Personal Assist — Privacy Policy
There is no account and no server of ours. Everything you put in the app stays on your phone, encrypted.
Only two things can leave the phone: text you choose to send to the optional English Coach (to the AI company whose API key you added), and dictated speech when your phone has no offline model for your language (to Apple or Google, your phone's native speech service). We never receive or store any of it.
1. What we collect
Nothing.
Personal Assist has no account, no sign-in, no analytics, no crash reporting, no advertising, no advertising identifier (IDFA / GAID), and no tracking of any kind. We do not operate a server that the app talks to, so we cannot see, access, or recover your notes, tasks, passwords, weigh-ins, attachments, or anything else you store in it.
2. What the app stores on your phone
Everything listed below is stored locally on your device only.
Notes, tasks, passwords (incl. 2FA setup keys), weigh-ins, Coach history
AES-256 EncryptedEncrypted database (SQLCipher, AES-256). Its 256-bit key is generated randomly on your phone and kept in the iOS Keychain or Android Keystore.
Photos, drawings and files attached to notes
App SandboxThe app's private sandboxed storage on your phone as files, protected by operating system file protection.
Coach API keys (if you add one)
Hardware KeystoreSecurely kept in the hardware-backed iOS Keychain or Android Keystore.
Settings (theme, paper, auto-lock time, weight unit, dictation language, backup timestamp)
Secure Key-ValueStored locally in the iOS Keychain or Android Keystore.
Content shared into the app from another app
Local ImportCopied directly into a new note. On iPhone, shared text/images pass briefly through an app group container and are removed once imported.
3. When information leaves your phone
3.1 The English Coach (optional, off by default)
The Coach checks English you write or say. It only functions after you add your own API key from Anthropic, OpenAI, or Google. When you use it:
- •What is sent: The specific text you ask it to check. When you build a practice drill, a few of your earlier corrected sentences of that kind are sent to create the exercises. When you first add a key, the app queries that provider for its model list to verify the key is valid.
- •Where it goes: Directly from your phone via HTTPS to the provider your key belongs to: Anthropic (
api.anthropic.com), OpenAI (api.openai.com), or Google (generativelanguage.googleapis.com). It never passes through Alltechzone servers. - •What is NEVER sent: Your notes, tasks, passwords, weigh-ins, photos, or other attachments are never sent.
- •The screen explicitly names the AI company each time before any request is transmitted.
- •Your key, your account: Requests are billed directly to your developer account with that provider under their respective terms and privacy policies: Anthropic , OpenAI , and Google .
3.2 Dictation
Dictation uses your phone's native speech recognition service:
- •If your phone has an offline model for the language you dictate in (English, Malayalam, Hindi, or Tamil), speech audio stays entirely on the device.
- •If your phone does not have an offline model installed, the operating system sends audio to its platform speech provider (Apple on iOS, Google on Android) to transcribe it. This is an OS-level service governed by Apple or Google.
- •The app clearly indicates which speech mode (on-device offline vs. online) is active each time you dictate.
3.3 Backups you export
You can export an encrypted backup file at any time. The backup is encrypted using SQLCipher (AES-256 with PBKDF2 key stretching) with a passphrase you choose (minimum 10 characters).
You choose the destination (cloud drive, computer, or message) through your phone's native share sheet. We have no access to your backup and cannot recover a lost passphrase. Without your passphrase, nobody can decrypt the file, including Alltechzone.
3.4 Your phone's own backups
- •iPhone: An iCloud or computer backup of your phone may include the app's encrypted database and attachments. An encrypted backup may also include Keychain items, enabling smooth transfer to a new iPhone. This is controlled by your Apple ID and iOS settings.
- •Android: The app explicitly opts out of Android's automatic cloud app-data backup service, preventing its database from being mirrored to Google backup servers.
3.5 External links
External links in the app (such as pages for obtaining AI provider API keys) open in your default web browser. Browsing on external sites is governed by each site's own terms and privacy policy.
4. Permissions
Each permission is requested strictly at the moment you invoke the feature that requires it. You can refuse or revoke any permission in device Settings; the remainder of the app continues to function normally.
Camera
Taking a photo to attach to a note, when you choose to.
Photos
Attaching photos you pick from your library.
Microphone & Speech Recognition
Dictation, only when you press the microphone button.
Face ID / Fingerprint / Device Passcode
Unlocking the password vault and confirming 'Erase everything'. The app never receives your biometric data; your phone only confirms whether authentication succeeded.
Notifications
Task reminders. They are scheduled and delivered entirely on the phone; no push notification service or server is used.
Internet Access
Used strictly for the optional English Coach (if configured) and dictation when your phone has no offline speech model for the selected language.
5. Security
SQLCipher AES-256 Encryption: The database is encrypted with a random 256-bit key kept securely inside the hardware iOS Keychain or Android Keystore.
Biometric Vault Lock: The password vault unlocks only with Face ID, fingerprint, or your device passcode. It locks immediately when leaving the app and upon reaching your configured auto-lock timeout.
Clipboard Auto-Clear: Any copied password is automatically cleared from the system clipboard after approximately 45 seconds. On Android, this clears even while in another app; on iOS, it clears while Personal Assist remains open.
Screen Capture Protection: Screenshots and video screen recordings are blocked while viewing password screens. In the iOS app switcher, the screen preview is blurred; on Android, the recent-apps preview is rendered blank via FLAG_SECURE.
No Diagnostic Logs: Production release builds of Personal Assist write zero diagnostic traces or sensitive data to the operating system's log system.
6. Keeping and deleting your data
Data Retention
Your data stays on your phone until you delete it. Deleting a note permanently removes its associated file attachments. Deleting a task cancels its scheduled local reminder.
Settings → Erase Everything
This in-app function permanently deletes all notes, attachments, tasks, passwords, weigh-ins, Coach history, and Coach API keys, and cancels all reminders. It mandates biometric or passcode confirmation before proceeding and cannot be undone.
Uninstalling the App
On Android, uninstalling removes all stored application data. On iPhone, uninstalling removes application files, but iOS may persist Keychain entries (such as Coach keys). We recommend executing Erase everything inside Settings prior to removing the app from an iPhone.
7. Children's Privacy
Personal Assist is not directed at children under the age of 13, and it collects no personal information from anyone.
8. Your rights
Because we do not collect, transmit, or hold your personal information on any server, we have no user data to inspect, provide access to, modify, or delete. You possess absolute control over your data directly within the app, including exporting an encrypted backup file and executing full on-device erasure (Erase everything).
This applies across all global privacy regulations, including the Australian Privacy Principles (Privacy Act 1988), the European Union and United Kingdom GDPR, and United States state privacy statutes. For any text sent to an external AI provider through the optional Coach or audio sent to Apple/Google for dictation, please contact those providers directly.
9. Changes to this policy
If Personal Assist ever modifies how information is handled, we will publish the revised policy here and update the effective date at the top. Material changes will also be highlighted in the application's release notes in the Apple App Store and Google Play Store.
10. Contact
Alltechzone
Victoria, Australia
Privacy inquiries: dev@alltechzone.au
Official Website: https://alltechzone.au