Privacy Policy

Pally is a personal assistant you can reach over iMessage or RCS, or by calling the number you text it on. On Pally Max it can also place calls for you and gets its own dedicated phone number and email address. You talk to it like a person, and it helps you get things done: answering questions, remembering what matters, following up, researching, reaching people, calling, emailing, and taking action across the apps you connect.

Pally runs as a secure cloud service. To understand your messages and carry out what you ask, it processes your message content and the data from your connected accounts on our infrastructure, including with AI.

We design Pally to process only what it needs, keep your data encrypted in transit and at rest, isolate it by user, and leave you in control of what is connected, remembered, and deleted.

Here is what we process and why.

Messages and requests you send Pally

• Your messages and Pally's replies over iMessage or RCS, including text and any media or attachments you share
• On Pally Max, email sent and received through Pally's own email address
• If you add Pally to a group chat, messages from the group and participants' handles and names
• The requests you make and the context needed to carry them out
• Service, product, policy, or account updates that Pally's team sends to your Pally chat
• Per-recipient delivery state for those updates, used to prevent duplicate delivery and diagnose delivery failures
• Campaign message copy and aggregate delivery results, retained as operational records

We process and store these conversations so Pally can understand you, respond, and take part in the chats you add it to. Group conversations may include personal information about other participants. You can delete individual things in chat. When you delete your account, we remove or anonymize recipient-level account, connection, conversation, and provider identifiers associated with service communications, and the delivered chat message is deleted with your conversations. Campaign message copy and aggregate delivery results remain as operational records.

Memory

• Things you ask Pally to remember
• Profile details you share, such as your name, location, work, interests, and preferences
• Follow-ups, reminders, and open tasks
• Things Pally learns while helping you, including summaries and facts derived from your conversations and connected accounts

We store these so Pally can bring them back at the right time. You can ask Pally what it remembers or tell it to forget anything at any time, and we delete it.

Your contacts

Pally keeps a private contacts book of the people in your life. It may include names, handles, birthdays, relationship notes, and interaction summaries drawn from your conversations and the accounts you connect, such as WhatsApp, iMessage, your calendar and email, and your address book. We use it only to help you with the people you actually talk to. It is never shared, and you can delete any contact or ask Pally to forget what it knows about someone.

Referrals and personal invites

When you ask Pally to refer a friend personally, the short introduction you approve - their name and how you think Pally could help them - is stored so their Pally can be genuinely useful from their first message. The same applies in reverse: if a friend referred you personally, your Pally may start off knowing the introduction they shared. Either of you can ask Pally to forget it at any time, and it is scrubbed automatically when either account is deleted or reset.

Connected accounts

• When you connect an app (WhatsApp, Gmail, Outlook, Google Calendar, Google Drive, Google Docs, Google Sheets, iCloud Calendar, iCloud Mail, iCloud Contacts, Notion, Linear, Slack, GitHub, Jira, Confluence, Todoist, Splitwise, Instacart, Granola, X, or a growing set of others), you authorize Pally to access the data needed to do what you ask

Pally only uses the connections you turn on, and only to help you. It does not bulk-copy your connected accounts. Your mailbox stays in Gmail and your notes stay in Notion: Pally reads what a task needs on demand and keeps only the information described in this policy, such as memories, contact details, files you ask it to save, finance summaries, and a history of actions you asked it to take (like email unsubscribe requests: the sender, subject line, and result), which you can view on your dashboard and which is deleted with your account.

OAuth app connections are brokered by Composio. Pally's database stores the connection status, not the OAuth tokens. You can disconnect any app at any time, which revokes Pally's access.

With WhatsApp, Pally watches connected chats only to flag messages that need you and prepare your catch-ups; it never joins or replies in your conversations, and never sends anything without your approval. So it can work in the background, your WhatsApp data is processed and stored on a dedicated per-user server, encrypted in transit and at rest. It is removed when you disconnect WhatsApp or delete the data.

