Privacy Policy

AkMe is a personal health app: a journal and a team of AI agents that work with what you record in it. It is operated by A4AI LTD, a private limited company registered in England and Wales, company number 17272953, registered office 128 City Road, London, EC1V 2NX (“A4AI LTD”, “we”, “us”). A4AI LTD is the controller of your personal data. This page explains in plain language what personal data the service and this website hold and what happens to it.

What we collect

• Account data — name, username, email address, interface settings.
• What you record — everything you enter in the app and your conversations with the agents.
• Photos you send — for example of meals, product labels, documents and, if you choose, progress photos.
• What the agents remember about you — such as injuries, limits, equipment, routine and agreements. You can see all of it in the app, and edit or delete it.
• Technical data — request logs and error reports needed to run the service and fix problems.
• Data from connected devices and services, only after you have connected one and approved access on the provider’s page:

• Oura — sleep sessions, daily sleep, readiness, activity, heart rate, workouts, sessions (such as meditation and breathing), stress and tags, plus your Oura user ID, so that incoming updates reach your journal and no one else's

We do not receive your password for a connected service. We do not collect or use your device location, contacts or advertising identifiers. Photo metadata, including location, is removed when the photo is uploaded.

Why we use it and on what basis

• To provide the service — to keep your journal, to let the agents base their answers on your actual data and to notify you. Basis: our contract with you.
• Information about your health — such as weight, measurements, sleep, symptoms and injuries — is special category data. We process it only with your explicit consent, which you give in the app and can withdraw at any time by deleting the data or your account.
• To keep the service secure and to diagnose and fix problems. Basis: our legitimate interest in a working, secure service.
• To handle your beta application. Basis: your consent, given in the application form.

We do not use your data for anything else. No advertising, no sale of data, and no profiles for advertising or for third parties. The agents keep notes about you only to help you, and you can see and change them on the Memory screen.

Applying for the beta

If you apply for the beta on this website, we receive your name, email address, country and city, whether you have a suitable device and a supported wearable, your preferred language, your goal, if you state one, and the source tag of the link that brought you here, if there was one. We suggest your country and city based on your connection; you can change them, and we don’t store your IP address. If a friend invited you with a personal link, the invite code from that link is saved with your application, so we know who invited you; it travels in the link itself, and we don’t set a cookie for it. We use this data only to choose the next group of testers and to email you about the beta. We do not ask about your health in the application. If you become a user, we delete the application once your account is set up. If you do not, we will delete it 12 months after our last email to you, or earlier if you ask.

This website

• We count visits with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and does not track you across sites; we see only aggregate figures — pages, referring sites, countries, devices and loading speed.
• If you switch between the light and dark theme, the site remembers your choice in your browser (the theme setting). It is set only when you switch, is never sent to us or to anyone else, and without it the site follows your system theme.
• No advertising or social-media trackers.

Who processes it

• Hosting — servers rented from Hetzner in the European Union. Databases and file storage run there under our control.
• AI providers — to generate each answer, we send your message and the relevant part of your data to an AI provider through its API. As of the effective date, these are:

• Anthropic, PBC — AI models (Claude) — United States
• Google Cloud EMEA Limited — AI models (Gemini) — Ireland; processing may take place in the United States

The list changes as models change, and we update this page when it does. These providers act as our processors, receive only the data needed for each answer and do not use your data to train their models.

• Device and service providers — they send us your data; we send them nothing about you except the requests needed to retrieve it.
• Website and email — Cloudflare serves this website, provides its analytics and forwards email sent to our address; our emails to you are sent through Resend.

Transfers outside the UK and the EEA

Your data is stored in the European Union. Some of our processors are based in the United States or may process data there: the AI providers listed above, Cloudflare and Resend. The United States may not offer the same level of data protection as the UK or the EEA. We send only the data each task needs, never your password, and these transfers are covered by the providers’ data processing terms, which include the standard contractual clauses approved by the European Commission, with the UK Addendum, and, where a provider is certified, the EU–US Data Privacy Framework and its UK Extension.

How long we keep it

• Raw data received from device and service providers — 90 days, then deleted automatically. The journal entries created from it remain until you delete them.
• The technical log of incoming provider notifications — 30 days.
• Your journal, conversations, photos, what the agents remember and your account — until you delete them or ask us to.
• Beta applications — as described above.
• Technical logs and error reports — up to 30 days.

Your rights and choices

• Disconnect a device or service on the Integrations screen, or revoke access on the provider’s side. Collection stops; existing journal entries remain until you delete them.
• Turn off a single data type on the same screen — we stop retrieving it.
• See, edit or delete what the agents remember on the Memory screen.
• You have the right to get a copy of your personal data, to have it corrected or deleted, to receive it in a portable format, to object to or restrict its processing, and to withdraw your consent at any time. Email hello@a4ai.dev from the email address linked to your account. We will act on your request within one month.
• You can also complain to the Information Commissioner’s Office (ico.org.uk) or to the data protection authority in the country where you live.

Security

Access tokens are stored encrypted. Traffic is encrypted in transit. Internal services are reachable only over a private network. No system is perfectly secure; if a breach affects your data, we will tell you.

Children

The service is not intended for anyone under 18.

Changes and contact

When this policy changes materially, we will update the effective date and notify users in the app and beta applicants by email. Operator: A4AI LTD, a private limited company registered in England and Wales, company number 17272953, registered office 128 City Road, London, EC1V 2NX · hello@a4ai.dev.