Privacy Policy.

What Alfred accesses

With your explicit permission, Alfred can read your Gmail messages, Google Drive files and Google Calendar events (never send, modify or delete them), and, only if you switch it on, change individual cells in Google Sheets you choose.

Alfred never creates, shares or deletes files, and never sends email.

Gmail, Drive and Calendar access is read-only at the API level. Google enforces this, not just our code. Sheets editing is an optional, separate permission you grant in Alfred’s settings.

Why Alfred asks for this

Alfred is a local-first assistant that helps you find and act on your own information faster: for example, surfacing a supplier email, pulling up a file, or checking your calendar before answering a question. Alfred reads your data only to answer your requests, or to run the reports you set up, such as filing your daily POS report from your email. If you enable Sheets editing, Alfred can also update a cell you point it at, for example recording today’s bookings in your daily report sheet.

Where your data goes

Alfred runs on your own computer and on a private server dedicated to your business, which we host and maintain for you on DigitalOcean. Your server is never shared with other customers. Data read from Google is used to answer your requests and to run the reports you set up.

To answer your request, the relevant text (for example the body of one email, or the cells of one sheet) is sent to the AI model provider you selected in Alfred’s settings, solely to generate that answer. We do not sell, rent or share your Google data with anyone else, we do not use it for advertising, and we do not use it to train AI models. No person at Alfred AI reads your Google data, except with your explicit consent for support, or where required by law.

How Alfred protects your data

All connections, to Google, to your AI provider, and between your computer and your server, are encrypted.

On your Mac, your Google sign-in token and your AI keys are encrypted with a key held in the macOS Keychain. On your server, only the Alfred service and our administrators can read them.

Your notes, settings and conversations are ordinary files on your computer and on your server, protected by access to those machines. We recommend keeping FileVault switched on on your Mac.

Alfred shows your data only to you and to the team members you add, at the access level you choose.

Our team can access your server to install updates and fix problems. We do not read your Google data, except with your explicit consent for support, or where required by law.

If Alfred hits an error, it sends an error report to Sentry, our error-tracking service: the type of error, where in the code it happened, and the app version. Your messages, files, names and keys are removed on your device before anything is sent.

Google API Services

Alfred’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

You can disconnect your Google account at any time in Alfred’s Settings. To fully remove Alfred’s access, you can also revoke it at myaccount.google.com/permissions.

Retention

Alfred keeps Google data only where you need it, in your vault on your computer and your server:

• the reports you ask Alfred to file from your email (the figures, or the document’s text)
• your conversations with Alfred, including its answers
• a working copy of Drive files that your reports use

It stays there until you delete it. We do not keep any other copy.

Disconnecting Google in Alfred’s Settings stops all new reading immediately. To have your data deleted from your server, email info@alfred-ai.co.

Contact

Questions about this policy: info@alfred-ai.co