LinkedIn (through your Mac)

You can connect LinkedIn through the Pally companion app on your own Mac. You sign in to LinkedIn yourself, in a window the companion opens — Pally never sees, types, or stores your LinkedIn password. Your LinkedIn session stays in your Mac's Keychain and is never sent to or stored on Pally's servers. So Pally can answer questions about your network and messages quickly, the companion keeps a copy of your LinkedIn connections and message history in an encrypted store on your Mac; that local copy is deleted when you disconnect LinkedIn. Anything Pally reads for you — a connection's details, a message — becomes part of your Pally conversation and is handled like the rest of your conversation data. Pally sends LinkedIn messages, and accepts or declines connection requests, only with your approval.

To let you search your LinkedIn connections and messages by meaning, their text is sent to our AI provider (OpenAI) to create search embeddings, under the AI processing terms below and with no training on that data; the resulting embeddings are stored on your Mac, not on Pally's servers.

Apple Notes (through your Mac)

You can let Pally read your Apple Notes through the companion app on your own Mac. You grant access with one click to only your Notes folder — the companion does not use Full Disk Access, and the grant covers nothing else on your Mac. Pally reads and searches your notes on demand, on your Mac; nothing from your notes is copied to Pally's servers, and there is no background sync or bulk upload. Anything Pally reads for you — a note you ask about, a search result — becomes part of your Pally conversation and is handled like the rest of your conversation data. Password-protected notes stay locked: Pally can see that they exist but cannot read them. You can revoke the Notes grant in the companion app at any time.

You can also add your own MCP servers as custom integrations. The data Pally exchanges with a custom server is governed by that server operator's own terms and privacy practices.

Secure account sign-in

When you connect a website account, you sign in yourself through a secure browser session run by our browsing providers. Pally never sees, requests, types, or stores your passwords or one-time codes.

To keep you signed in for the tasks you authorize, these providers may store your session credentials, fully encrypted in transit and at rest. Their handling is governed by their own privacy policies: Browser Use, Browserbase, Bright Data.

Cloud Mac (hosted Companion)

Cloud Mac is an optional add-on. When you turn it on, Pally runs a dedicated, Pally-operated Mac in the cloud that stays signed in to your iMessage, so Pally can watch and act on your personal conversations even when your own devices are off. To set it up, you sign in to your Apple Account on a secure Pally page: your Apple ID password is used once, on that page, to sign your dedicated Mac in to iMessage, and is never stored by Pally, saved to our database, or shown in your chat. You approve the sign-in from your own iPhone, which will show the region your dedicated Mac runs in. Your dedicated Mac is isolated to you and encrypted; the message content it processes is handled like the rest of your conversations, and it is signed out and wiped when you turn off Cloud Mac or delete your data.

On-device Companion

The Pally Companion is an optional Mac app you install on your own computer. It lets Pally act on your Mac for things you ask for, such as managing your iMessage inbox and running terminal commands and coding agents in folders you explicitly grant. To do this it keeps, on your Mac, a list of the folders you have granted and the git repositories it finds there (names, paths, and remote URLs), and it stores the activity these produce, such as command output and coding-session progress, the same way Pally handles the rest of your conversation data. Your code stays on your Mac and coding agents run under your own developer accounts. You can withdraw a folder's access at any time.

Controlling your Mac

With your permission, Pally can see your Mac's screen, use its accessibility features, and control it — moving the pointer, clicking, typing, and operating apps — to do things you ask. You grant Screen Recording and Accessibility to the companion app; Pally can do only what those permissions allow, and you can revoke them anytime. When Pally needs to see the screen to act, a screen capture is sent to our AI provider to reason over, under the AI processing terms below, with no training on that data. Actions that change your Mac ask for approval unless you turn on hands-free control for that Mac. This applies to both your own Mac and a Cloud Mac.

Files you save

Pally stores attachments and emails you explicitly ask it to save, along with files it creates for you, such as spreadsheets and PDFs. Files are encrypted, subject to size caps, and deletable at any time.

Trackers

You can ask Pally to keep structured logs of things you choose to track, such as meals, workouts, medications, or expenses. Entries are stored so Pally can answer questions about your totals and trends, and they appear in your dashboard. You can correct or delete individual entries in chat, archive a whole tracker, and everything is deleted with your account.

