Privacy Notice for Personal AI

Prior versions of this Privacy Notice are available here.

EFFECTIVE DATE: April 9, 2025

Thank you for your interest in Personal.ai! Personal.ai aims to be a privacy-first company. Personal.ai offers an online platform for (i) the creation and retention of your Memory Stack (a structured timeline of uploaded data, an architecture primarily driven by a neuroscientific understanding of human memory in technological form that are stored in a stack that is unique to an individual, created via the ingestion of data derived from speech, metadata, pictures, videos, location data, and text that you provide to Personal.ai) and (ii) the creation of your AI (a personal AI) utilized for the recall of your Memory Stack. Personal.ai does not sell or share for monetary consideration your Memory Stack and related data.

When we use the terms “Personal AI”, “Personal.ai”, “Human AI Labs”, “we”, “us”, or “our” in this Privacy Notice, we are referring to Human AI Labs, Inc. When we use the terms “Personal.ai Users,” “you” or “your” in this Privacy Notice, we are referring to users of Personal.ai’s Services including, without limitation, users of our website www.personal.ai (the “Website”) and users of our Services. When we use the term “Personal.ai Service” or “Services,” we are referring to the Website and our services made available to you, including via API, SMS, our Website and corresponding mobile application and desktop application .

As you use the Personal.ai Service or interact with the Website, Personal.ai collects and processes personal information that you provide or make available in order to provide you with access to the Personal.ai Service, enhance your experience while using the Personal.ai Service, and interact with you. This Privacy Notice (the “Notice”) describes how Personal.ai collects, uses, and discloses personal information collected through the Services, and what choices you have with respect to such personal information. If you have any questions about this Privacy Notice, please contact Personal.ai by emailing us at privacy@personal.ai.

Disclosure Regarding Customer Data. This Privacy Notice does not apply to the personal information that we process on behalf of our enterprise or B2B customers as a “processor” or “service provider” pursuant to an agreement we have entered into with such customers (“Customer Data”).

Our customers’ respective privacy notices or policies govern their collection and use of Customer Data. Our processing of Customer Data is governed by the contracts that we have in place with our customers, not this Privacy Notice. Any questions or requests relating to Customer Data should be directed to our customer.

I. Privacy Terms for Users of the Personal.ai Service ‍

A. Collection and Use of Personal Information

‍When you interact with us, we may collect personal information that you provide or make available. Sometimes we collect personal information automatically when you interact with our Service and sometimes, we collect the personal information directly from you. At times, we may collect personal information about you from other sources and third parties (including Personal.ai Users), even before our first direct interaction.

This section explains how Personal.ai collects, processes and uses the personal information we collect from Personal.ai Users. Certain personal information, such as account log-in data, is required to provide you with access to the Personal.ai Service, and other personal information may be collected automatically as you use the Personal.ai Service.

1. Personal Information You Provide to Personal.ai.

Personal.ai may collect the following personal information submitted directly through the Personal.ai Service by Users:

The audio recordings, videos, images, messages, text, attachments, files, conversations, associated metadata, and other content submitted through or uploaded to the Personal.ai Service utilized for the recall of your Memory Stack (collectively, the “User Content”). User Content also includes any content submitted by a User that is interacting with a Customer AI Agent (defined below). You will be able to control the User Content you provide;
Personal information you provide as part of your account registration with Personal.ai, which may include your name, organization name, address, telephone number, email address, username and password; optional information that you may choose to provide, such as a photograph or basic demographic data; (collectively, the “Account Information”); and
Information you provide in other interactions with us, such as requests or questions you submit to us via forms, email, or through a third-party communication website; and requests for customer support and technical assistance (collectively, “Other Information,” and, together with “Account Information”, collectively the “Operational Data” over which Personal.ai retains control in order to provide our Personal.ai Services to you). Our service providers may collect the information you communicate to us, on our behalf, such as through our web chat tool.

2. Payment Information. If you submit payment information in connection with your use of the Personal.ai Service, we utilize a third-party credit card payment processing company to collect payment information, including your credit card number, billing address, and phone number. In such circumstances, the third-party service provider, and not Personal.ai, stores your payment information on our behalf.

