# Privacy and your data

What alfred_ stores, what it doesn't do with it, where it lives, how to export it, and how to have it deleted. The legal version is the Privacy Policy.

Source: https://get-alfred.ai/docs/preferences/privacy  
Updated: 2026-10-24

This page describes what alfred_ does with your data in plain language. The legal version is in our [Privacy Policy](https://get-alfred.ai/privacy).

## What we store

- **Email content**: alfred_ reads your email to show it, flag what needs you, and answer your questions. It's encrypted at rest and used only to run your assistant.
- **Calendar events**: encrypted, and used only to run your assistant.
- **Sign-in tokens**: encrypted. We don't have your password.
- **Tasks, notes, boards and memory**: your alfred_ data, encrypted at rest.
- **Conversation history**: what you said to alfred_ and what it said back.
- **Activity log**: what alfred_ did for you, so you can check.

## What we don't do

- **Sell or share your data** with anyone
- **Train models on your email**: your content isn't used to improve alfred_ or any third-party model
- **Read your texts to other people**: alfred_ only sees what you text *to alfred_*
- **Store your password**: you sign in with Google or Microsoft, so we don't see it

## Checking before acting

alfred_ checks with you before it sends an email you asked for, invites people, or cleans up mail in bulk. It files low-priority mail to Archive on its own if Auto-archive is on (it is by default), and archives or deletes a few emails you name right away; both can be undone. The exceptions to "sends only when you approve" are things you set up yourself: an email rule that forwards mail, a routine you've told to send without asking, and a meeting thread you copy alfred_ on. In Claude and ChatGPT, **Settings → Privacy → Actions without asking** lists the actions you've allowed to go ahead without a preview; revoke any of them there.

## On a team

Each person's mail and calendar are private unless they say yes to the team's account coordinators, and every read, draft, send and calendar change is logged where they can see it. See [Sharing & permissions](https://get-alfred.ai/docs/sharing).

## Where data lives

- Encrypted in transit (TLS 1.2 or later) and at rest in our database
- Row-level security, so your account can reach only your data

## Third parties

We use third parties for specific functions:

- **Anthropic, OpenAI, Google and Amazon Web Services (Bedrock)** for AI: your data is processed to answer the request, and the providers are contractually barred from training on it
- **Supabase** for the database and file storage, **Railway** and **Vercel** for hosting, **Cloudflare** for the network
- **Stripe** for billing, **Resend** for email we send you, **Linq** for texts, **PostHog** for product analytics

Each is bound to handle your data only to run alfred_. The full list is in the [Privacy Policy](https://get-alfred.ai/privacy#subprocessors).

## Export your data

**Settings → Privacy → Export your data** downloads everything alfred_ holds for you as a ZIP: tasks, notes and boards, what alfred_ has learned and remembered about you, your conversations with alfred_, your routines, and your settings. Your email and calendar aren't in it; those live in Gmail, Outlook or iCloud, and you can export them from there.

## Texting

alfred_ only sees what you text *to alfred_*, not your texts with other people, and it isn't part of group texts. Photos you send are read to answer you. Turn texts off under **Settings → Notifications**; the web app, the iPhone app and email briefs keep working.

## Deleting your data

Your data is kept until you delete your account. A deletion is held for 14 days so you can change your mind, then everything is permanently deleted. Cancelling a plan doesn't delete anything; see [Plans & usage](https://get-alfred.ai/docs/plans#after-you-cancel).

## Reporting a security issue

Email <security@get-alfred.ai> with details. We respond within 24 hours.