HearSay Privacy Policy
HearSay for iOS, by Chinchilla AI. Effective October 14, 2026.
HearSay is an AI assistant you can type to or talk to (Sophia). This policy explains what we collect, who processes it, how long we keep it, and how to delete it. Questions: support@echelonagents.ai.
What we collect
- Account. You sign in with Apple or Google. We receive a stable account identifier from Apple or Google and, if you allow it, your email address. We never see your Apple or Google password.
- Your messages. The messages you type to HearSay and its replies, so it can answer you.
- Voice. The microphone is used only during a voice session with Sophia. While a session is running, your audio streams live to OpenAI to produce Sophia's replies. Where enabled, the live text of the conversation also goes to Anthropic (see 'Who else processes your data'). We don't store your voice recordings. Raw voice transcripts are never stored for regular users. If you are in our TestFlight beta program, your voice transcripts may be kept for 14 days to help us test.
- Memories, notes, reminders and lists. After a conversation ends, HearSay extracts lasting items (facts worth remembering, reminders, list items, notes, and a short recap) and stores them under your account so it can use them later. This includes people you tell HearSay about (such as names, relationships and birthdays) and topics you ask Sophia to keep track of.
- Location. If you allow location access, HearSay uses your phone's location only while you are using the app, to answer questions such as nearby places, directions and weather. When you ask about nearby places, directions or addresses, HearSay sends your approximate location (rounded to about 110 meters or coarser) or the address you give to OpenAI, to the public map services OpenStreetMap and OSRM, and to the weather service Open-Meteo, along with what you asked. These services never receive your account identity. HearSay does not use your location in the background.
- Calendar (optional). If you allow calendar access, HearSay reads and adds events in your iPhone Calendar on your device. When you ask Sophia about your schedule, the matching events (titles, times and locations) are sent from your phone to our server and may be sent to Anthropic's Claude to write the answer, and the spoken reply is produced by OpenAI. We don't store your calendar events on our servers.
- "Remember recent conversation" (optional, off by default). If you turn this on in Settings, HearSay keeps a record of the actions Sophia took during your voice sessions (which feature she used, what she looked up, and the result) for 7 days, so she can pick up where you left off. It does not keep a recording or transcript. Separately, records of certain actions Sophia takes (see 'How long we keep it') are kept for 30 days.
- TestFlight beta testers only. If you are in our TestFlight beta program, features still in testing (such as grouping your conversations into topics) may also send your notes and memories to Anthropic's Claude, and some features still in testing (such as web search, asking a question, and translating) also send your request to Anthropic's Claude. These beta requests go through a different Anthropic service, so the API data policy (see "Who else processes your data") may not apply to them. This is in addition to the voice-conversation processing described above, and it does not apply to regular users.
- Settings and usage. Your preferences, and usage counters used to apply fair-use limits.
- Reports. If you report a reply, we keep your note, the reported reply and the messages just before it so we can review it.
Where it is stored
Your data is stored in Amazon Web Services (AWS) DynamoDB in the US East (N. Virginia, us-east-1) region, in a database separated per user account.
Who else processes your data
| Company | What it receives | Why |
|---|
| OpenAI | Your typed messages, your live voice audio during a voice session, the data needed to answer them, and conversation text after a session ends | Generates HearSay's voice and chat replies, and writes summaries and memories (reminders, lists, notes and recaps) |
| Anthropic (Claude) | The live text of your voice conversation, and the information needed to answer you (such as calendar events you ask about), only where this feature is enabled | Decides when Sophia should look something up or take an action, and writes the answer |
| Amazon Web Services | All stored account data | Hosting and storage |
| OpenStreetMap, OSRM | Your approximate location or the place you name, and your search terms | Finds nearby places, looks up addresses, and works out directions |
| Apple / Google | Sign-in only | Verifying who you are |
OpenAI's data policy. OpenAI's documentation states that "data sent to the OpenAI API is not used to train or improve OpenAI models (unless you explicitly opt in to share data with us)" (OpenAI, Data controls in the OpenAI Platform, retrieved October 5, 2026). We don't store your voice recordings. OpenAI may keep API content in abuse-monitoring logs for up to 30 days, and may briefly hold audio state (about 1 hour) to support multi-turn replies.
Anthropic's data policy for its API. For requests we send through Anthropic's API, Anthropic's commercial terms state: "Anthropic may not train models on Customer Content from Services." Anthropic automatically deletes API inputs and outputs within 30 days, except where content is flagged for a usage-policy violation (then up to 2 years).
To answer some questions HearSay looks up public information, which involves sending the relevant search terms, place names or coordinates (never your account identity) to those services: Open-Meteo (weather), OpenStreetMap and OSRM (places, maps and directions), Wikipedia, and public news and market-data sources. We do not sell your data and do not allow these providers to use it for advertising.
How long we keep it
- Memories, notes, reminders, lists and recaps: until you delete your account.
- Audio recordings: not stored.
- Voice transcripts: never stored for regular users. If you are in our TestFlight beta program, your voice transcripts may be kept for 14 days to help us test.
- Typed chat: each message is deleted 30 days after it is sent.
- "Remember recent conversation" records (if you turn it on): 7 days.
- Records of certain actions (such as errands, emergency calls, and requests Sophia declined), including a short note about the request: 30 days.
- Copies of typed conversations waiting in our processing system, including ones that failed: up to 4 days.
- A copy of each of Sophia's typed replies is kept for up to 24 hours so a message isn't answered twice.
- Reports: 90 days.
- Server logs: 30 days. Our logs record technical events (such as which feature was used and how long it took), not the content of your messages.
- Short-lived technical records (such as session and cache records): automatically removed within 30 days.
- Sign-in session tokens expire after 30 days.
Deletion can take a few days after these dates.
Deleting your data
Your choice for typed chat. In the app, Settings › Privacy › AI data sharing controls typed chat. If you turn it off, HearSay stops sending your typed messages and chat summaries to OpenAI, and typed chat stops working until you turn it back on. It does not stop voice conversations with Sophia, which are processed by OpenAI and, where enabled, Anthropic, or the memory features built from them. To stop all AI processing, stop using HearSay and delete your account in Settings.
You can delete your account and all data stored under it from within the app. This permanently removes your account, messages and memory, and any device still signed in is signed out. We keep only a small marker that the account was deleted, so old sign-in tokens stop working. You can also email support@echelonagents.ai and we will delete it for you. Copies already sent to OpenAI or Anthropic are governed by their own retention terms.
A few things aren't tied to your account and so aren't removed by deleting it: copies waiting in our processing system expire on their own within 4 days, and shared lookup caches that aren't linked to any account (for example, place searches) expire on their own.
What we do not do
- No advertising and no tracking across other companies' apps or sites. The app contains no analytics or advertising SDKs.
- No sale of your data.
- HearSay uses your microphone only during a voice session with Sophia. It does not connect to Gmail in this version. HearSay is free. It does not take payments.
Children
HearSay is not directed to children under 13 and we do not knowingly collect their data. If you believe a child has used HearSay, email us and we will delete the account.
Changes and contact
We will update this page and its date if our practices change. Contact: support@echelonagents.ai. See also our Support page.