Bank accounts

If you choose to link a bank account through Plaid, Pally stores the account balances and transaction summaries you authorize so it can answer your money questions. This access is read-only by design: Pally cannot move money, pay bills, or make transfers. Your bank credentials stay with Plaid, and access tokens are kept in an encrypted secrets vault, not Pally's database. Unlinking your bank deletes the stored finance data and revokes access at Plaid.

Purchases

When you approve a purchase at checkout, payment uses a single-use virtual card issued by AgentCard. The card is capped at the exact total you approved and closed after the charge. Pally never stores card numbers: they are held in memory only for the checkout and are never logged. If AgentCard requires identity verification, it happens on AgentCard's own surfaces, and Pally does not keep your identity documents.

Flight booking

When you book a flight through Pally, we collect and store the traveller details needed to complete the booking: name, date of birth, gender, title, email, and phone number. Card payments for flights are processed by Duffel, our travel booking provider, acting as merchant of record with payment processing by Stripe; Pally never stores your card number. Traveller details are shared with Duffel and the airline solely to complete your booking, and are retained by Pally to prefill your future bookings until you delete them or your account.

Phone calls

You can talk to Pally on the phone on any plan by calling the same number you text it on; Pally verifies it's you with a PIN before the call gets access to anything. On Pally Max, Pally can also place calls on your behalf, such as calling a restaurant, always with your go-ahead, from its own dedicated number. Twilio carries the call audio, and OpenAI's realtime voice AI processes it live. Calls are never recorded. Pally keeps a text transcript so you have a record of what was said, and you can delete it like any other conversation.

Location

Location sharing is optional and off by default. If you share your location with Pally through iMessage, it stores your latest location, a short recent history, and places where you spend time to offer nearby suggestions, place-based reminders, and travel awareness. Pally receives only your own location and has no access to anyone else's. You can stop sharing at any time and delete the location data.

Account and authentication data

• Your phone number and email, account identifiers, and authentication tokens used to recognize you and keep your account secure

AI processing

Anthropic powers Pally's assistant intelligence. OpenAI powers realtime voice calls, voice-note transcription, and understanding features such as embeddings that make memory, and your connected LinkedIn network and messages, searchable. Both process Pally's requests under their own privacy policies and API data commitments. Neither uses Pally's API data to train its models. Pally also uses open-source models, routed through OpenRouter, for lightweight message triage.

You can read how each provider handles data: Anthropic Privacy Policy, OpenAI Privacy Policy.

Usage and diagnostics

• Pseudonymous usage events, app and operating-system version, device type, and general performance metrics

We use first-party, internal analytics to keep Pally reliable, and Google Analytics on our website to understand which pages are useful. We do not use advertising trackers, and we do not send marketing emails.

Billing

Pally offers Free, Pro, and Max plans. If you choose a paid plan, payments are handled by Stripe. We do not store full card numbers.

Customer support

• Your email address and anything you choose to include in your message
• Diagnostic logs only if you explicitly choose to send them

Under GDPR, we rely on the following legal bases.

Contract (Article 6(1)(b))

To provide the Pally service and its features, including understanding and responding to your messages, remembering what you ask, connecting the apps you choose, and managing your account.

Legitimate interests (Article 6(1)(f))

• Keeping the service reliable and secure
• Preventing fraud, abuse, and misuse
• Understanding general usage patterns to improve Pally, including aggregated website analytics

We carry out legitimate-interest balancing tests where required.

Consent (Article 6(1)(a))

• Optional diagnostics
• Optional product communications
• Each app connection you choose to authorize and optional location sharing

Legal obligations (Article 6(1)(c))

To comply with tax, accounting, regulatory, and consumer-protection laws.

GDPR (EU/UK)

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure, the right to be forgotten (Art. 17)
• Right to restriction (Art. 18)
• Right to portability (Art. 20)
• Right to object to processing (Art. 21)
• Right to withdraw consent at any time
• Right not to be subject to automated decision-making (Art. 22)

CCPA/CPRA (California)

• Right to know what categories of personal information we collect
• Right to access specific pieces of information
• Right to deletion
• Right to correct inaccurate information
• Right to opt out of sale or sharing (we do not sell or share data for advertising)
• Right to limit the use of sensitive personal information
• Right to non-discrimination

You can exercise any of these rights at any time by contacting privacy@pally.com, and we may take reasonable steps to verify your identity. Many controls are also available right in the chat: you can ask Pally what it remembers, tell it to forget something, or disconnect any connected app.

