Privacy Policy

01Who we are

The operator of the Service is Valiantsin Levanovich (developer ValentinDev on Google Play). For any questions about data processing, write to [email protected].

FRIDAY is provided to organizations. Accounts are created by the organization’s administrator; there is no self-registration. As regards employees’ data, the organization decides who gets access, and we process the data so that the Service can work.

02What data we process

• Account: name, email address, password hash, organization and role in it.
• Commands and dialogs: command text, recognized voice-command text and assistant replies.
• Voice recordings of commands — only while they are being recognized (section 05).
• Tasks and reminders: tasks, lists, reminders, notification settings and selected apps, for example the navigator.
• Files: message attachments and documents in your organization’s library.
• Data from connected services, where needed for a specific command (sections 04 and 07).
• Technical data: the device’s push notification token, IP address, and the time and result of requests in the server logs.

We do not collect location data or advertising identifiers and do not use third-party analytics or advertising systems.

Connection request

If you submitted a request through the “Request access” form on friday-assistant.com, we receive the data you entered in it. A FRIDAY account is not needed for this.

• What data: full name, the contact method you chose and your phone number or Telegram username, email address, organization, and a comment if you wrote one.
• Why: to contact you by the method you chose, clarify your tasks and connect your organization to FRIDAY. This data is not used for mailings or advertising.
• Legal basis: your consent, given by the checkbox in the form. The request cannot be sent without it, but you can write to us at [email protected].
• Who receives it: only we see the request. It is stored on our server, and traffic passes through Cloudflare (section 07). If you chose Telegram, WhatsApp or Viber, we will write to you in that messenger.
• Retention: consent remains valid; the request is stored for 12 months from the date sent, then deleted.
• Withdrawing consent: write to [email protected] with the subject “Request deletion”. We will delete the request within 15 days and will no longer contact you about it.

03Android app permissions

Each permission is requested at the moment the relevant feature is needed, not when the app starts. You can revoke a permission in the phone settings.

FRIDAY does not place calls itself: the Phone app opens with the number dialed, and you start the call. The app does not request access to location, SMS or the call log.

04Google user data

You connect your Google account yourself in the web dashboard. FRIDAY requests the following permissions and uses them only as described below.

How we handle Google data

• We use it only for features that you see in the interface and requested yourself.
• We do not sell it, do not pass it to advertising networks or data brokers, and do not use it for advertising, including personalized advertising.
• We do not use it to develop, improve or train generalized artificial intelligence or machine learning models.
• We do not use it to determine creditworthiness or for lending purposes.
• Humans do not read this data, except where you explicitly allowed it for specific data, where it is necessary for security (for example, investigating abuse) or to comply with the law, or where the data is anonymized and aggregated for the Service’s internal operations.
• We share it with third parties only to carry out your command: for example, a contact that was found or the text of an email you ask to send is passed to the OpenAI language model to compose a reply (section 07).
• Google access tokens are stored encrypted. The contents of emails and contacts are not stored separately: they may remain only in the conversation history where you requested them, and are deleted together with it.

You can revoke FRIDAY’s access to your Google account at any time on the page myaccount.google.com/permissions. We delete stored access tokens on your request to [email protected] within 15 days, and also when the account is deleted.

05Voice and the wake phrase

• A voice command is recorded after you tap the microphone or say “Hello, Friday” and is sent to the FRIDAY server over a secure connection.
• Speech is recognized by a recognition model that runs on the FRIDAY server. The audio is not shared with third parties and is deleted right after recognition.
• The wake phrase is recognized on the phone by an offline model. Sound before the phrase is not recorded, not stored and never leaves the device.
• Replies are read aloud by the built-in Android speech synthesizer right on the device.

06How we use data

• Carry out your commands and show the result.
• Deliver reminders and notifications in the way you chose.
• Maintain accounts, organizations, roles and invitations.
• Respond to connection requests submitted from the website.
• Send service emails: invitations and password reset links.
• Ensure security, prevent abuse and fix errors.
• Comply with the law.

Legal bases for processing: the contract with your organization, your consent when you submit a connection request, connect services and grant permissions, our legitimate interest in the security of the Service, and legal requirements. We do not show advertising and do not build advertising profiles.

07Who we share data with

We do not sell or rent personal data. Data is received only by the providers without which the Service cannot work, and only to the extent needed.

Viber receives no data from FRIDAY: the app only opens a Viber chat on your phone with the prepared text, and you send it. We may also disclose data if required by law or by a decision of an authorized body.

08Where and how long data is stored

• Data is stored on a server in Kazakhstan. OpenAI, Google and Cloudflare may process data in other countries, including the United States.
• Account, tasks, reminders and settings — while the account exists.
• Connection requests — 12 months from the date sent; earlier on your request (section 02).
• Conversation history — for a limited period, after which it is deleted automatically; earlier on your request.
• Message attachments are deleted automatically when the retention period ends. Documents in the organization’s library are kept until the organization deletes them.
• Voice recordings are deleted right after recognition.
• Google and Telegram tokens — for as long as the connection is active.
• Database backups — 14 days.
• Server logs — 30 days.

09How we protect data

• All connections use HTTPS (TLS).
• Google access tokens are stored encrypted; passwords are stored only as a cryptographic hash.
• Access to data is separated by organization and role.
• The language model has no direct access to the database or external accounts: it calls FRIDAY tools, and the server checks permissions for every action.
• Sending emails and messages requires your confirmation, and the server enforces this rule.
• The database is backed up daily.

10Your rights

• Revoke Google access at any time on the page myaccount.google.com/permissions, and Telegram access in the Telegram settings (“Devices”), and ask us to delete the stored connection.
• Turn off notifications and background wake-phrase listening in the app, and revoke Android permissions in the phone settings.
• Request a copy of your data, or its correction or deletion, from the organization’s administrator or at [email protected]. We provide information about your data within 5 business days, and correct and delete data within 15 days.
• Withdraw consent to the processing of a connected service’s data by revoking access in that service itself and letting us know.
• Withdraw consent to the processing of connection request data by writing to [email protected] (section 02).

11Account and data deletion

You can delete your FRIDAY account and the data linked to it in one of two ways.

You can also delete individual data without deleting the account: revoke access in the service or write to us, for example to delete a connection or the conversation history.

12Children

FRIDAY is intended for use in organizations and is not intended for persons under 16. We do not knowingly collect children’s data. If you believe a child has given us data, write to us and we will delete it.

13Changes to this Policy

We may update this Policy. The date of the current edition is shown at the top of the page. We will notify organization administrators by email in advance of material changes, especially those concerning Google data.

14Contact

Questions about data processing, and requests for access, correction and deletion: [email protected].

Operator: Valiantsin Levanovich (developer ValentinDev on Google Play).