3. Service Usage Information. As is true of most digital platforms, we and our third-party partners may collect personal information automatically from you when you visit or interact with our websites and other Services (“Service Usage Information”). Such information includes:

Application Data – Some of our Services offer mobile or browser applications to allow you to take advantage of our offerings on the go and/or when visiting third-party websites and other online services. When you access the Service using a mobile device, we collect certain device information, including the type of device you are using, its operating system, and mobile network information, which may include your mobile phone number. We may also collect your MAC address and other unique device identifiers. Certain of these applications also allow us to access more precise location data about you and collect information about your use and interactions with third-party websites and online services (including the products or services you are interested in or purchase) to better serve you.
Analytics Data – Including the electronic path you take to our Services, through our Services and when exiting our Services, as well as your usage and activity on our Services, such as the links, objects, products and benefits that you view, click, or otherwise interact with.
Log files – When you use the Service, our servers automatically record information in server log files. These log files may include information such as your web request, IP address, browser type, browser ID and settings, referring/exit pages and URLs, number of clicks, date and time stamp information, data from cookies and similar technologies, and other such information.
Location information – We may collect and process general information about the location of the device from which you are accessing the Service (e.g., approximate geographic location inferred from an IP address) or more precise location when permitted by law (“Location Data”).

For more information about the use of cookies and related technologies to collect information automatically on our Services, and the choices you may have in relation to those practices, please visit our Cookie Notice below.

4. Information Collected from Third-Party Integrations. If you choose to use or connect to third-party integrations (e.g., Zoom, Slack, Gmail, Google Calendar, iCal, or other calendar programs, Google Contracts, Google Drive, Vonage Messaging API, etc.) through the Personal.ai Service, such third parties may allow us to have access to and store additional information about your interaction with those services as it relates to your use of the Personal.ai Service such as your username, profile picture, email address, time, location, calendar event information, connected to the calendar application and notes contained in that event, contact information from such third parties (i.e. event attendees), and any information you choose to upload to such third party platforms. If you initiate these connections, you also understand that we will share information about you that is required to enable your use of the third-party integration through the Personal.ai Service. If you do not wish to have this information shared, do not initiate these connections. By enabling these connections, you authorize us to connect and access the information provided through these connections, and you understand that the privacy policies of these third parties govern their use of information that they receive in connection with such connections. Note that, when using these third-party integration services, you will be subject to the individual privacy notices and terms of service for those third parties.

Certain of these applications also allow us to access more precise Location Data about you and collect information about your use and interactions with third-party websites and online services (including the products or services you are interested in or purchase) to better serve you.

No mobile information (phone numbers) will be shared with third parties/affiliates for their own marketing/promotional purposes. Text messaging originator opt-in data and consent that we collect will not be shared with any third parties for their own marketing purposes.

Additional Limits on Use of Your Google Information

Our Service uses certain Google services, such as the Google Gmail API. If you use the Gmail integration or choose to integrate any other Google Workspace application with Personal.ai, we will ask you to give us access to information from your Gmail or Google account. By using the Gmail integration with Personal.ai you grant Personal.ai access to information related to your account, including contacts, emails, calendar, and subject lines. Your email may contain sensitive information, such as names of your contacts, your private communications, or financial or medical information.

If you provide Personal.ai access to your Google Gmail data, Personal.ai’s use of that Google Gmail data will be subject to the following additional restrictions:

The Services will not transfer this Gmail data to others unless doing so is necessary (i) to provide and improve the features of the Services we provide to you, (ii) to comply with applicable law, or (iii) as part of a merger, acquisition, or sale of assets.
We will not use or share this Gmail data for serving advertising, including retargeting, personalized, or interest-based advertising.
We will not allow humans to read this data unless:
- it is part of the standard functionality of our Services,
- we have your affirmative agreement for specific messages,
- doing so is necessary for security purposes (such as investigating a bug or abuse),
- it is necessary to comply with applicable law,
- the data has been aggregated and anonymized and is used only for our own internal operations purposes.

Our Service’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use Requirements.

B. How Does Personal.ai Use Personal Information?

This section explains how Personal.ai may use personal information collected from Users.

1. User Content. Personal.ai may view and use User Content collected from or about Users only as necessary:

To maintain, provide and improve the Personal.ai Service for our customer who has entered into an agreement with us to process such User Content,
To prevent or address technical or security issues and resolve support requests,
To investigate when we have a good faith belief, or have received a complaint alleging, that such User Content is in violation of the Personal.ai Terms of Service
To comply with a valid legal subpoena, request, or other lawful process
As otherwise expressly permitted by our customer in writing or through their use of the Services

EU/UK GDPR Lawful Bases. If the EU GDPR or UK GDPR applies to our processing of personal information under this section, our lawful bases may include performance of a contract, legitimate interest, consent, and/or compliance with legal obligations.

