Carry ("we", "us", "our") is operated by Mithril Technologies. This Privacy Policy explains how we collect, use, store, and protect your information when you use our WhatsApp-based personal assistant service.
Information We Collect
- Messages — text, voice, and image messages you send to Carry.
- Phone number — your WhatsApp phone number, used as your account identifier.
- Location — if you choose to share it, used to set your timezone and provide weather information.
- Content you create — lists, calendar events, reminders, notes, expenses, workouts, recipes, polls, and photos stored through the service.
- Third-party account data — if you connect Google Calendar, we store OAuth tokens to sync your events.
- Usage data — request logs, tool usage, and error logs for service reliability. These contain your user ID and trace identifiers but not your message content.
How We Use Your Information
We use your information solely to provide, maintain, and improve the Carry service. We do not sell, rent, or share your personal data for advertising or marketing purposes. Specifically:
- AI processing — your messages are sent to AI language models to understand your requests and perform the actions you ask for.
- Voice transcription — voice messages are transcribed to text so Carry can understand them.
- Photo analysis — images you send may be analyzed to extract receipts, recipes, or other structured information.
- Service improvement — aggregated, non-identifying usage patterns help us improve reliability and features.
Third-Party Services
We use trusted third-party services to operate Carry. We share only the minimum data necessary for each function:
- AI processing — your messages are sent to third-party AI providers to understand your requests and generate responses.
- Voice transcription — audio messages are sent to a speech recognition service.
- Message delivery — messages are delivered through the WhatsApp Business platform.
- Payment processing — payments are handled by Stripe. We never see or store your card number.
- Calendar sync — if you connect Google Calendar, event data is synced with Google.
- Cloud hosting and storage — your data is stored on secure cloud infrastructure.
Each provider processes data under their own privacy policy. A complete list of sub-processors is available upon request at support@carry.chat.
Data Retention
- Account data and content — retained for as long as your account is active.
- Conversation history — retained for up to 12 months, then automatically archived. Only recent messages are used for AI context.
- Operational logs — retained for 90 days for debugging and service reliability, then deleted.
- After account deletion — all your data is permanently deleted within 30 days of your request.
Data Storage & Security
Your data is stored securely on encrypted cloud infrastructure. We use HTTPS/TLS for all data in transit and restrict access to production systems to authorized personnel.
Your Rights
Under the EU General Data Protection Regulation (GDPR) and similar laws, you have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your data (see Data Deletion below).
- Portability — receive your data in a machine-readable format.
- Restriction — ask us to limit how we process your data.
- Objection — object to processing of your data.
- Withdraw consent — withdraw your consent at any time. This does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at support@carry.chat. We will respond within 30 days.
Data Deletion
You can request deletion of all your data at any time by sending a message to Carry on WhatsApp saying "delete my data" or by emailing support@carry.chat. Upon request, we will permanently delete your account and all associated data — including messages, lists, calendar events, reminders, notes, photos, and expense records — within 30 days.
Children's Privacy
Carry is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
Breach Notification
If a data breach poses a risk to your rights and freedoms, we will notify affected users within 72 hours and report the breach to the relevant supervisory authority as required by applicable law.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via WhatsApp or by posting the updated policy on this page. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact
For questions about this Privacy Policy or to exercise your data rights, contact us at support@carry.chat.
Mithril Technologies
Zagreb, Croatia