• Messages and Pally's replies, memory, contacts, call transcripts, saved files, finance data, and location data: retained while your account is active and until you remove them or delete your account. You can delete individual things in chat, ask Pally to forget anything, or ask it to delete your data. Deleting your account deletes these items from Pally's systems; service-communication operational records are handled as described below.
• Service communications: campaign message copy and aggregate delivery results are retained as operational records. When you delete your account, recipient-level account, connection, conversation, and provider identifiers are removed or anonymized, and delivered chat messages are deleted with your conversations.
• Connected apps (other than WhatsApp): accessed on demand without bulk-copying your accounts. Pally keeps only the information described in this policy, including memories and contact details derived while helping you and files you ask it to save.
• WhatsApp: processed and stored on a dedicated per-user server, encrypted in transit and at rest, and removed when you disconnect or request deletion.
• Cloud Mac: your Apple ID password is used once to sign your dedicated Mac in to iMessage, never stored, and the dedicated Mac is signed out and wiped when you turn Cloud Mac off or delete your data.
• LinkedIn: your session stays in your Mac's Keychain and never reaches Pally's servers; the connections and message history cached on your Mac, and their search embeddings, are deleted when you disconnect LinkedIn or delete your data.
• Apple Notes: read on demand from your Mac through a folder grant you give the companion app; nothing from your notes is copied to Pally's servers, and access ends the moment you revoke the grant in the companion app.
• Personal referral invites: pending introductions are removed with the referrer's data, and the introduction on a completed referral is scrubbed when either account is deleted or reset.
• Linked bank accounts: unlinking deletes the balances and transaction summaries stored by Pally and revokes access at Plaid.
• AI processing: handled by our AI providers under their own privacy policies and API data commitments.
• Secure browser sign-in: session credentials are stored, fully encrypted, by our browsing providers to keep you signed in, and removed when you disconnect or delete.
• Account and authentication data: kept while you maintain an account.
• Internal analytics: retained for a limited period, then deleted or aggregated.
• Support communications: kept only as long as needed to resolve your issue.

Pally is a texting service, so it does not depend on browser cookies to work. Where the service uses cookies or similar technologies, they are strictly necessary to operate it, for example to keep a secure browser sign-in session active while you connect an account. We also use Google Analytics on our website to understand which pages are useful, using analytics cookies; analytics data is aggregated and is not used for advertising. We do not use advertising or cross-site tracking cookies.

Pally Technologies, Inc. is based in the United States, and your data may be processed there. If you are located in the EU or UK, we rely on legally recognized safeguards for these transfers:

• Standard Contractual Clauses (SCCs)
• Data Processing Agreements (DPAs) with our service providers
• Appropriate technical and organizational safeguards

We may access, preserve, or disclose your information if we believe in good faith that it is reasonably necessary to comply with a law, regulation, legal process, or enforceable governmental request; to enforce our Terms and policies; to detect, prevent, or address security, fraud, or technical issues; or to protect the rights, property, or safety of our users, the public, or Pally. Where we are legally permitted, we will make reasonable efforts to notify you of legal requests for your data.

We implement industry best practices to protect your data, including:

• Encryption of data in transit and at rest
• Strict tenant isolation, so your data is never exposed to other users
• Least-privilege access controls and logging
• Minimization of personal data across our systems
• Regular security reviews

No system is perfectly secure, but we design Pally to minimize what is processed, keep your data encrypted and tightly controlled, and give you practical ways to see and delete what Pally knows.

We work with a small set of service providers, each bound by data-processing agreements. They process only what their function requires, and none of them receive your data for advertising.

We do not sell or share your data with advertisers. A current list of subprocessors is available on request.

Pally is intended for adults. You must be at least 18 to use Pally, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has used Pally, contact us and we will delete the data.

We may update this policy from time to time. If changes are significant, we will notify you by text, email, or in-app before they take effect.

Pally Technologies, Inc.

Email: privacy@pally.com

Address: 643 Teresita Blvd, San Francisco, California, US 94127