dashboards do not themselves authorize purchases, messages or permission changes. Work metering records service metadata such as provider, operation, time and usage receipts, not message, image, audio, password or signature contents. Unreported provider usage is shown as incomplete rather than assumed to be zero.

Retention, export and deletion

Conversations remain until deleted unless you select a 30-day, 90-day or one-year retention period. Expired conversation messages and their unreferenced attachments are periodically removed; separately saved memory, task history and decisions remain until you forget or delete them. You can export account data from Privacy & data and delete your account inside the app. Account deletion removes active account data, saved memory, tasks, connections and Alfred contact information. Payment providers may retain transaction records required by law; deleting Alfred does not itself cancel an Apple or Polar subscription. Infrastructure backups may retain copies temporarily under the hosting provider’s backup schedule.

Security and international processing

Connections use encrypted transport; saved credentials are sealed on the server. Access to account data is scoped to the account and permitted privacy domains. No system is perfectly secure. Processing may occur in countries where our providers operate; applicable contractual safeguards and data-protection requirements govern those transfers. Report a suspected security incident to support.

Your choices and rights

You may access, export, correct and delete account data, forget memory, revoke connections and permissions, withdraw AI-processing and optional improvement consent, and contact support about other rights available in your jurisdiction. Disabling microphone, camera or notification access does not prevent text chat. Requests requiring identity verification will be handled through your verified account.

Children and policy updates

Alfred is not directed at children under 13, or the higher minimum age required for independent consent in your jurisdiction. Do not provide a child’s data without appropriate authority. Material changes to data use will be communicated through the service, and new permission will be requested where required. This page shows the latest policy date.