Privacy Policy

In short

• AYKHO processes your data for one reason only: to provide the personal organisation service you use.
• We do not sell your data and do not use it for advertising.
• Access to Google Calendar or Gmail only happens if you connect it yourself, within the permissions you grant, and you can withdraw it at any time.
• Requests sent to the AI assistant are passed to a specialised provider to produce an answer.
• You can access, correct or delete your data, or delete your account.

Data controller

The controller of the personal data described in this policy is SAS VS 75, the company that operates AYKHO. Contact address: 103 rue La Boétie, 75008 Paris, France.

For any question about your personal data, you can write to support@aykho.com.

Scope

This policy applies to:

• the AYKHO app for iPhone and, once available, its other versions;
• the aykho.com website, which presents the app.

AYKHO is a personal assistant that helps you organise your days: calendar, appointments and events, tasks, conversational assistance based on artificial intelligence and, if you wish, connection to external services such as Google Calendar and Gmail. Some features are reserved for the AYKHO Premium plan.

This policy describes the processing related to the features actually offered. When a feature is still in preparation, this is stated.

The data we process

Account data

When you create your account, we process your email address, the technical identifier of your account, the sign-in method used and, if you provide them, your first or last name. When you sign in with a password, it is never stored in plain text: only an encrypted fingerprint is stored by our authentication system. When you use Sign in with Apple or Google, we only receive the information that service sends us with your agreement, such as your email address.

We also record your usage preferences, in particular your language and time zone.

Calendar, appointments and events

We process the events and appointments you create or import into AYKHO: title, date, time, duration, place, participants, notes and any reminders.

Tasks and other information

We process the tasks, lists, notes and other information you enter in the app.

This content belongs to you. We recommend that you do not enter particularly sensitive information (for example about your health) unless necessary. If you do, it is processed only to provide the service to you, like the rest of your content.

Google Calendar data

The Google Calendar connection is not yet offered: it is in preparation. The rules below will apply as soon as it opens.

If you choose to connect your Google Calendar account, AYKHO accesses your calendars and events within the permissions you grant on Google’s consent screen: titles, dates, times, places, descriptions and participants of events. This information is used to display your schedule in AYKHO, to help you organise it and, if you ask, to create or modify events.

Gmail data

The Gmail connection is not yet offered: it is in preparation. The rules below will apply as soon as it opens.

AYKHO only accesses your Gmail mailbox if you connect it yourself and grant the corresponding permission on Google’s consent screen. In that case, AYKHO analyses messages solely to identify information useful for your organisation, such as booking or appointment confirmations, and suggests adding them to your calendar. You remain free to accept or decline each suggestion.

AYKHO does not send emails on your behalf, does not delete your messages and does not use their content for any purpose other than this feature. The applicable commitments are detailed in the "Data from Google services" section.

Conversations with the AI assistant

When you use the assistant, we process the messages you send it, the generated answers and the context needed to answer you, for example the events or tasks concerned by your request.

Premium subscription

When you subscribe to AYKHO Premium, payment is made through Apple via the App Store. We never receive your bank details. Apple only sends us the information needed to manage your subscription: transaction identifier, plan purchased, status, start and renewal dates.

Technical data

To run and secure the app, we process technical data: device model and operating system, app version, IP address when connecting to our servers, error and technical event logs and, if you enable notifications, a notification token.

Exchanges with support

If you contact us, we process your email address, the content of your messages and any information you choose to send us.

The aykho.com website

The aykho.com website sets no cookies and uses no audience-measurement tool or advertising tracker. Its host processes technical connection logs (IP address, date, page requested) needed for the security of the service. See the Cookies and Trackers page.

What we do not do

• We do not sell or rent your personal data.
• We do not use your data for advertising and do not track you across apps or websites.
• We do not use the content of your calendars, tasks, emails or conversations to train artificial intelligence models, and we do not allow our AI provider to do so.

Purposes and legal bases

AYKHO takes no decision producing legal effects concerning you based solely on automated processing. The assistant makes suggestions; you decide.

Mandatory and optional data

Your email address and the strictly necessary technical information are required to create an account and use the service. All other information is optional: you choose what you add to AYKHO.

Connecting external services such as Google Calendar or Gmail is always optional. You can use AYKHO without connecting them.

Service providers and recipients

Your data is accessible only to authorised AYKHO staff, to the extent necessary for their duties. It is also processed by the following technical providers, acting on our behalf and on our instructions, under contractual confidentiality and security commitments:

When you connect your Google account, Google acts as the provider of the service you chose to link; the use of your Google account remains governed by Google’s privacy rules. Likewise, Apple processes certain data as a separate controller when you download the app or subscribe via the App Store.

