Privacy Policy

Effective March 23, 2026

Osmo AI is developed and operated by Devello Inc.

Osmo AI ("Osmo AI," "we," "us," or "our") is a voice-first AI assistant for iOS that helps you manage your schedule and understand your inbox. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

This policy applies to:

• The Osmo AI iOS application
• Our related backend services and APIs
• The website pages at https://osmo.website/privacy and https://osmo.website/terms

1. Information We Collect

1.1 Google Account Information (via OAuth)

When you connect your Google account, we receive:

• Your name and email address (via Google Sign-In)
• OAuth access tokens and refresh tokens that allow Osmo AI to access your Google Calendar and Gmail (read-only)

These tokens are stored securely and are required for Osmo AI to access your Google data on your behalf.

1.2 Gmail Data (Read-Only)

If you grant Osmo AI Gmail read-only access, we may process:

• Email subject lines
• Email senders and recipients
• Email timestamps
• Email body content

We use this information only to:

• Summarize email messages
• Answer questions about your inbox
• Extract relevant information from messages when you ask the app to do so

Gmail message content is processed only to generate summaries and responses requested by the user. Email content is not permanently stored by Osmo AI except for temporary processing required to provide the service.

Osmo AI does not:

• Send emails on your behalf
• Modify or delete emails
• Use Gmail data for advertising
• Sell Gmail data to third parties

1.3 Google Calendar Data (Read/Write)

If you connect Google Calendar, we may access:

• Existing calendar events (titles, descriptions, times, attendees, locations)
• New events you ask Osmo AI to create
• Updates to existing events that you explicitly ask Osmo AI to change

We use this information to:

• Show your schedules
• Answer questions about your calendar
• Create or update events when you explicitly request it

1.4 Basic Account Identifiers

To operate your Osmo AI account, we may store:

• Your email address (typically your Google account email)
• Internal user IDs and authentication information
• Timestamps related to account creation, sign-in, and usage

1.5 Voice and Text Input

Osmo AI is a voice-first assistant. We may process:

• Voice recordings and transcriptions of your spoken requests
• Text input you type into the app

This input is used solely to understand your requests and provide responses.

1.6 Device Information and App Usage Data

To keep Osmo AI reliable and improve the experience, we may collect:

• Device type, operating system version, and app version
• Anonymous or aggregated usage data (for example, which features are used most)
• Diagnostic information such as crash logs or performance metrics

1.7 Location Data (Optional)

We do not collect precise location data unless you explicitly enable a feature that requires it. Location data, when collected, is used only to provide the feature you requested (for example, location-aware scheduling). We do not use location or device information for advertising.

1.8 Support and Communications

If you contact us (for example by email), we may collect:

• Your email address
• The content of your message
• Any additional information you choose to provide

We use this information to respond to your questions and improve our support.

2. How We Use Information

We use the information we collect to:

• Provide core Osmo AI features, including:
  • Summarizing email messages
  • Answering questions about your inbox
  • Showing your calendar schedules
  • Creating or updating calendar events when requested by you
• Operate and maintain the service, including:
  • Authentication and account management
  • Securing access to your data
• Improve Osmo AI, including:
  • Understanding how features are used
  • Fix bugs and improve Osmo's performance and reliability
• Communicate with you, including:
  • Responding to support requests
  • Sending important service-related notices (for example, changes to this policy or security alerts)

Where applicable, our legal basis for processing personal data includes providing the requested service, legitimate interests in operating and improving Osmo AI, and user consent where required.

We do not use your Gmail or Calendar data for advertising or for building advertising profiles.

3. Google User Data — Limited Use Disclosure

Osmo AI only accesses Gmail and Google Calendar data after you explicitly grant permission via Google's OAuth consent screen.

Specifically, Osmo only uses Google user data (Calendar and Gmail data) to provide and improve user-facing features that are visible and prominent in Osmo's interface. Osmo does not:

• Use Google user data for serving advertisements
• Transfer Google user data to third parties unless necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition, or asset sale with prior user notice
• Use Google user data for training machine learning or AI models that are unrelated to providing or improving user-facing features
• Allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with law, or the data is aggregated and anonymized for internal operations

Additional details on how we handle Google data:

• Gmail access is read-only:
  • We read email content in order to summarize messages and answer questions you ask.
  • We do not send, modify, or delete emails.
• Calendar access is read and write, but only as you request:
  • We read events to display your schedule and answer questions.
  • We create or update events only when you explicitly ask Osmo AI to do so.