2. Account Information, Service Usage Information, Information from Third Party Integrations, and Other Information. Personal.ai may use these categories of information collected from or about Users to:

Maintain, provide, and improve the Personal.ai Service.
To remember you and the choices you have made in relation to the Personal.ai Service.
Respond to your requests for information.
Prevent or address technical or security issues and resolve support requests.
Investigate in good faith alleged violations of the Personal.ai Terms of Service.
Comply with a valid legal subpoena, request, or other lawful process.
Help us aggregate information we receive from you and third parties to help better understand user interests and needs and customize the Personal.ai Service for our general userbase.
Engage in analysis, research, and reports regarding use of the Personal.ai Service.
Protect the Personal.ai Service and our users.
Communicate with you via email and text messages and through the Personal.ai Service about important notices and updates regarding the Personal.ai Service, such as to inform you about changes in the Personal.ai Service, our service offerings, and important service related notices, such as about security and fraud. Because these communications are an important part of the Personal.ai Service, you may not opt out of them.
Communicate with you about promotions, offers, and news about Personal.ai.
Engage in automated decision making, including profiling.

C. Sharing of Personal Information

We may share the personal information we collect as follows:

Customer AI Agents You Share or Interact With. The Services may link to or allow you to interface, interact, share information with, direct us to share information with, access and/or use AI agents that our customers manage or operate via the Services (each a “Customer AI Agent”). Any personal information shared with a Customer AI Agent will also be subject to the Customer AI Agent’s privacy policy. We are not responsible for the processing of personal information by Customer AI Agents, or our customers that operate such AI agents.
Consistent with your settings within the Personal.ai Service. Please note that the User Content you submit through the Personal.ai Service may be viewable by other users (including the general public) depending on the specific settings you and other users have selected in the Personal.ai Service.
Within Human AI Labs. We are able to offer you the products and services we make available because of the hard work of the entire Human AI Labs team. Human AI Labs entities disclose personal information to other Human AI entities for purposes and uses that are consistent with this Privacy Notice and applicable law. For example, the Human AI Labs entity providing our Services to you may share personal information relating to transactions with another Human AI Labs entity that provides the system used to review available offerings and complete transactions for the Services we are providing.
Data Analytics Providers. We may share personal information with data analytics providers who analyze statistics and trends relating to the usage of and activity relating to our services. These data analytics providers produce reports and make suggestions for our customer and business strategy based on the personal information and other information analyzed.
Personal.ai Service Providers. We may provide access to or share personal information with select third parties that use the information to perform services on our behalf. These third parties provide a variety of services to us, including without limitation sales, marketing, provision of content and features, analytics, data storage, security, fraud prevention, and other services. In addition, personal information and chat communications may be disclosed to service providers that help provide our chat features.
Payment Processors and Online Payment Systems. We share personal information with payment processors, online payment system providers and other billing agents to process your payment for the services and products you order, as well as to provide refunds.
Business Transactions. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, purchase or sale of assets, transition of service to another provider, or other similar corporate transaction, your personal information may be disclosed, sold, or transferred in connection with such a transaction.
Third-Party Services You Share or Interact With. The Services may link to or allow you to interface, interact, share information with, direct us to share information with, access and/or use third-party websites, applications, services, products, and technology (each a “Third-Party Service”).

Any personal information shared with a Third-Party Service will be subject to the Third- Party Service’s privacy policy. We are not responsible for the processing of personal information by Third-Party Services.

Disclosures to Protect Us or Others. We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.
Personal.ai B2B Customers (Authorized Users Only). In cases where you use our Services as an employee, contractor, or other authorized user of a Personal.ai customer, that customer may access information associated with your use of the Services including usage data and the contents of the communications and files associated with your account. Your personal information may also be subject to the Personal.AI customer’s privacy policy. We are not responsible for the Personal.ai customer’s processing of your personal information.

D. International Transfers of Personal Information

All personal information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. These countries may or may not have adequate data protection laws as defined by the data protection authority in your country.

If we transfer personal information from the European Economic Area, Switzerland, and/or the United Kingdom to a country that does not provide an adequate level of protection under applicable data protection laws, one of the safeguards we may use to support such transfer is the EU Standard Contractual Clauses.

For more information about the safeguards we use for international transfers of your personal information, please contact us as set forth below in “Personal.ai Contact Info”.

E. Aggregated/De-Identified/Anonymized Data

We may aggregate, de-identify, and/or anonymize personal information collected through the Personal.ai Service so that such information can no longer be linked to you or your device (“Aggregated/De-Identified/Anonymized Information”). We may use Aggregated/De-Identified/Anonymized Information for any purpose, including without limitation for research and analytics, and may also share such data with any third parties, including partners, affiliates, services providers, and others.

F. Data Retention

We will retain your information for the period necessary to fulfill the purposes outlined in this Notice unless a longer retention period is required or permitted by law.

To determine the appropriate retention period for personal information, we may consider applicable legal requirements, the amount, nature, and sensitivity of the personal information, certain risk factors, the purposes for which we process your personal information, and whether we can achieve those purposes through other means.

