Privacy policy

What we collect

• Account details: your email address, the name you give us, your timezone, the town you live in if you tell an agent, and your sign-in passkeys.
• What you put into Heedkin: your messages, the files you send, the agents you set up and the instructions you give them, and the routines and reminders you ask them for.
• What comes from the apps you connect: for each new email, calendar change or code notification, its title, sender, a short preview and a link. Agents can also look further into a connected app when you ask them something. If you add a calendar by its subscription link, we keep the link encrypted and read that calendar when an agent needs it.
• Your Heedkin email address and its mail: who each email is from and to, the subject, the text and the names of any attachments, for mail that arrives there and mail your agents send from it with your approval. Mail that fails its sender's security checks is kept without its text or attachments.
• What Heedkin produces: agents' replies, the files they make, how they rate incoming items, and the permission requests they make with your answers.
• Technical details: your IP address, browser and device type, and records of errors and how the service is running.

If you join the waitlist

We keep your email address, your answer to our question if you give one, and how you found us: the page you arrived on, the site or campaign link that sent you, and the code of anyone who shared their link with you. We use them to choose who to invite and to understand who Heedkin is useful for, and we only email you about your invitation.

To leave the list, email hello@heedkin.com and we'll delete your details.

How we use it

Only to run Heedkin for you: to watch your connected apps, tell you about what needs you, answer you, and carry out the actions you approve. We also use it to keep the service secure and working, to support you, and to meet our legal obligations.

We don't sell your data, we don't use it for advertising, and we don't use it to train AI models.

Connected apps and actions

You connect apps yourself, through each service's own sign-in, and we never ask for your password. The access they give us is stored encrypted and never shared with AI models. You can disconnect an app at any time, and we then stop reading it and delete our access.

Agents ask your permission before changing anything in your apps, such as sending an email or moving a meeting, and we keep a record of what you decided.

Google user data

Heedkin's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Gmail and Google Calendar data only to provide the features you use, and no person at Heedkin reads it unless you ask us to for support, it's needed for security, or the law requires it.

AI models

To answer you and rate what comes in, the relevant parts of your data are processed by AI model providers. They process it only to produce Heedkin's responses, and they don't train their models on it.

AI can be wrong. If an agent says something inaccurate about you, tell us and we'll correct what we can.

Who else handles your data

Companies that provide services to us, under contract and only for running Heedkin: hosting, database and file storage; AI models; web search; email delivery; error monitoring; background processing; and the push services that deliver the notifications you turn on. For the weather, a place name or its coordinates (never who you are) goes to a forecast service and a map service. You can ask us for the current list.

We may also disclose data if the law requires it, to protect people's safety or our rights, or to a buyer if Heedkin is ever sold, who would have to treat it as this policy says.

Where it's processed

We store your data in the UK and the EU. Some of our providers are based in the United States; when your data goes there, it's protected by the UK's adequacy regulations or the standard contractual clauses those providers sign.

How long we keep it

We keep your data while you have an account. When you delete your account, we delete your data within 30 days, unless we need to keep something longer for legal, security or safety reasons.

Security

We use technical and organisational measures to protect your data, including encryption. No service can be completely secure, so tell us straight away at hello@heedkin.com if you think someone has got into your account.

Cookies

We use one cookie, to keep you signed in to the app. There are no advertising or tracking cookies, and the website at heedkin.com sets none.

Why we're allowed to use it

We use your data to provide the service you signed up for (performance of a contract), and to keep it secure and working (our legitimate interests). Where we ask for consent, such as for notifications, you can withdraw it at any time.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to move it to another service. Email hello@heedkin.com and we'll reply within a month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd rather you told us first, so we can put it right.

Children

Heedkin isn't for anyone under 18.

Changes

If we change this policy, we'll update the date at the top. If a change affects what we do with your data, we'll tell you in the app or by email before it applies.