Last updated: [DATE]
[COMPANY NAME] ("we", "us") runs Skipper AI (the "Service"), an AI personal assistant. This policy explains what we collect, why, who we share it with, and your choices. Contact: [CONTACT EMAIL].
To answer you, the Service sends your messages and the relevant context to our AI provider, xAI (the Grok API), which acts as our processor/service provider. That context can include saved memories, uploaded files, images, transcribed voice, web pages the assistant reads, and Gmail/Calendar content when you ask about them. Voice features also use xAI's speech services; images are generated through xAI's image API.
xAI processes this data under its API terms and data-processing commitments. [Confirm and describe xAI's current API data retention and training policy, and link to it, e.g. https://x.ai/legal]. We do not use your content to train our own models. AI output can be wrong, so check important information.
When you use web search or ask the assistant to read a web page, your query or the page URL is sent to the search provider or website. Code you ask the assistant to run executes in an isolated sandbox on our servers.
If you connect Google, we request access to read and search Gmail, create Gmail drafts (we never send email for you), and read and create Google Calendar events. We use this data only to provide the features you ask for in the app, such as summarising or finding an email or adding an event. It is sent to xAI only as needed to answer your request.
Skipper AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or let humans read it except with your explicit consent, for security or abuse investigation, to comply with law, or in aggregated/anonymised form for internal operations. You can disconnect Google at any time on the Connections page or at myaccount.google.com/permissions; we then delete the stored tokens.
Files you upload are stored on our servers so the assistant can read them in the chat they belong to. Uploads are limited in size by plan. Unattached uploads are cleaned up automatically, and files are deleted when you delete the chat or your account. Website projects and their version history are stored until you delete them. Preview links for your websites are unguessable, but anyone you share one with can view the site.
We don't sell your personal information. We may disclose data if required by law or to protect rights and safety.
We keep your data while your account is active. When you delete content it is removed from our active database. If you ask us to delete your account, we delete your data within [30] days, except records we must keep for legal, tax or fraud reasons (e.g. payment records). Backups expire within [N] days.
You can view and delete memories, chats, files, projects and connections in the app. You can also ask for access to, correction of, export of, or deletion of your data by emailing [CONTACT EMAIL]. Depending on where you live (e.g. EEA/UK, California), you may have more rights, including objecting to processing and complaining to a regulator. [Add legal bases for processing if you serve the EEA/UK: contract, legitimate interests, consent.]
We use HTTPS, hashed passwords, encrypted connection tokens, isolated previews for generated websites, and sandboxed code execution. No system is perfectly secure; tell us about any issue at [SECURITY EMAIL].
The Service is not intended for anyone under [13 / 16], and we don't knowingly collect their data.
Our providers may process data in the United States and other countries. [Describe safeguards, e.g. Standard Contractual Clauses.]
We'll post updates here and tell you about material changes by email or in the app.