Privacy Policy

We collect only what is needed to operate your assistant: account identifiers, the memories, rules and projects you explicitly save, voice/text messages you send to Rubi, device registrations, and credentials for systems you choose to connect. We do not scrape your files, contacts or browsing history without a specific instruction you give.

Passwords, API keys, email credentials and integration tokens are encrypted at rest with AES-256-GCM and decrypted only inside the server function that uses them. They never reach the browser, are never written into logs, and are never injected into a model prompt or shared with a third party.

Rubi can use your camera and microphone only after you grant permission at the browser or device level. Face templates and biometric match events are stored separately from profile data. You can revoke access at any time in your device settings or in Rubi's permissions panel.

Memories, documents, drawings, monitoring targets and connected-system data belong to your account. We do not sell, rent or share your data for advertising. Authorized staff cannot read your encrypted credentials. You can export or delete your account data from the settings screen.

When you connect Gmail, calendars, Campusverse, smart-home devices or other systems, Rubi acts as your agent on those services. We request only the scopes you approve, and you can disconnect any integration at any time. Each integration keeps its own audit trail.

Conversations with Rubi are stored so she can remember context across sessions. You can delete individual messages or entire threads. Email sent or read through connected channels is recorded in an action log that you can inspect.

You can delete your account and all associated data from the settings screen. After deletion, live data is removed within 30 days and encrypted backups expire according to our rolling schedule. Some immutable audit records may be retained where required by law.