Privacy Policy

The voice profile is built by the Mac companion on your own machine from your local iMessage database, or in your browser from a WhatsApp export. Your raw messages are never uploaded. Only a small style profile (length, capitalization, emoji habits, sign-offs, per-relationship register) and the example messages you approve are stored with us.

We do not train or fine-tune models on your messages or on anyone else's. Every example in the profile is visible under Voice in the hub, and you can edit or delete each one, or delete the whole profile.

Account details: name, email, the phone number you link, timezone and language.

The texts and calls between your phone and your Selfphone number, and the messages relayed through bridges you turn on, for as long as needed to act on them and to show you Activity.

Data from connected accounts, read on demand to answer you or to build the brief: calendar events, message counts, ride quotes, balances if you connect a bank read-only.

Usage and cost per task, so the Usage page can show you what your Selfphone costs to run.

Where a service has an official API, we store a token you approved. Where it does not, you log in once through a cloud browser and we keep the logged-in session. We never see or store the password.

Tokens and sessions are encrypted with a key that exists only for your account. Browser tasks run in a microVM that is created for the task and destroyed afterwards. Users never share a machine.

Telephony: your texts and calls pass through a carrier-connected messaging provider (currently Twilio) to reach you.

AI: requests are processed by Anthropic's API under terms that do not permit training on your data. We send only what a task needs, and we cache the stable parts of your profile rather than resending them.

Infrastructure: hosting, database and storage providers in the United States. Payments: Stripe, which handles card details; we never see them.

We do not sell your data and we do not share it with advertisers.

Relayed message content is kept for 30 days for Activity, then deleted. Activity summaries, steps and costs are kept while your account exists. Screen-queue items are deleted when you mark them done or after 60 days.

Deleting your data from Settings removes the voice profile, activity, saved browser sessions and connector tokens immediately, and destroys the encryption key. Deleting your account also releases your number after 30 days.

You can export your data, correct it, or delete it from Settings at any time. If you are in a jurisdiction that grants additional rights, email us and we will honor them.

Selfphone is for people 18 and older. Household plans with locked-down numbers for children are not yet available and will come with their own terms.

Material changes are announced by email and in the hub at least 14 days before they apply. Questions and requests: privacy@selfphone.app.