Privacy Policy for Lairy

AI Personal Assistant

Last Updated: November 22, 2025 | Effective Date: November 22, 2025 | Version: 1.0.2

1. Introduction

Welcome to Lairy ("we," "our," or "us"). Lairy is an AI-powered personal assistant application designed to enhance productivity, improve accessibility, and provide safety features through voice commands, automated transaction tracking, and intelligent assistance.

This Privacy Policy explains how Lairy collects, uses, stores, and protects your personal information. By using Lairy, you agree to the practices described in this policy.

2. Age Restriction

Why This Restriction:

• Lairy accesses sensitive information (SMS, calls, location)
• Features require mature understanding of privacy implications
• Compliance with COPPA (Children's Online Privacy Protection Act)
• Protection of minors from potential misuse

If You Are Under 13:

• Do not download or use Lairy
• Do not provide any personal information
• Ask a parent or guardian for age-appropriate alternatives

For Parents:

If you believe your child under 13 has used Lairy, please contact us immediately at [Your Email] so we can delete any collected data.

3. Information We Collect

Lairy collects information ONLY to provide its core functionality. All data is stored locally on your device and is never transmitted to external servers.

3.1 Voice Data

Category	Details
What We Collect	Voice commands and audio recordings for voice recognition, wake word detection data ("Hey Lairy"), voice-to-text transcriptions
Purpose	Enable hands-free voice control, execute voice commands (open apps, make calls, set alarms), provide voice-activated assistance
Storage	Processed locally using on-device speech recognition, temporary audio buffers deleted after processing, no voice data sent to external servers

3.2 SMS Messages

Category	Details
What We Collect	Bank transaction SMS messages, sender information (bank names, short codes), transaction details (amount, date, balance)
Purpose	Automatic transaction tracking for business/personal finance, generate expense reports and analytics, track income and expenses
Storage	Stored locally in encrypted SQLite database, only transaction-related SMS are processed, original SMS remain in your phone's message app, no SMS data shared with third parties

3.3 Call Information

Category	Details
What We Collect	Call recordings (when feature is enabled), phone numbers and contact names, call duration and timestamps, call direction (incoming/outgoing)
Purpose	Call recording for personal record-keeping, business call documentation, call history and analytics
Storage	Recordings stored locally in device storage, encrypted database for call metadata, user can delete recordings anytime, no call data transmitted externally

3.4 Location Data

Category	Details
What We Collect	GPS coordinates (latitude, longitude), location accuracy and altitude, address information (city, country), movement patterns and activity type
Purpose	Safety features (fall detection, emergency alerts), lost mode device tracking, location history for personal tracking, geofencing and location-based reminders
Storage	Stored locally in encrypted database, location history retained per user settings, no location data sent to external servers, user can clear location history anytime

3.5 Contacts

Category	Details
What We Collect	Contact names and phone numbers, contact associations for calls and messages
Purpose	Display contact names in call recordings, voice-activated calling ("Call John"), enhanced user experience
Storage	Read-only access to device contacts, no contacts stored separately by Lairy, no contacts uploaded to external servers

3.6 Device Information

Category	Details
What We Collect	Device model and Android version, app version and build number, battery level and charging status, network connectivity status, installed apps list (for voice commands)
Purpose	App functionality and compatibility, voice command app launching, battery optimization, service reliability
Storage	Minimal device info stored locally, used only for app operation, no device fingerprinting, no tracking across devices

3.7 Photos and Media

Category	Details
What We Collect	Access to photos, videos, and documents, media files for sharing and processing
Purpose	Share files via voice commands, PDF viewing and document management, media playback control
Storage	Read-only access to media, no media files copied or uploaded, user controls all file access

3.8 Accessibility Data

Category	Details
What We Collect	Current app in foreground, screen content for app detection, UI interaction events
Purpose	Voice-activated app switching, context-aware voice commands, enhanced accessibility features
Storage	Processed in real-time, no screen content stored, no accessibility data logged

4. How We Use Your Information

4.1 Core Functionality

• Voice Assistant: Process voice commands for hands-free control
• Transaction Tracking: Automatically categorize and track financial transactions
• Call Recording: Record and store calls for personal/business use
• Location Tracking: Provide safety features and location history
• Smart Automation: Execute tasks based on voice commands

4.2 Analytics and Improvement

• Local Analytics: Generate usage statistics stored locally
• Performance Monitoring: Identify and fix bugs
• Feature Usage: Understand which features are most used

