Privacy policy

Last updated 24 October 2026

Amira is a personal assistant on your iPhone. She plans your days with you, keeps track of what you tell her and reminds you of what matters. This page says what she keeps, where it goes, who helps us run her, and how you delete all of it.

Amira is run by Isabella Fernandez Abrahan, in Madrid, Spain, who is the controller of your personal data. When this page says we or us, it means the people who run Amira.

What we keep

Your account

Your name and email address, and how you sign in: Sign in with Apple, Sign in with Google, or a six digit code sent to your email. There is no password, so we never store one. If you continue without an account, we create an anonymous one with no name and no email.

What you tell her

Your messages to her and hers to you, in one thread. What she did for you and the reasons she gave. The memory she keeps about you, so she does not have to ask twice.

Your plans

Your to-dos, the parts of your week that do not move, her own calendar of plans for you, your rules and your quiet hours.

The areas of your life

Only what you choose to log, in five places:

• Health: meals, workouts, sleep, water, weight and your cycle if you track it, and what Apple Health shares if you connect it. See Apple Health.
• Wealth: expenses, income, budgets, subscriptions and invoices you keep track of. Amira does not connect to a bank and never asks for a card or account number.
• Love: the people you care about and what you want to remember about them.
• Mind: journal entries, how you feel, books and courses, and your answers to her daily question.
• Happiness: goals, and the things you do because they make you happy.

Your voice

When you hold her tab and speak, the audio is turned into words. We keep the words, not the recording.

Photos you choose to send

A photo of a meal is read once to estimate what is on the plate and is never stored. A photo you attach in the thread or a weekly check-in photo is stored in private storage that only your account can read. A photo you post as proof in a circle is stored the same way, and the members of that circle can see it.

Circles

What you post in a circle: a line, a photo as proof, whether you kept your day, and your reactions. See Circles below for who sees it.

Contacts

If you let her read the contacts on your phone, she uses them on the phone to match a name to a person. They are never uploaded. Google contacts are separate, and read only if you turn them on for a Google account. See Google user data.

Your devices

The token that lets us send a notification to your phone, and the list of devices you are signed in on, so you can end a session from Settings.

Purchases

What you bought and when, as Apple and RevenueCat report it. Never your card details.

What we do not collect

No analytics, no advertising identifiers and no tracking across other apps or websites. Amira does not read your location. The weather in your morning brief comes from the city you gave her.

How we use it

• To run Amira for you: to answer you, plan your days, and send the notifications and emails you switched on.
• To keep your account safe and working: signing you in, stopping abuse and fixing what broke.
• To keep Circles safe: screening posts and reviewing reports.

Nothing else. No advertising, no selling, and no profile of you for anyone but you.

Why we are allowed to

Under the GDPR we rely on:

• Our contract with you, to provide what you signed up for.
• Your consent, for connections such as Google, Oura and Apple Health, and for emails you switch on.
• Your explicit consent, for health data and cycle data, which the law treats as special category data. See Health and cycle data.
• Our legitimate interest in keeping Amira secure and Circles safe.
• A legal obligation, to keep a receipt of a purchase for 30 days after you delete your account, as Spanish law requires.

Who helps us run Amira

These companies process data for us, only to run Amira. Each receives only what its part of the job needs.

Supabase

Accounts, sign in, the database, file storage and the server functions that run her. It holds everything Amira stores. The database and storage are hosted in the European Union, in Ireland.

Google Gemini

Writes her replies, your morning brief and her other messages, and reads a photo when you send one. It receives the conversation, the context she keeps about you and the photo, for that one request. If you turn on Inbox for a Google account, it also sorts, summarises and drafts replies to your email, and receives the text of the email it is working on. See Google user data.

Deepgram

Speech to text. It receives the audio you dictate and sends back the words.

ElevenLabs

Her voice. It receives the text she says out loud.

Resend

Email delivery. It receives your email address and the email we send you.

Apple

Sign in with Apple, App Store purchases and notification delivery to your iPhone. Apple takes the payment. Amira never sees your card details.

RevenueCat

Keeps track of what you bought. It receives your Amira account number and the purchase records Apple provides, never card details.

