---
description: >-
  How OpenHuman collects, uses, processes, stores, and protects information
  when you use the service.
icon: key
---

# Privacy Policy

Last Updated: 02/02/2026

This Privacy Policy describes how we collect, use, process, store, and protect information when you use our system-level AI assistant (the “Service”). The Service is designed to operate as a general-purpose assistive agent on a user’s device, such as a laptop or desktop computer. We are committed to protecting user privacy and minimizing data collection and retention.

This Privacy Policy is intended to comply with applicable global data protection laws, including the EU General Data Protection Regulation (GDPR), India’s Digital Personal Data Protection Act (DPDP), the California Consumer Privacy Act and Privacy Rights Act (CCPA/CPRA), Brazil’s LGPD, and Canada’s PIPEDA. ￼

## Information We Collect

We collect and process information only as necessary to provide the Service and only in response to explicit user actions.

1.1 User Content and System Data When you use the Service, it may process files, application data, system context, or other information on your device only when you explicitly instruct it to do so and only to the extent required to complete a requested task.

1.2 Minimal User Metadata We collect limited user metadata required for basic account or service functionality. This is restricted to: • First name • Last name • User-provided profile information (such as a bio, where applicable)

We do not collect phone numbers, contact lists, precise location data, device identifiers, browsing history, behavioral analytics, or background system activity unless explicitly required for and permitted by a user-requested task.

## How We Use Information

We use information solely to operate, maintain, and provide the Service, including to: • Perform tasks explicitly requested by the user

• Provide contextual assistance across files, applications, or workflows

• Improve reliability and security of the Service

We do not use personal data for advertising, marketing, profiling, or behavioral tracking. We do not sell, rent, or trade personal data. User data is not used to train shared, public, or third-party AI models.

## Data Retention and Deletion

The Service operates under a zero-retention-by-default design.

• System data and content are processed transiently

• No long-term logs of system activity, files, or actions are maintained

• Temporary data required to complete a task is deleted immediately after task completion or within a maximum of 30 days

Users may request deletion of their data at any time. Upon such request, all associated data is permanently deleted and cannot be recovered. Revoking permissions or uninstalling the Service immediately halts further processing.

## Legal Bases for Processing

Where required by law, we process personal data based on one or more of the following legal bases:

• User consent

• Performance of a contract

• Legitimate interests, where applicable and balanced against user rights

## Security Measures

We implement reasonable and appropriate technical and organizational measures designed to protect information from unauthorized access, loss, misuse, or alteration. These measures include encryption in transit and at rest, least-privilege access controls, isolated processing environments, and internal monitoring and audit mechanisms. Access to user data by personnel is restricted to operational, security, or legal necessity.

## Service Providers

We may engage third-party service providers to support operation of the Service, such as infrastructure hosting or AI inference providers. These providers act only on our behalf, are subject to confidentiality obligations, and are restricted from using data for their own purposes.

## International Data Transfers

Information may be processed in locations outside your country of residence. Where applicable, we implement appropriate safeguards to ensure adequate protection consistent with applicable data protection laws.

## Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict processing of, or withdraw consent for your personal data, as well as request data portability. Requests can be done on the dashboard at any time or may be submitted to privacy@tinyhumans.ai.

## Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated as required by law. Changes will not apply retroactively in a manner that reduces existing privacy protections.