4.3 Safety and Security

• Fall Detection: Monitor for falls and send emergency alerts
• Lost Mode: Track device location if lost or stolen
• Emergency Contacts: Quick access to emergency services
• Security Monitoring: Detect unauthorized access attempts

5. Data Storage and Security

5.1 Local Storage

5.2 Encryption

Data Protection Measures:

• At Rest: All sensitive data encrypted using AES-256
• Database: SQLCipher for encrypted database storage
• Files: Encrypted file storage for recordings
• Keys: Secure key management using Android Keystore

5.3 No Cloud Storage

You Control:

• ✅ All data stays on your device
• ✅ You can export data locally
• ✅ You can delete all data anytime
• ✅ Uninstalling removes all app data

5.4 Backup

Android Backup:

• App supports Android's built-in backup
• Backups encrypted by Android OS
• Stored in your Google Drive (if enabled)
• You control backup settings

Manual Export:

• Export transactions to CSV/Excel
• Export call recordings to storage
• Export location history
• All exports stay on your device

6. Data Sharing and Third Parties

6.1 No Data Sharing

6.2 Third-Party Services

Limited Third-Party Integration:

6.3 Legal Requirements

We may disclose information only if:

• Required by law or legal process
• To protect our rights or safety
• To prevent fraud or security threats
• With your explicit consent

Even in these cases:

• We will notify you if legally permitted
• We will disclose only minimum necessary information
• We will challenge overly broad requests

7. Your Rights and Choices

7.1 Access and Control

7.2 Data Deletion

How to Delete Your Data:

Delete Specific Data:

• Transactions: Swipe to delete in Transactions screen
• Call Recordings: Delete from Call Records screen
• Location History: Clear in Location History settings
• Voice Data: Automatically deleted after processing

Delete All Data:

1. Open Lairy Settings
2. Go to "Privacy & Security"
3. Tap "Delete All Data"
4. Confirm deletion

Uninstall App:

• Uninstalling Lairy removes all app data
• Android automatically deletes app storage
• No data remains on device after uninstall

7.3 Permission Management

Control Permissions:

• Go to Android Settings → Apps → Lairy → Permissions
• Enable/disable permissions individually
• Lairy will request permissions only when needed
• You can revoke permissions anytime

Feature Impact:

• Disabling permissions may limit functionality
• Core features require specific permissions
• Optional features can be disabled without affecting core functionality

7.4 Opt-Out Options

You Can Opt Out Of:

• ✅ SMS transaction tracking
• ✅ Call recording
• ✅ Location tracking
• ✅ Voice wake word detection
• ✅ Accessibility service
• ✅ Notifications

8. Permissions Explained

Lairy requests the following permissions. All permissions are used solely for stated purposes and data stays on your device.

Permission	Why Needed	Data Collected	Storage	Required
🎤 Microphone (RECORD_AUDIO)	Voice commands, call recording	Voice audio, speech-to-text	Processed locally, temporary buffers	Yes (for voice features)
📱 SMS (READ_SMS, RECEIVE_SMS)	Automatic transaction tracking	Bank SMS messages	Encrypted local database	No (optional feature)
📞 Phone (READ_PHONE_STATE, CALL_PHONE)	Call recording, voice-activated calling	Call metadata, recordings	Local encrypted storage	No (optional feature)
📍 Location (ACCESS_FINE_LOCATION, ACCESS_BACKGROUND_LOCATION)	Safety features, location history	GPS coordinates, addresses	Encrypted local database	No (optional feature)
👁️ Accessibility (BIND_ACCESSIBILITY_SERVICE)	Voice-activated app control	Current app name, UI context	Real-time processing, not stored	No (optional feature)
📁 Storage (READ/WRITE_EXTERNAL_STORAGE)	Save recordings, export data, PDF viewing	File access for user operations	User-controlled file locations	Yes (for core features)
📷 Camera (CAMERA)	Photo capture, QR scanning	Photos taken by user	User's photo gallery	No (optional feature)
📖 Contacts (READ_CONTACTS)	Display contact names, voice calling	Contact names and numbers	Read-only, not stored by Lairy	No (enhances experience)
📦 Query All Packages (QUERY_ALL_PACKAGES)	Voice command app launching	List of installed apps	Temporary, for app detection	No (for voice app control)
🔔 Notifications (POST_NOTIFICATIONS)	Service status, emergency alerts	None	None	No (recommended)
🔋 Battery Optimization (REQUEST_IGNORE_BATTERY_OPTIMIZATIONS)	Keep services running reliably	None	None	No (improves reliability)
🔐 Biometric (USE_BIOMETRIC)	Secure app access	None (uses device biometric)	None	No (optional security)

