Privacy Policy

Last updated: 5 July 2026 · Operator: Oltrex (contact: founder@heyoltrex.com)

1. Who we are

Oltrex is a mobile AI assistant that captures your conversations and helps you follow through on your commitments. This policy explains what we collect, why, who processes it, and the choices you have. It applies to the Oltrex mobile app and related services.

2. What we collect

We collect only what the features you use require:

• Audio you record and the transcripts produced from it.
• Voice characteristics — an on-device/server voice profile used to recognize you as the speaker and personalize responses. You can delete this profile at any time.
• Tasks, commitments, reminders, notes, memories, and preferences you create, or that we extract from your recordings and surface for your confirmation before acting.
• Contacts — only if you grant access — so the assistant can act on people you mention (e.g. remind you to call someone, or draft a message to them). Used on-device to match names; we do not upload your address book.
• Calendar & device reminders — only if you grant access — to read what's ahead and create events/reminders you ask for.
• Location, including precise and background location — only if you grant it — to deliver place-based reminders (see §4).
• Connected Google Calendar — only if you connect it — your Google Calendar events and free/busy availability, accessed via Google OAuth, so Oltrex can see your schedule and add the events you ask for (see §6). Email/Gmail is not part of this version.
• Account & device data — your email address, authentication tokens, and a device push token used to deliver notifications you enable.
• Your own AI-provider keys — optional; if you choose to bring your own model API key, it is stored encrypted and used only to route your requests.
• Basic diagnostics — crash and performance data, never the content of your conversations or calendar.

3. How we use your data

To transcribe your recordings, extract your tasks and commitments, draft replies you approve, track what you're waiting on, deliver reminders (including place-based ones), and personalize the assistant to you. We do not sell your data, we do not share it with data brokers, and we do not use it to serve advertising. Oltrex never sends messages, emails, or calendar changes without your explicit confirmation.

4. Location data

If you enable location reminders, Oltrex uses your device location — including precise location and background ("Always") location — solely to notify you when you arrive at or leave a place you chose (for example, "remind me near the store"). Location is used for this feature only; it is never sold, never used for advertising, and never shared with third parties for their own purposes. You can turn location off at any time in your device Settings, and Oltrex keeps working without it (you simply won't get place-based reminders).

5. Voice recordings & on-device processing

Where your device supports it, transcription runs on-device. When server processing is used, your audio is transcribed on our own servers — it is not sent to a third-party transcription vendor. Your voice profile (§2) is used to tell your voice apart and is deletable. You control your recordings and can delete any of them, or all of them, in-app.

6. Google user data — Limited Use

Oltrex's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In this version, the only Google scopes we request are Google Calendar — to view and manage the events you ask us to, and read free/busy for conflict detection. Specifically:

• We use Google user data only to provide and improve the user-facing features you have enabled.
• We do not transfer or sell Google user data to third parties, except as necessary to provide or improve those features, for security, or to comply with law.
• We do not use Google user data for advertising.
• We do not use Google Workspace data (your Calendar content) to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models.
• No humans read your Google data except with your explicit consent, for security purposes, or as required by law.

When a feature you use requires it (for example, scheduling around your calendar), the relevant content may be processed by our AI sub-processors (§7) strictly to produce that result, under contractual terms that prohibit training on your data. You can disconnect Google at any time in-app, which stops all further access and revokes our token.

7. Sub-processors we share data with

To provide the service we send the minimum necessary data to:

• Google (Gemini / Vertex AI) and Groq — large-language-model processing of transcripts, messages, and content you act on, on paid, no-training terms for production data.
• Cloud hosting (DigitalOcean) — where the service runs and your data is stored.
• Error monitoring and transactional email providers — for redacted diagnostics and account emails, under data-protection agreements.

Speech-to-text runs on-device or on our own servers, not a third-party transcription vendor. We require our sub-processors to protect your data and to process it only on our instructions.

8. Storage, security & retention

We protect your data in transit with TLS/HTTPS, and we encrypt sensitive data at rest — including your audio recordings and the access tokens for services you connect. We keep recordings and derived data only as long as needed for the features you use and delete them on a defined retention schedule. You can delete your recordings and your entire account at any time.

9. Your choices & rights

In the app you can review, edit, and delete your tasks, memories, recordings, and voice profile; disconnect any connected service; and export a copy of your data. You can request full account deletion — which permanently erases your associated data and revokes connected-service access — using in-app deletion or by emailing founder@heyoltrex.com. Depending on where you live (including the EU/UK under GDPR, California under the CCPA/CPRA, and India under the DPDP Act), you may have rights to access, correct, delete, or port your data, and to withdraw consent; contact us to exercise them.

10. Children

Oltrex is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes & contact

We'll post material changes here and update the date above. Questions or requests: founder@heyoltrex.com.