Finally, your data may be disclosed to the competent authorities when required by law.

Artificial intelligence

When you send a request to the assistant, the text of your request and the necessary context are transmitted to our artificial intelligence provider, OpenAI, to generate an answer. This provider acts as a processor and may only use this data to provide its service to us.

According to OpenAI’s documentation, data received through its API is not used to train its models unless the customer expressly chooses to share it, which AYKHO does not do. OpenAI keeps this data for no more than 30 days in its abuse monitoring logs, unless a longer retention is required by law.

The assistant’s answers are generated automatically. They may be inaccurate or incomplete: always check important information before relying on it.

Data from Google services

The Google integrations are not yet offered: they are in preparation. The following commitments will apply as soon as they open.

AYKHO’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• Google data is used only to provide or improve the user-facing features of AYKHO that you use;
• it is transferred to third parties only when necessary to provide those features, for security purposes, to comply with the law, or as part of a merger or acquisition after your prior consent;
• it is never used for advertising, sold, or transferred to advertising platforms or data brokers;
• no person reads your Google data, except with your explicit agreement, for security purposes (for example to investigate abuse), to comply with the law, or when the data is aggregated and anonymised for internal operations;
• it is not used to develop, improve or train generalised artificial intelligence or machine learning models.

You can withdraw AYKHO’s access to your Google account at any time, from the app settings or from the Third-party apps page of your Google account. Google data kept by AYKHO is then deleted within the period indicated below.

Retention periods

We keep your data for as long as necessary for the purposes described above, then delete or anonymise it:

After your account is deleted, some data may be kept longer when the law requires it, for example accounting records (ten years, Article L123-22 of the French Commercial Code) if we hold any, or when necessary for the establishment, exercise or defence of legal claims, for the applicable limitation period.

Deletion and withdrawal of permissions

• You can delete the events, tasks and other content you created at any time.
• You can disconnect Google Calendar or Gmail from the app or from your Google account.
• You can delete your account: the procedure is described on the Account Deletion page.

Security

We implement technical and organisational measures appropriate to the risks, including:

• Encryption of exchanges between the app and our servers (TLS).
• Encryption of stored data.

No system is completely infallible. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the CNIL and, where required by law, the people concerned, in accordance with Articles 33 and 34 of the GDPR.

Transfers outside the European Union

Some providers may process data outside the European Economic Area, in particular in the United States. In that case, the transfer is covered by a safeguard provided for by the GDPR: an adequacy decision of the European Commission (for example the EU–US Data Privacy Framework, for certified organisations) or standard contractual clauses adopted by the European Commission. The place of processing and the safeguard applicable to each provider are shown in the table in the "Service providers and recipients" section. You can obtain a copy of the safeguards by writing to us.

Your rights

Under the GDPR and the French Data Protection Act, you have the following rights:

• Right of access: obtain confirmation that we process your data and receive a copy.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure: have your data deleted, subject to legal retention obligations.
• Right to restriction: ask for certain processing to be temporarily suspended, in particular while a dispute is being examined.
• Right to object: object to processing based on our legitimate interest, on grounds relating to your particular situation.
• Right to data portability: receive the data you provided to us in a structured, commonly used format, or have it transmitted to another service, when the processing is based on the contract or on your consent.
• Withdrawal of consent: when processing is based on your consent, withdraw it at any time, without affecting processing already carried out.
• Post-mortem instructions: set instructions regarding what happens to your data after your death.

How to exercise your rights

You can exercise your rights by writing to support@aykho.com from the address associated with your account. We may ask you to confirm your request to verify your identity, in a proportionate way. We will never ask for your password.

We reply within one month of receiving your request. This period may be extended by two months for complex requests; we will inform you if so.

Complaint to the CNIL

If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the French data protection authority (Commission nationale de l’informatique et des libertés, CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr. If you live in another EU country, you can also contact the data protection authority of your country.

Minors

The service is intended for people aged at least 16. We do not knowingly collect data about children below this age. If you believe a child has sent us data, contact us so that we can delete it.

Changes to this policy

We may change this policy to reflect changes to the service or to regulations. The date of the update is shown at the top of the page. In the event of a significant change, in particular any new use of your data, we will inform you in advance in the app or by email and, where required by law, obtain your consent.

Effective date

This policy is effective from the date this document is published on aykho.com.