Privacy Policy

1. Who we are

Oltrex is a mobile AI assistant operated by Shaurya Jain under the product name Oltrex (“Oltrex,” “we,” “us,” or “our”). It captures conversations you choose to record and helps you follow through on your commitments. This policy explains what we collect, why, who processes it, and the choices you have. It applies to the Oltrex mobile app and related services.

2. What we collect

We collect only what the features you use require:

• Audio you record and the transcripts produced from it.
• Voice characteristics — an encrypted mathematical voice profile created on Oltrex's servers, if you choose voice enrollment, to recognize you as the speaker and personalize responses. You can delete this profile at any time.
• Tasks, commitments, reminders, notes, memories, and preferences you create, or that we extract from your recordings and surface for your confirmation before acting.
• Contacts — only if you grant access — so the assistant can match people you mention, such as in a reminder to call someone. Matching happens on-device; we do not upload your address book.
• Calendar & device reminders — only if you grant access — to read what's ahead and create events/reminders you ask for.
• Location, including precise and background location — only if you grant it — to deliver place-based reminders (see §4).
• Connected Google Calendar — only if you connect it — your Google Calendar events and free/busy availability, accessed via Google OAuth, so Oltrex can see your schedule and support calendar actions you approve (see §6). Email/Gmail is not part of this version.
• Account & device data — your email address, authentication tokens, and a device push token used to deliver notifications you enable.
• Optional foreground wake-phrase audio and recognized text — when “Hey Oltrex” is enabled, the microphone listens while the app is active so the device can recognize the phrase and any words that follow as your command. Recognition prefers Apple's on-device engine, but may use Apple's server-based speech recognition when on-device recognition is unavailable (see §5 and §7).
• AI-provider settings and credentials — if you configure your own AI provider, we store the provider, model, optional base URL, and API key you enter. The key is encrypted before storage and used to authenticate requests for your account (see §7).
• Basic diagnostics — crash and performance data, never the content of your conversations or calendar.

3. How we use your data

To transcribe your recordings, extract tasks and commitments for your review, track what you're waiting on, deliver reminders (including place-based ones), support calendar actions you approve, route AI processing through Oltrex-managed providers or a provider you configure, and personalize the assistant to you. We do not sell your data, we do not share it with data brokers, and we do not use it to serve advertising. The current version does not read or send email, and it does not apply a calendar change without your explicit confirmation.

4. Location data

If you enable location reminders, Oltrex uses your device location — including precise location and background ("Always") location — solely to notify you when you arrive at or leave a place you chose (for example, "remind me near the store"). Location is used for this feature only; it is never sold, never used for advertising, and never shared with third parties for their own purposes. You can turn location off at any time in your device Settings, and Oltrex keeps working without it (you simply won't get place-based reminders).

5. Voice recordings & server processing

Saved audio captures are uploaded and transcribed on our own servers; that saved-capture transcription is not sent to a third-party transcription vendor. Separately, if you enable the optional “Hey Oltrex” listener, the app uses Apple's native speech recognizer to detect the wake phrase and any command that follows. It prefers on-device recognition, but may fall back to Apple's server-based recognition when the on-device engine is unavailable. The listener runs only while the app is in the foreground and stops when the app is backgrounded or the feature is disabled. If you choose voice enrollment, the resulting mathematical voice profile (§2) is used to tell your voice apart and is deletable. You can delete recordings individually in-app, or delete your account and all associated data.

6. Google user data — Limited Use

Oltrex's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In this version, the only Google scopes we request are Google Calendar — to view and manage the events you ask us to, and read free/busy for conflict detection. Specifically:

• We use Google user data only to provide and improve the user-facing features you have enabled.
• We do not transfer or sell Google user data to third parties, except as necessary to provide or improve those features, for security, or to comply with law.
• We do not use Google user data for advertising.
• We do not use Google Workspace data (your Calendar content) to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models.
• No humans read your Google data except with your explicit consent, for security purposes, or as required by law.

When a feature you use requires it (for example, scheduling around your calendar), the relevant content may be processed by an AI provider (§7) strictly to produce that result. Oltrex-managed Google and Groq processing uses paid/API terms that prohibit provider training on production data. If you configure another provider, that provider's terms and privacy policy govern its processing. You can disconnect Google at any time in-app; this deletes Oltrex's stored Google tokens and stops further access through Oltrex. We also make a best-effort request to Google to revoke the upstream grant.

7. Processors and provider choices

To provide the service we send the minimum necessary data to:

• Google (Gemini / Vertex AI) and Groq — Oltrex-managed large-language-model processing of transcripts and other content you submit, on paid/API terms that prohibit provider training on production data.
• An AI provider you configure — if you supply a provider, model, API key, or custom compatible endpoint, relevant content and instructions are routed to that provider using your credential. This can include providers such as OpenAI, Anthropic, OpenRouter, Together, DeepInfra, Fireworks, or another compatible endpoint. That provider's own terms and privacy policy apply.
• ElevenLabs or Microsoft Edge Speech — when server-generated spoken replies are enabled, the selected speech service receives the text of the generated reply and technical data needed to synthesize it. This text may reflect content you provided; the speech-synthesis step does not send your raw microphone recording.
• Apple Speech Recognition — when the optional “Hey Oltrex” listener is enabled, recognition prefers Apple's on-device engine. If that engine is unavailable, Apple's server-based recognition may receive foreground microphone audio and return recognized text under Apple's terms. The listener stops when the app is backgrounded or the feature is disabled.
• Google Cloud — where the production service and its server-side data are hosted.
• Error monitoring and transactional email providers — for redacted diagnostics and account emails, under data-protection agreements.

Saved-capture speech-to-text runs on our own servers, not a third-party transcription vendor; the optional Apple wake-phrase path is the exception described above. We require processors Oltrex contracts to protect your data and process it only on our instructions. An AI provider or compatible endpoint you configure independently processes data under your agreement with that provider.

8. Storage, security & retention

We protect your data in transit with TLS/HTTPS, and we encrypt sensitive data at rest — including your audio recordings, connected-service access tokens, and AI-provider API keys you supply. Recording metadata, transcripts, and other derived data may remain while your account is active unless you delete them; raw audio may be pruned earlier under the service's retention setting. When you delete content or your account, active copies are removed; limited residual copies in routine backups are deleted on the normal backup cycle, except where retention is required by law.

9. Your choices & rights

In the app you can review, edit, and delete your tasks, memories, recordings, and voice profile; disconnect any connected service; and export a portable JSON copy of tasks, notes, transcripts and recording metadata, memories, and settings. Raw audio, API keys, the voice profile, and internal AI indexes are excluded from the export for security and size. You can request account deletion — which removes active account data and Oltrex's stored connected-service credentials, subject to the limited backup and legal-retention exceptions above — using in-app deletion or by emailing founder@heyoltrex.com. Depending on where you live (including the EU/UK under GDPR, California under the CCPA/CPRA, and India under the DPDP Act), you may have rights to access, correct, delete, or port your data, and to withdraw consent; contact us to exercise them.

10. Children

Oltrex is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes & contact

We'll post material changes here and update the date above. Questions or requests: founder@heyoltrex.com.