9. Children's Privacy

9.1 Age Restriction Policy

Compliance:

• COPPA (Children's Online Privacy Protection Act)
• GDPR (General Data Protection Regulation)
• International child privacy laws

Enforcement:

• No age verification required (honor system)
• Parents responsible for monitoring device usage
• We do not knowingly collect data from children under 13

9.2 Parental Guidance

For Parents/Guardians:

Ages 13-17:

• Parental consent recommended
• Parents should review this privacy policy
• Monitor app usage and permissions
• Discuss privacy implications with teen

Under 13:

• Do not allow child to use Lairy
• Uninstall if accidentally installed
• Contact us to delete any collected data

9.3 Data Deletion for Minors

If a child under 13 has used Lairy:

1. Uninstall the app immediately
2. Contact us at [Your Email]
3. Provide device information
4. We will verify and delete any data

Response Time: Within 30 days of notification

10. Changes to This Policy

10.1 Policy Updates

We may update this Privacy Policy to:

• Reflect new features or functionality
• Comply with legal requirements
• Improve clarity and transparency
• Address user feedback

10.2 Notification of Changes

How We Notify You:

• In-app notification of policy changes
• Email notification (if provided)
• Prominent notice in app
• Updated "Last Updated" date

10.3 Your Consent

Continued Use:

• Using Lairy after policy changes means you accept the new policy
• Material changes require explicit consent
• You can stop using Lairy if you disagree

10.4 Version History

11. Contact Us

11.1 Privacy Questions

If you have questions about this Privacy Policy or your data:

Email: [Your Email Address]
Subject Line: "Lairy Privacy Inquiry"

We will respond within:

• General inquiries: 7 business days
• Data deletion requests: 30 days
• Security concerns: 48 hours

11.2 Data Subject Requests

To exercise your rights (access, delete, export):

Email: [Your Email Address]
Subject Line: "Data Subject Request - Lairy"

Include:

• Your device information
• Specific request (access/delete/export)
• Verification information

11.3 Security Issues

To report security vulnerabilities:

Email: [Your Email Address]
Subject Line: "Security Issue - Lairy"

We take security seriously:

• Responsible disclosure appreciated
• We will investigate promptly
• Credit given for valid reports

11.4 Developer Information

App Developer: [Your Name/Company]
Location: [Your Location]
Website: [Your Website]
Support: [Support Email]

Legal Compliance

Compliance Standards

Lairy complies with:

• ✅ GDPR (General Data Protection Regulation)
• ✅ CCPA (California Consumer Privacy Act)
• ✅ COPPA (Children's Online Privacy Protection Act)
• ✅ Google Play Developer Policies
• ✅ Android Privacy Guidelines

Data Protection Principles

We follow these principles:

1. Lawfulness, Fairness, Transparency
2. Purpose Limitation
3. Data Minimization
4. Accuracy
5. Storage Limitation
6. Integrity and Confidentiality
7. Accountability

Security Measures

Technical Safeguards

• ✅ AES-256 encryption for sensitive data
• ✅ Encrypted database (SQLCipher)
• ✅ Secure key storage (Android Keystore)
• ✅ Biometric authentication
• ✅ No cleartext traffic
• ✅ Certificate pinning
• ✅ Secure coding practices

Organizational Safeguards

• ✅ Privacy by design
• ✅ Regular security audits
• ✅ Incident response plan
• ✅ Data breach notification procedures
• ✅ Employee training (if applicable)

International Users

Data Residency

• All data stored locally on your device
• No international data transfers
• No cross-border data sharing
• Complies with local data protection laws

Regional Rights

EU/EEA Users:

• GDPR rights fully supported
• Right to data portability
• Right to be forgotten
• Right to object to processing

California Users:

• CCPA rights fully supported
• Right to know
• Right to delete
• Right to opt-out

Other Regions:

• Local privacy laws respected
• Contact us for specific rights

Summary

What Lairy Does

• ✅ Provides AI-powered personal assistance
• ✅ Stores all data locally on your device
• ✅ Encrypts sensitive information
• ✅ Gives you complete control over your data
• ✅ Respects your privacy

What Lairy Does NOT Do

• ❌ Upload your data to cloud servers
• ❌ Share data with third parties
• ❌ Sell your information
• ❌ Track you across devices
• ❌ Collect data from children under 13

Your Responsibilities

• ✅ Ensure you are 13+ years old
• ✅ Provide parental consent if 13-17
• ✅ Review and understand permissions
• ✅ Keep your device secure
• ✅ Report security issues