Privacy Policy

Last updated October 4, 2026

Impo is a personal agent app made by IMPO ("IMPO", "we", "us"). This policy explains what information Impo collects, how we use and share it, how long we keep it, and the choices and rights you have. It applies to the Impo apps for iPhone and Android, to impo.ai, and to the services behind them (together, the "Service").

1. Information we collect

Account information

When you create an account or sign in, we receive your email address and an account identifier. If you sign in with Google, we also receive your name and profile picture from Google. Sign-in is handled by our authentication provider, Clerk.

Your conversations

We store the messages you send to Impo and the replies it produces, so your conversation history is available across sessions and devices. This includes anything you type or paste into a conversation. Please do not share information you do not want stored.

Chat voice input

When you hold an empty input on iPhone or Android, Impo records a short audio clip. When you release the input, the clip is sent to Impo's servers, which have Google Gemini turn it into text. In Chat, that text becomes your message; task input and drafts use transcription separately. A Chat clip may stay privately on your device while its message is waiting for confirmation or retry. Impo does not retain the clip on its servers and asks Gemini not to store it. Swipe up before releasing to cancel; nothing is sent. This voice input is separate from Echo and is not saved as an Echo recording.

Data you choose to connect

Health, Calendar, Reminders, Contacts, Gmail and other connected apps are each optional. When connected, Impo uses them only when you ask something that needs them. The results needed to answer that request are sent to our servers and our AI service, and are kept as part of that conversation's record (see How long we keep information). Details for each are in the sections below.

Echo recordings, transcripts and locations

If you start Echo, Impo records microphone audio, including while your iPhone is locked. Tap Stop to end recording. On-device speech detection selects speech segments, which are saved locally and uploaded directly to Impo's private Amazon S3 storage using temporary upload URLs. Our worker retrieves the audio for Google Gemini transcription. Impo removes successfully processed audio and keeps the transcript and recording times in Echo. We do not identify people from their voices. Obtain permission from others before recording them.

With “Add location to Echo” enabled and iPhone location permission, Impo collects location while Echo is recording, including on the lock screen. Collection stops when recording stops or pauses, or when you turn the setting off. Apple’s location and place-name services resolve an approximate city or district. Impo receives the place name, recording interval, measurement time and reported accuracy, not raw coordinates. Transcripts can span multiple places. Missing or stale locations remain unknown; recording still works without location.

You can add or remove your own place label, such as Home or Office. These labels are separate from device measurements. Recording locations and labels are stored with your Echo record and may be supplied to our AI service for Brief and memory processing. Deleting an Echo recording also removes its saved location metadata; memories already derived from it can be removed separately in Memories. Location names are not sent as instructions for speech transcription.

Device and request information

To answer questions about "today" or "this week" correctly, each request includes your device's current date and time zone. We also register your device with our servers (a device identifier and which on-device features, such as Health or Calendar, are available and enabled) so the right device can answer tool requests.

Notifications

If you allow notifications, Impo registers an installation identifier, platform and push token with your signed-in account. We store your Chat, Task and Brief notification preferences, delivery status, and recent foreground activity so we can deliver relevant updates and avoid interrupting you while you are using the app. Google Firebase Cloud Messaging delivers notifications to Android and, through Apple Push Notification service, to iPhone. Notification text is generic and does not contain conversation or transcript excerpts. You can change each category in Impo Settings and revoke notification permission in your device settings. Signing out revokes that installation's account registration.

Brief, city and language

Brief uses recent saved messages, completed Echo transcripts and tasks to generate personal briefs in scheduled background runs. We store your device language and time zone to choose the language and local timing of these briefs.

After setup, Impo asks to use location while you use the app. If allowed, it periodically refreshes a city-level snapshot in the foreground. Only city, country and update time are sent to Impo and its AI service; precise coordinates are not sent to Impo, and this Brief city refresh runs only in the foreground. Echo has its own recording-time location setting described above. Device location snapshots older than 24 hours are not used as current context. If access is denied, you can choose a city manually; that choice remains until you change or remove it or enable automatic location. It does not prove your current physical location. Notification categories are controlled separately in Impo Settings, alongside the system permission in your device settings.

Your personal agent profile

We store your personal agent's name, appearance selection and onboarding completion with your account, so setup can be restored after sign-in on another device. A custom personal agent photo and preview notes and tasks stay on the device where you chose or created them.