G. Data Deletion

Users can request to delete their accounts (including all personal information stored with their account) by sending an email to support@personal.ai, explicitly requesting to have their account deleted (including all personal information stored with the account). Please note that some personal information may need to be retained for business or compliance purposes.

H. Third Party Links and Services

The Personal.ai Service may contain links to third-party websites and functionalities. If you choose to use these third-party services, you may disclose your information not just to those third parties, but also to their users and the public more generally depending on how their services function. Because these third-party websites and services are not operated by Personal.ai, Personal.ai is not responsible for the content or practices of those websites or services. The collection, use, and disclosure of your information will be subject to the privacy policies of the third-party websites or services, and not this Notice. We urge you to read the privacy and security policies of these third parties.‍

II. Additional Privacy Terms

A. Changes to This Privacy Notice

We reserve the right to amend this Notice at any time including, without limitation, to reflect changes in the law, our data collection and use practices, the features of the Personal.ai Service or the Website, or advances in technology. If we do, we’ll let you know by posting the updated Privacy Notice on our Website, and/or we may also send other communications.

B. Marketing Practices and Choices

If you receive email, direct mail, or other communications, including telephone calls, from us, we may use certain analytics tools to capture data such as when you open our message or click on any links or banners our email contains. This data allows us to gauge the effectiveness of our communications and marketing campaigns. You may ask us not to send you marketing communications or request a change to the method or frequency of communication by:

Following any available opt-out or communication preferences instructions in the marketing communications;
When available, accessing the “Unsubscribe” or “Communication Preferences” settings in your account profile page;
Sending a request to privacy@personal.ai with the words “Opt Out” or “Communication Preferences” in the subject line, the address or number at which we contacted you and your request; or

Please allow up to 10 days for your request to be processed. If you request to opt out of marketing communications, please note that we may continue to send you non-marketing communications, such as those directly related to the fulfillment of a specific transaction you requested, maintenance of your account or status of our ongoing business relations.

Text Messages: We may use personal information we collect to communicate with individuals via text message, including (with your consent) to enable you to engage in conversations with Customer AI Agents. Text messages may be sent using an automatic telephone dialing system or other technology. For more information, please see our Terms of Service.

Modifying Account Information: If you have an account for our Service, you have the ability to modify certain information in your account through the account setting page or a similar option provided on the Service. If you have any questions about modifying or updating any information in your account, please contact us at the email or postal address provided below.

C. Children

Neither the Personal.ai Service nor the Website are targeted at children under the age of 18, and we do not knowingly collect any personal information from children. In the event you have knowledge that a child has provided us with any such information in violation of this Notice, please contact Personal.ai via the “Personal.ai Contact Info” section below.

III. Privacy Rights

In accordance with applicable law, you may have the right to:

Confirm Whether We Are Processing Your Personal Information;

Request Access to or Portability of Your Personal Information;

Request Correction of Your Personal Information;

Request Deletion of Your Personal Information;

Request Restriction of or Object to our Processing of Your Personal Information; and

Withdraw Your Consent to our Processing of Your Personal Information. Please note that your withdrawal will only take effect for future processing and will not affect the lawfulness of processing before the withdrawal.

If you would like to exercise any of these rights, please contact us as set forth in “Personal.ai Contact Info” below. We will process such requests in accordance with applicable laws.

If your personal information is subject to the applicable data protection laws of the European Economic Area or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority if you believe our processing of your personal information violates applicable law.

IV. Supplemental Notice for EU/UK GDPR Lawful Bases

This Supplemental Notice for EU/UK GDPR only applies to our processing of personal information that is subject to the EU or UK General Data Protection Regulation.

In some cases, providing personal information may be a requirement under applicable law, a contractual requirement, or a requirement necessary to enter into a contract. If you choose not to provide personal information in cases where it is required, we will inform you of the consequences at the time of your refusal to provide the personal information.

V. Personal.ai Contact Info

Personal.ai is the controller of the personal information we process under this Privacy Notice.

Personal.ai is located at 9510 Innovation Ln. #437 La Jolla, CA 92093. If you wish to contact Personal.ai or have any questions about or complaints in relation to this Notice, please contact Personal.ai at privacy@personal.ai.

Data Protection Officer: Kenny Huynh, kenny.huynh@personal.ai

EU Representative: Ametros Ltd, Unit 3D, North Point House, North Point Business Park, New Mallow Road, Cork, Ireland, gdpr@ametrosgroup.com, www.ametrosgroup.com

UK Representative: Ametros Group Ltd, Lakeside Offices, Thorne Business Park, Rotherwas Industrial Estate, Hereford, Herefordshire, England, gdpr@ametrosgroup.com, www.ametrosgroup.com