1Who we are
AwareAI is a product of SMA MEDIA IT NETWORK LTD, a private limited company registered in England and Wales under company number 13682450, whose registered office is at 128 City Road, London, United Kingdom, EC1V 2NX ("AwareAI", "we", "us").
We are the controller of the personal data described in this policy, under the UK GDPR and the Data Protection Act 2018. For anything in it, write to [email protected]. A person reads it.
This policy covers the AwareAI iPhone app, the website at awareai.live, and the connection service that links your Telegram account to the app (together, the Service). It sits alongside our Terms of Use.
2Two kinds of data, handled two ways
Your account. What we need to run an account for you: who you are, the Telegram connection you approved, and how to reach your phone. We keep this on our server for as long as you have an account, and we are responsible for it.
Your conversations. The messages in the Telegram account you connect, and what AwareAI works out from them. These live on your iPhone. Our server only carries new messages across to your phone, and carries a reply back to Telegram when you press send. It does not keep them.
Your conversations include other people, who have not agreed to anything with us. Section 9 explains how we treat them.
3What we hold, why, and for how long
On our server
| What | Why | How long |
|---|---|---|
| Your email address | It is how you sign in, and how we write to you about your account. | Until you delete your account. |
| Your password | To check it when you sign in. We store only a salted hash of it, which cannot be turned back into the password. | Until you delete your account. |
| An identifier from Apple, if you use Sign in with Apple | Apple gives us an id for you that only works for AwareAI, plus an email address, which may be a private relay address Apple made for you. | Until you delete your account. |
| Your Telegram login | The session you approved through Telegram's own login. It is what lets the Service see new messages arrive. It is encrypted on our server and never shown to anyone, us included. | Until you disconnect Telegram or delete your account. Either one logs the session out on Telegram's side as well. |
| Your Telegram user id, display name, and phone number when Telegram shares it | To show you which account is connected, and to deliver its messages to your phone and nobody else's. | Until you disconnect Telegram or delete your account. |
| A device key and a push token | The key proves a request comes from your phone, and is encrypted on our server. The token lets Apple wake your phone when a message is waiting. | Until you sign out, disconnect, or delete your account. |
| Messages on their way to your phone, and replies on their way to Telegram | To get them there. Each is held in memory only, never on disk. | Until your phone collects it, and never more than 10 minutes. |
| Server logs | To keep the Service working and secure. They record that a request happened, from which IP address, and whether it worked. They never record what a request carried. | Up to 30 days. |
On your iPhone only
These never reach us. They stay on your phone until you delete them, delete your account, or delete the app.
- The messages from your connected Telegram account, and the names of the people you talk to.
- What AwareAI works out from them: promises, dates, people, drafts, and the nudges it has scheduled.
- Notes you speak after a call. Your iPhone turns speech into text itself, with recognition set to run on the device only. The audio is not saved and is never sent anywhere.
- The fact that a phone call has ended. AwareAI notices this so it can ask what was agreed. It never hears the call itself; iPhone does not allow that.
The thinking is done by Apple Intelligence on your device. It does not send your conversations to us, and AwareAI does not send them to any outside AI service.
Your subscription
Apple takes payment and tells your phone whether you are subscribed. We never see your card or your billing details.
4Our website and the early access list
awareai.live uses no analytics, no advertising, and no tracking, and sets no cookies. Its fonts are served by Google Fonts, so your browser asks Google for them, and Google sees your IP address when it does.
If you join the early access list, we keep the email you give, what you told us you do, which app your clients message you on, which form you used, the time, and a one way hash of your IP address that we use only to stop the form being flooded. We use it to tell you when AwareAI opens to you, and for nothing else. It is kept until we have let you in, or until you ask us to remove you, whichever comes first.
The page where you connect Telegram in a browser sets one cookie, which keeps you signed in for up to 14 days. It is strictly necessary for that page to work, so it needs no consent banner.
If you write to us, we keep the conversation for as long as we need to deal with it.
5Why we are allowed to use it
- To provide the Service you asked for (contract): your account, the Telegram connection, delivery to your phone, and replies you choose to send.
- To keep the Service secure and working (legitimate interests): server logs, limits on repeated sign in attempts, and stopping misuse.