Technical and log information

Our servers keep operational records, such as request times, IP addresses, error details and the status of each request, to run, secure and troubleshoot the Service. We do not use third-party advertising or analytics SDKs in the app.

2. Health data

If you enable Health, Impo asks for read-only permission through Apple Health (or the equivalent system on Android). Apple and Google control these permissions; you can change them at any time in your device settings.

• What Impo can read: only the categories you allow, currently steps, active energy, heart rate and sleep.
• When: only when you ask a question that needs it, for example "How did I sleep this week?". Impo does not read Health data in the background.
• What is sent: the summaries and samples needed for your question are sent to our servers and our AI service to produce the answer.
• Impo never writes to Health, and never changes or deletes your Health records.
• Never for advertising or marketing. We do not use Health data for advertising, marketing or data mining, do not sell it, do not share it with data brokers or advertisers, and do not use it to train AI models.
• Not a medical service. Impo's answers are informational and are not medical advice, diagnosis or treatment.
• We do not store Health data in iCloud.

3. Calendar data

If you enable Calendar, Impo asks for permission through your device's calendar settings. It reads events (such as titles, times, locations and notes) only when you ask about your schedule, and sends the matching events to our servers and AI service to answer you. Impo does not create, change or delete calendar events.

Apple Reminders

If you enable Reminders, Impo can read matching reminders, including titles, notes, lists, due dates and completion status, and create a reminder when you ask. Relevant results are sent to our servers and AI service for that conversation. You can revoke access in Impo or your device settings.

Contacts on iPhone and Android

If you enable Contacts, Impo searches the contacts you allow when you ask about a person. Matching names, phone numbers, email addresses, organization, job title and birthday may be sent to our servers and AI service to answer you. Contact notes and photos are not included. Impo does not create, change or delete contacts. You can revoke access in Impo or your device settings.

4. Gmail, Google and other connected apps

If you connect Gmail or another app (such as Google Calendar, Google Drive, Notion, GitHub or Outlook), you authorize access through that service's own consent screen. Connections are managed by our integration provider, Composio, and your credentials for those services are never shared with Impo's app.

• What Impo can do: when you ask, use the actions the connected service allows for your account, such as searching and reading email, sending email, creating drafts, managing labels, or creating, updating and deleting items.
• Content from connected apps is treated as information for your request, not as instructions to Impo.

Limited Use disclosure. Impo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve user-facing features that are visible in Impo, such as signing you in, finding an email, or drafting a reply.
• We do not transfer Google user data to others except as needed to provide those features (for example, to our AI service to answer your request), to comply with law, or as part of a merger or acquisition with notice to you.
• We do not use Google user data for advertising, and we do not sell it.
• We do not use Google user data to develop, improve or train generalized AI or machine-learning models.
• Humans do not read your Google user data unless you give us permission (for example, for support), it is necessary for security purposes or to comply with law, or the data has been aggregated and anonymized for internal operations.

You can disconnect Gmail or any other app at any time in Impo, or remove Impo's access in your Google Account permissions.

5. How we use information

• To answer your requests and complete the tasks you ask for.
• To keep your conversation history, account and settings.
• To operate, secure, troubleshoot and maintain the reliability of the Service, including preventing abuse.
• To communicate with you about your account, security, or important changes.
• To comply with legal obligations.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it for advertising of any kind.

6. AI processing and model training

Impo's answers are generated by AI. To produce an answer, your message, relevant conversation history, and the connected data needed for your request are sent to our AI service, which is operated through our agent platform provider, Rebyte, and the AI model providers it uses. They process this information to generate responses on our behalf.

We do not use your conversations, Health, Calendar, Gmail or other connected app data to train AI models, whether ours or anyone else's.

7. How we share information

We share information only as described here. We use the following service providers, which process data on our behalf to provide the Service:

• Clerk — sign-in and account management.
• Amazon Web Services — hosting of our servers and database.
• Rebyte and the AI model providers it uses — generating answers to your requests.
• Google Gemini — transcribing voice input and Echo audio, and creating numerical representations of memory text for relevant retrieval.
• Google Firebase Cloud Messaging and Apple Push Notification service — delivering notifications to registered devices.
• Turso — storing account-scoped memories used by your personal agent.
• Composio — managing Gmail and other app connections, if you enable them.
• Cloudflare — delivery and security of impo.ai.