4. Data Storage and Security

We take reasonable and appropriate measures to protect your data.

• Access tokens — Stored securely using industry-standard methods. Access is restricted to systems and services that need them to provide the features you request.
• Encryption and transport security — Data is encrypted in transit using HTTPS when sent between the Osmo AI app, our servers, and Google APIs. Where appropriate, data at rest is protected using common security best practices.
• Access controls — Access to production systems is limited to authorized personnel and services. We use logging and monitoring to help detect unusual access patterns.

No method of transmission or storage is perfectly secure, but we strive to use industry-standard protections and to review them regularly.

5. Third-Party Services

We rely on certain third-party providers to operate Osmo AI. These may include:

• Google APIs — for Gmail (read-only) and Google Calendar access
• Cloud infrastructure providers — for hosting the backend and databases
• AI model providers — for processing natural language and generating responses
• Analytics and logging providers — for crash reporting and performance monitoring

These providers act as our processors. They are allowed to use your data only to perform services on our behalf and are not permitted to use your data for their own advertising or unrelated purposes, in line with their contracts and applicable policies. Google user data is never used to train machine learning or AI models.

6. Data Retention and Deletion

6.1 Google User Data Retention

Google user data (calendar events, email content) is processed in real-time to fulfill your requests and is not stored permanently beyond temporary caching required to generate the immediate response. Once the response has been delivered, cached Google user data is discarded. We do not maintain a persistent copy of your Gmail messages or Calendar event details on our servers.

6.2 General Data Retention

We keep other information for as long as needed to:

• Provide Osmo AI services
• Comply with legal obligations
• Resolve disputes and enforce our agreements

In general:

• Account-level data (such as your email address and tokens) is retained while your account is active.
• If you request account deletion, we will delete or anonymize your personal data within a reasonable period, unless we are required to keep certain information for legal or compliance reasons.
• Cached processing results (such as recent AI summaries) may be deleted periodically as part of normal operations.

7. Your Rights and Choices

Depending on your location and local law, you may have rights such as:

• Access — You can request a copy of the personal data we hold about you.
• Correction — You can request that we correct inaccurate or incomplete data.
• Deletion — You can request that we delete your personal data, subject to legal obligations.
• Restriction or objection — You can ask us to limit certain types of processing where applicable.

You can exercise these rights by contacting us at sales@develloinc.com.

7.1 Revoking Google Access

You can revoke Osmo AI's access to your Google account at any time:

• Visit your Google Account permissions page: https://myaccount.google.com/permissions
• Find Osmo AI in the list of connected apps.
• Remove Osmo AI's access.

After revocation, we can no longer access your Gmail or Calendar through Google APIs. You can also separately request deletion of any stored data we still hold (see Data Deletion Instructions below).

8. International Data Transfers

Osmo AI may process your information in countries other than the one you live in, including where our infrastructure providers or service providers operate. Where we transfer personal data internationally, we aim to use appropriate safeguards consistent with applicable law.

9. Children's Privacy

Osmo AI is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at sales@develloinc.com, and we will take steps to delete that information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of the policy. For material changes, we may also provide additional notice (for example, in-app or by email, when appropriate). If you continue to use Osmo AI after the updated policy becomes effective, that use will be subject to the new policy.

11. Contact

If you have any questions or concerns about this Privacy Policy or your data, please contact us:

Devello Inc. (Osmo AI team)
sales@develloinc.com

Data Deletion Instructions

If you want to delete your data:

1. Revoke Google access
   • Go to https://myaccount.google.com/permissions
   • Find Osmo AI and remove its access to your Google account.
2. Request account and data deletion from Osmo AI
   • Email us at sales@develloinc.com from the email address associated with your account.
   • Include a clear request such as: "Please delete my Osmo AI account and all associated data."
3. What we will do
   • We will verify your request.
   • We will delete or anonymize your personal data (including stored tokens and associated content) within a reasonable period, unless we are required to keep some data for legal, security, or fraud-prevention reasons.
   • We will let you know when the process is complete.