Privacy Policy
This policy explains how Telri — the personal assistant available as an iPhone app and at the web address provided to you — handles personal data. We wrote it to be read, not to be skimmed past.
1. Who is responsible
Dmytro Gavrylchenko, self-employed professional (autónomo) registered in Spain, trading as GAVRS Corporation.
Email: privacy@gavrscorp.com
We are the controller of the personal data described here. You can contact us about anything in this policy at the email above.
2. What Telri does with your data, in short
- Telri only reads the accounts you connect yourself, and only to answer your requests and prepare your briefs.
- Nothing is sent, published or deleted on your behalf without your explicit confirmation.
- We do not sell your data, do not show ads and do not use your data to train AI models.
- Health, notes, contacts and messenger data are encrypted at rest.
- You can disconnect any account at any time, and ask us to export or delete all your data (see Delete your data).
3. Data we process
| Category | Examples | Why |
|---|---|---|
| Account | Name, email, sign-in identifiers, settings, device push token | To provide your account and notifications |
| Conversations | Your messages to Telri, its answers, files you attach, the memory you ask Telri to keep | To answer you and keep context |
| Connected mail | Messages, senders, attachments in mailboxes you connect (Google, Microsoft, IMAP) | Unified inbox, summaries, drafts, follow-ups |
| Calendar, contacts, files | Events, contact cards, documents in services you connect | Scheduling, briefs, finding documents |
| Messengers | Telegram chats and contacts if you connect your account | Showing and summarising your conversations |
| Health and fitness | Apple Health data you allow (activity, workouts, sleep, body measurements), nutrition and training logs | Health overview and training plans |
| Voice | Short audio when you dictate | Converting speech to text; audio is not kept after transcription |
| Approximate location | City or coordinates, only if you allow it | Weather and local time in briefs |
| Technical | Error reports, usage counters, AI cost per request | Reliability, security, fair-use limits |
| Early-access list | Email, optional role, language, where you came from, time of consent (website form) | Emails about early access and launch; kept until you unsubscribe or ask us to delete it |
Health data is a special category of personal data. Telri processes it only with your explicit consent, which you give in the app and can withdraw at any time.
4. Legal bases
- Contract (Art. 6(1)(b) GDPR) — providing the features you use.
- Explicit consent (Art. 9(2)(a) GDPR) — health data, and sending your data to AI providers for processing.
- Consent (Art. 6(1)(a) GDPR) — the early-access list; unsubscribe any time by replying to any of our emails or writing to privacy@gavrscorp.com.
- Legitimate interest (Art. 6(1)(f) GDPR) — security, preventing abuse and fixing errors.
- Legal obligation (Art. 6(1)(c) GDPR) — accounting and tax records for paid plans.
5. AI processing
To answer you, Telri sends the relevant part of your request and context to an AI model provider. Providers process it only to generate the response, under data-processing terms that forbid using it to train their models. Answers are generated by AI and can contain mistakes — Telri marks AI-generated content and asks you to confirm before it acts.
6. Service providers (processors)
| Provider | Purpose | Location |
|---|---|---|
| Anthropic PBC | AI language models | USA |
| Railway Corporation | Server hosting and storage | USA / EU |
| Google LLC | Text-to-speech; Google APIs you connect | USA / EU |
| Groq, Inc. | Speech-to-text | USA |
| Tavily | Web search (search query only) | USA |
| Apple Inc. | Push notifications, in-app purchases | USA / EU |
Services you connect yourself (Google, Microsoft, Telegram, your mail provider) act under their own terms; Telri accesses them with the permissions you grant. Transfers outside the EU rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
7. Google user data
Telri's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the features you see in Telri; it is not used for advertising, not sold, not read by humans except with your permission, for security reasons or as required by law, and not used to train generalised AI models.
8. How long we keep data
- Account and conversation data — while your account exists; deleted within 30 days after you delete the account.
- Content of connected services — read when needed; cached copies are removed when you disconnect the service.
- Error logs — up to 90 days.
- Invoices and tax records — as long as Spanish law requires.
9. Security
Data is transmitted over HTTPS. Sensitive categories are encrypted at rest, access tokens are stored encrypted, and access to the servers is restricted. No system is perfectly secure; if a breach affects you, we will inform you and the supervisory authority as the law requires.
10. Your rights
You can access, correct, export (portability), delete your data, restrict or object to processing, and withdraw consent at any time without affecting earlier processing. Write to privacy@gavrscorp.com; we answer within one month. See also how to delete your data. You may lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local authority.
11. Children
Telri is not intended for anyone under 16, and we do not knowingly collect their data.
12. Changes
We will publish any change here and notify you in the app if it is significant.