Last updated: 7 October 2026
This policy explains what personal data A.D.A.M. (the "Service") collects, why, where it is stored and what control you have over it.
1. Who is responsible
The Service is a hobby project run by Aaron Lutz, a private individual based in Switzerland, who is responsible for processing your data (the "controller"). Contact: privacy@adam-assistant.com.
2. What we store
A.D.A.M. is a personal assistant, and remembering things is part of what it does. We do store your conversations, memory and files on our servers. Specifically:
- Account data: email address, name and the way you want to be addressed, a hashed password (or your Google/Microsoft account identifier if you sign in with them), invitation code, time zone and your preferences.
- Conversations and tasks: your chat and voice conversations as text transcripts, tasks you give A.D.A.M., scheduled tasks and their results.
- Memory: facts, preferences and notes that A.D.A.M. learns from your conversations and tasks, with their revision history.
- Files: files you send from the companion app, and skills and documents created for you.
- Location (if you allow it): your city, address and approximate coordinates, used to give location-aware answers.
- Phone features (if you use them): your verified phone number (encrypted), details of calls A.D.A.M. makes or receives for you, and call transcripts and summaries. Call audio is not recorded.
- Connected apps: which apps you connected and the account they belong to. Access tokens for custom MCP servers are stored encrypted.
- Companion devices: device name, platform and push notification token.
- Billing and usage: your plan, subscription status, Stripe customer ID and usage records. Card details are handled by Stripe and never reach us.
- Website waitlist: if you join the waitlist, your email address, the date, your IP address and browser type.
The desktop app also keeps some data only on your device: your encrypted sign-in token, a log of actions it took on your computer, and settings. If you use browser automation, a copy of your browser profile is kept locally on your device so A.D.A.M. can act in your browser. It is not uploaded to our servers.
3. Why we use it
We use your data only to provide the Service to you: to answer you, remember context, carry out the tasks you ask for, operate your account and billing, and keep the Service secure. The legal bases are the performance of our agreement with you and, for optional features such as location and phone calls, your consent.
We do not sell your data, use it for advertising, or use it to train AI models.
4. Where it is stored
Our servers are currently hosted by Hetzner in Germany. The website and waitlist are hosted by Cloudflare. If the hosting location changes, we will update this policy.
5. Service providers
To work, A.D.A.M. sends the content needed for each request to these providers:
- AI models: OpenRouter, which routes requests to model providers such as OpenAI, Anthropic and Google; OpenAI directly (for deep research); and Google Gemini (for live voice, video and phone conversations).
- Phone calls: Twilio.
- App integrations: Composio, which holds the access tokens for apps you connect.
- Cloud code sandbox: E2B.
- Web search and maps: Tavily and Google Maps.
- Payments: Stripe.
- Sign-in: Google and Microsoft, if you choose to sign in with them.
- Push notifications: Apple.
- Website hosting: Cloudflare.
- Any custom MCP servers or apps that you connect yourself.
Several of these providers are in the United States or other countries outside Switzerland and the EU. Where that is the case, data is transferred on the basis of the provider's standard contractual clauses or an applicable adequacy decision. Each provider processes data under its own terms and privacy policy.
6. How long we keep it
- Conversation transcripts and memory revisions are deleted automatically after 180 days.
- Files sent from the companion app are deleted after 24 hours.
- You can delete individual memories, or all memory and conversation history, at any time in the app.
- All other data is kept while your account exists. When you ask us to delete your account, we delete your data, except records we must keep by law (for example payment records).
7. Your rights
You can ask us for access to your data, a copy of it, correction or deletion, and you can object to or restrict its processing. You can withdraw consent for optional features at any time. Write to privacy@adam-assistant.com. You can also complain to a data protection authority, for example the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the authority in your EU country.
8. Cookies and tracking
The website uses only what it needs to work: a sign-in session and your light/dark theme choice saved in your browser. We do not use analytics or advertising cookies.
9. Security
Connections are encrypted, passwords are hashed, and sensitive values such as phone numbers and integration tokens are encrypted at rest. No system is perfectly secure, and the Service is an alpha, so please keep that in mind when deciding what to share.
10. Children
The Service is not intended for anyone under 16.
11. Changes
If we change this policy materially, we will tell you in the app or by email before the change takes effect.
Contact
Privacy questions or requests: privacy@adam-assistant.com