We may also disclose information when required by law or valid legal process; to protect the rights, property or safety of our users, IMPO or others; or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information or you will be notified of any change.

8. How long we keep information

• Account information and conversation history, including the connected data (such as Health, Calendar or email results) used to answer your requests, are kept while your account is active, so you can continue your conversations. They are deleted when you delete your account.
• Listening audio: audio awaiting upload stays on your iPhone, excluded from device backups, until our server verifies the uploaded file and accepts its transcription job. Confirmed audio is removed from active S3 storage after successful transcription or when you delete the recording. Failed transcriptions retain their audio so you can retry. Unconfirmed temporary uploads expire under a one-day S3 lifecycle rule. Older app versions may leave audio in workflow history until that service's retention period ends. We request deletion of the temporary Google file after each attempt; if deletion fails or a worker is interrupted, Google's temporary file expires within 48 hours. Copies in server backups expire with those backups.
• Listening transcripts: text stays until you delete the recording in Memories or delete your account. Deleting a recording clears its audio and text from our active database. Minimal recording identifiers, timestamps and an audio hash remain to prevent a delayed upload from recreating deleted content.
• Server logs are kept for 30 days for security and troubleshooting, then deleted automatically.
• We may keep limited records longer where required by law, or to resolve disputes and enforce our agreements.

9. Deleting your data

You can stop Impo's access at any time:

• Listening: tap Stop in Impo or its Live Activity to stop recording, or revoke microphone permission in iPhone Settings. Open Chat → Transcripts or Memories → Transcripts, select a recording, then tap Delete to remove it and its transcript. The Lock Screen Live Activity shows recording status and time, not transcript text; you can disable it in iPhone Settings.
• Health and Calendar: turn off access in Impo or in your device's privacy settings.
• Gmail and other apps: disconnect them in Impo or remove access in the service's account settings.

To delete your account and data, open Settings → Delete account. In versions with in-app deletion, review the warning, tap Continue, then type DELETE and confirm. This is permanent and cannot be undone. Your account closes immediately after the server accepts the request, and the app signs you out and removes that account’s pending messages and Echo audio on the device making the request.

Deletion covers your conversations, tasks, Briefs, memories, Echo audio and transcripts, connected-account links, and related records held by our service providers. Background cleanup normally finishes within 24 hours. A second cleanup pass catches uploads already in progress; service outages may delay completion while we retry. The saved deletion receipt lets you check completion after signing out. Removing Impo data does not delete the original data in your connected apps.

We revoke available Sign in with Apple authorization as part of deletion. If Apple authorization cannot be removed automatically, the app explains how to remove Impo in your Apple Account’s Sign in with Apple settings; this does not delay deletion of your Impo account.

We retain a minimal deletion receipt, a hashed login identifier and technical identifiers to prevent old sessions from recreating deleted data and to confirm completion; these records contain no conversation or recording content. Operational logs expire after 30 days. Copies in backups are removed as those backups expire, and data required by law may be retained only for that purpose.

If your older app version opens an email request, or you cannot access your account, email cj@impo.ai from your account address. We verify ownership, process manual deletion requests within 30 days, and confirm when complete.

10. Security

We protect your information with measures including encryption in transit (TLS) between the app, our servers and our database, restricted access to production systems, and keeping third-party credentials on our servers rather than on your device. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach where required by law.

11. Where data is processed

Our servers and database are hosted in the United States. Our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers.

12. Your rights

Depending on where you live (for example, in the European Economic Area, the United Kingdom, or California), you may have the right to:

• access the personal information we hold about you and receive a copy of it;
• correct inaccurate information;
• delete your information;
• object to or restrict certain processing, and withdraw consent where processing is based on consent;
• not be discriminated against for exercising these rights.

To exercise any of these rights, contact us at cj@impo.ai. We may need to verify your identity before acting on a request. You may also have the right to lodge a complaint with your local data protection authority.

13. Children

Impo is not directed to children under 13, or under the minimum age required in your country, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

14. Changes to this policy

We will update this page when our practices change and revise the date at the top. If we make material changes, we will notify you in the app or by email before they take effect.

15. Contact us

IMPO
Email: cj@impo.ai