- Because you asked us to (consent): the early access list. You can withdraw at any time by writing to us, and we will remove you.
- Where the law requires it (legal obligation): for example, if we must keep a record or answer a lawful request.
AwareAI's notices are produced automatically on your phone, about your own conversations, for you. We make no automated decisions about you that have legal or similarly significant effects.
6Who else is involved
We do not sell personal data, share it with advertisers, or give it to data brokers. These are the only others involved, and each only for its part.
- Telegram. You log in through Telegram's own process. Our server holds the session that lets the Service see new messages and send the replies you choose to send. Telegram's own privacy policy governs your Telegram account.
- Apple. Sign in with Apple, App Store payments, and push notifications. A push carries an id, and at most the name of who wrote to you, never the message. Apple Intelligence and speech recognition run on your device.
- DigitalOcean. Hosts our server, in Amsterdam in the Netherlands.
- Our web host. Hosts the awareai.live website, the early access list, and the [email protected] mailbox.
- Google. Serves the fonts on our web pages.
We would disclose personal data to anyone else only if the law required us to, and only as much as it required. If AwareAI or its business is ever sold, the buyer would take on this policy, and we would tell you before anything about it changed.
7Where it is processed
Our server is in the Netherlands, which the UK recognises as giving adequate protection. Apple and Google may process data in the United States or elsewhere; where they do, they rely on the safeguards UK law requires, such as adequacy regulations or approved contract terms.
8Deleting everything
From the app. Open Settings in AwareAI and choose Delete account. In one step, it:
- logs AwareAI out of your Telegram, on Telegram's side, so the session disappears from your Telegram's list of devices
- erases your account and everything section 3 lists on our server, apart from server logs, which hold no messages and age out within 30 days
- erases the notes, people, promises and scheduled nudges on that iPhone
It cannot be undone. A subscription is billed by Apple, so it carries on until you cancel it in your iPhone's Settings, under your Apple Account, then Subscriptions. If you signed in with Apple, you can also remove AwareAI under your Apple Account, in Sign in with Apple.
Without the app. Write to [email protected] from the address on your account and we will delete it for you.
Just the Telegram connection. Disconnect it in the app, or end it from inside Telegram under Settings, then Devices. Either stops the Service reading at once.
9The people in your conversations
When you connect your Telegram account, the people you talk to have their messages carried across to your phone too. They have not signed up to AwareAI and may not know it exists.
We treat their messages exactly as we treat yours: carried, never kept, never read by us, never used for anything but delivering them to you. If you use AwareAI for your business, you are responsible for that choice under data protection law, as our Terms of Use explain, and for that part we act on your behalf.
If you are someone who talks to an AwareAI user and want to know what we hold about you: we hold nothing about you on our server once a message has been delivered. Write to us anyway and we will answer.
10How we protect it
- Everything between your phone, your browser and our server travels encrypted.
- Telegram logins and device keys are encrypted on our server. Passwords are stored only as salted hashes, which cannot be turned back into the password.
- On your iPhone, your sign in is kept in the Keychain, on that phone only, and cannot be read until the phone has been unlocked after it starts up.
- There is no screen, tool or export anywhere in our systems for reading your conversations. That applies to us as much as to anyone.
- Access to our server is limited to the people who run it.
No system is perfectly secure. If a breach ever puts your data at risk, we will tell you and the regulator as the law requires.
11Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong
- delete it
- restrict how we use it, or object to our using it
- give it to you, or to someone else, in a form a computer can read
- stop using it where we rely on your consent
Write to [email protected]. It is free, and we will reply within one month. We may ask you to confirm it is your account first.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather hear from you first, and fix it.
12Age
AwareAI is for people aged 18 and over, as our terms say. We do not knowingly hold data about anyone younger. If you think we do, tell us and we will delete it.
13Changes to this policy
If we change this policy in a way that matters to you, we will tell you by email or in the app before the change takes effect. Every version carries its effective date at the top, and we will send you an earlier version on request.
14Contact
Write to [email protected].
Postal address: SMA MEDIA IT NETWORK LTD, 128 City Road, London, United Kingdom, EC1V 2NX.