Privacy Policy

Last updated September 26, 2026

Impo is a personal assistant app made by IMPO ("IMPO", "we", "us"). This policy explains what information Impo collects, how we use and share it, how long we keep it, and the choices and rights you have. It applies to the Impo apps for iPhone and Android, to impo.ai, and to the services behind them (together, the "Service").

1. Information we collect

Account information

When you create an account or sign in, we receive your email address and an account identifier. If you sign in with Google, we also receive your name and profile picture from Google. Sign-in is handled by our authentication provider, Clerk.

Your conversations

We store the messages you send to Impo and the replies it produces, so your conversation history is available across sessions and devices. This includes anything you type or paste into a conversation. Please do not share information you do not want stored.

Data you choose to connect

Health, Calendar and Gmail are each optional. When connected, Impo reads from them only when you ask something that needs them. The results needed to answer that request are sent to our servers and our AI service, and are kept as part of that conversation's record (see How long we keep information). Details for each are in the sections below.

Device and request information

To answer questions about "today" or "this week" correctly, each request includes your device's current date and time zone. We also register your device with our servers (a device identifier and which on-device features, such as Health or Calendar, are available and enabled) so the right device can answer tool requests.

Information that stays on your device

Your assistant's name and appearance, a profile photo you choose for it, and preview notes and tasks are stored on your device and are not sent to us, unless a feature clearly says otherwise.

Technical and log information

Our servers keep operational records, such as request times, IP addresses, error details and the status of each request, to run, secure and troubleshoot the Service. We do not use third-party advertising or analytics SDKs in the app.

2. Health data

If you enable Health, Impo asks for read-only permission through Apple Health (or the equivalent system on Android). Apple and Google control these permissions; you can change them at any time in your device settings.

• What Impo can read: only the categories you allow, currently steps, active energy, heart rate and sleep.
• When: only when you ask a question that needs it, for example "How did I sleep this week?". Impo does not read Health data in the background.
• What is sent: the summaries and samples needed for your question are sent to our servers and our AI service to produce the answer.
• Impo never writes to Health, and never changes or deletes your Health records.
• Never for advertising or marketing. We do not use Health data for advertising, marketing or data mining, do not sell it, do not share it with data brokers or advertisers, and do not use it to train AI models.
• Not a medical service. Impo's answers are informational and are not medical advice, diagnosis or treatment.
• We do not store Health data in iCloud.

3. Calendar data

If you enable Calendar, Impo asks for permission through your device's calendar settings. It reads events (such as titles, times, locations and notes) only when you ask about your schedule, and sends the matching events to our servers and AI service to answer you. Impo does not create, change or delete calendar events.

4. Gmail and Google user data

If you connect Gmail, you authorize access through Google's own consent screen. The connection is managed by our integration provider, Composio, and your Google credentials are never shared with Impo's app.

• What Impo can do: search and read your email messages and labels, read your Gmail profile (email address), and create and read drafts, when you ask.
• What Impo cannot do: send email, or delete or modify existing messages. Drafts are only sent if you send them yourself in Gmail.
• Email content is treated as information for your request, not as instructions to Impo.

Limited Use disclosure. Impo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve user-facing features that are visible in Impo, such as signing you in, finding an email, or drafting a reply.
• We do not transfer Google user data to others except as needed to provide those features (for example, to our AI service to answer your request), to comply with law, or as part of a merger or acquisition with notice to you.
• We do not use Google user data for advertising, and we do not sell it.
• We do not use Google user data to develop, improve or train generalized AI or machine-learning models.
• Humans do not read your Google user data unless you give us permission (for example, for support), it is necessary for security purposes or to comply with law, or the data has been aggregated and anonymized for internal operations.

You can disconnect Gmail at any time in Impo, or remove Impo's access in your Google Account permissions.

5. How we use information

• To answer your requests and complete the tasks you ask for.
• To keep your conversation history, account and settings.
• To operate, secure, troubleshoot and maintain the reliability of the Service, including preventing abuse.
• To communicate with you about your account, security, or important changes.
• To comply with legal obligations.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it for advertising of any kind.

6. AI processing and model training

Impo's answers are generated by AI. To produce an answer, your message, relevant conversation history, and the connected data needed for your request are sent to our AI service, which is operated through our agent platform provider, Rebyte, and the AI model providers it uses. They process this information to generate responses on our behalf.

We do not use your conversations, Health, Calendar or Gmail data to train AI models, whether ours or anyone else's.

7. How we share information

We share information only as described here. We use the following service providers, which process data on our behalf to provide the Service:

• Clerk — sign-in and account management.
• Amazon Web Services — hosting of our servers and database.
• Rebyte and the AI model providers it uses — generating answers to your requests.
• Composio — managing the Gmail connection, if you enable it.
• Cloudflare — delivery and security of impo.ai.

We may also disclose information when required by law or valid legal process; to protect the rights, property or safety of our users, IMPO or others; or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information or you will be notified of any change.

8. How long we keep information

• Account information and conversation history, including the connected data (such as Health, Calendar or email results) used to answer your requests, are kept while your account is active, so you can continue your conversations. They are deleted when you delete your account.
• Server logs are kept for 30 days for security and troubleshooting, then deleted automatically.
• We may keep limited records longer where required by law, or to resolve disputes and enforce our agreements.

9. Deleting your data

You can stop Impo's access at any time:

• Health and Calendar: turn off access in Impo or in your device's privacy settings.
• Gmail: disconnect it in Impo or remove access in your Google Account.

To delete your account and data, email cj@impo.ai from the address on your account. We will delete your account, your conversation history (including any Health, Calendar and email data stored with it), your connected-account links, and the related records held by our service providers, within 30 days, and confirm when it is done. Data in backups is removed as those backups expire. Deletion is permanent and cannot be undone.

10. Security

We protect your information with measures including encryption in transit (TLS) between the app, our servers and our database, restricted access to production systems, and keeping third-party credentials on our servers rather than on your device. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach where required by law.

11. Where data is processed

Our servers and database are hosted in the United States. Our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers.

12. Your rights

Depending on where you live (for example, in the European Economic Area, the United Kingdom, or California), you may have the right to:

• access the personal information we hold about you and receive a copy of it;
• correct inaccurate information;
• delete your information;
• object to or restrict certain processing, and withdraw consent where processing is based on consent;
• not be discriminated against for exercising these rights.

To exercise any of these rights, contact us at cj@impo.ai. We may need to verify your identity before acting on a request. You may also have the right to lodge a complaint with your local data protection authority.

13. Children

Impo is not directed to children under 13, or under the minimum age required in your country, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

14. Changes to this policy

We will update this page when our practices change and revise the date at the top. If we make material changes, we will notify you in the app or by email before they take effect.

15. Contact us

IMPO
Email: cj@impo.ai