Expo

Push notification delivery. It receives your phone's notification token and the text of the notification.

Google Sign-In

Only if you sign in with Google. It tells us your name and email address.

Google Calendar, Gmail, Contacts and Tasks

Only when you connect your Google account, and reading your inbox, your Google contacts and your Google Tasks only when you turn each one on. See Google user data.

Oura

Only when you connect your ring. See Oura.

Three public services answer questions for her and receive no account details: Open-Meteo for the weather, which receives a city name; NewsAPI for your news, which receives the topics you chose; and Open Food Facts, which receives a barcode you scan.

Some of these providers process data outside the European Economic Area, mainly in the United States. Where they do, the transfer relies on the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.

Who else sees it

We do not sell your data. We share it only:

• with the providers above, to run Amira
• with the members of a circle you join, for what you post there
• when the law requires it
• when you ask us to

Amira and AI

Amira uses three third-party AI services. Nothing is sent to any of them until you allow it: the app asks you first, names each service and says what it receives, and you can turn it off or back on at any time in Settings, Your account, AI services. With it off, Amira does not write replies, read photos, sort your email, turn your voice into text or read her replies aloud. Everything you add or log by hand keeps working.

Google Gemini

Writes her replies, your morning brief, summaries and email drafts, and reads a photo or file when you send one. For each request it receives what you typed or said, any photo or file you attached, and the parts of your calendar, to-dos, health, money, contacts and email that the request needs. Readings from Apple Health are never part of it.

Deepgram

Turns your voice into text. It receives the audio when you talk to Amira, and sends back the words.

ElevenLabs

Reads her replies out loud. It receives the text she says.

Each of them processes this data only on our behalf, to answer that request, under its data processing terms, which require it to protect your data to the same standard as this policy. We do not use your data to train AI models, and we do not sell it.

She can be wrong. The terms of use say more about that.

Health and cycle data

Some of what you log is health data: meals, workouts, sleep, weight, what Oura reads, what Apple Health shares, and your cycle if you track it. Under the GDPR this is special category data. We process it only with your explicit consent, which you give by turning a feature on and choosing what to log. You can withdraw it at any time by turning the feature off or deleting what you logged.

Cycle tracking

It is off until you turn it on, and off is a real answer. With it off, nothing about a cycle exists in your account.

When it is on, it keeps what you choose to log: the days of your period and how heavy it was, how each day felt (mood, pain, body signs, energy, sleep, discharge, sex drive), home ovulation and pregnancy tests, your birth control method, any condition a doctor named that you choose to save, a due date in pregnancy mode, and your own notes and tags.

Where it is kept

In the same database as everything else, in the European Union, behind row level security, so only your account can read it. Predictions are worked out from your own days each time and are not stored anywhere else.

Sharing it with her is a second decision

The cycle screen asks "Can I use your cycle?" Until you answer yes, nothing about your cycle reaches her messages or Google Gemini. If you say yes, one short line about where you are in your cycle is added to what she reads for your thread, your morning brief and her nudges. That line never includes your sex drive or a test. You can change your answer at any time in your cycle settings, or by telling her.

It never reaches another person

Your cycle is never shown to anyone else. It never goes into a circle, an email, an event title, a calendar invite or a notification another person could see. The marks on your calendar are drawn on your phone and are never written to Google. Cycle reminders are scheduled on your phone and never pass through our servers. A setting called Keep it off the lock screen makes them say nothing about your cycle.

Deleting it

"Delete my cycle data", in your cycle settings, deletes every day you logged and turns tracking off. Deleting your account deletes all of it.

Apple Health

Connecting Apple Health is optional and only possible on an iPhone. Apple shows its own permission sheet, and you choose each type of data Amira may read and save. You can change those choices at any time in the Health app. Apple does not tell apps which types you allowed to be read, so Amira only ever has what you allowed.

What Amira reads. Sleep, steps, active energy, workouts, heart rate, resting heart rate, heart rate variability, weight and body fat. Your menstrual flow is read only when you tap Import period history, and the days it finds are added to your cycle as period days, where the cycle rules above apply to them.

What is kept. A summary, not every sample: one figure per day for steps, active energy, heart rate, resting heart rate, heart rate variability, weight and body fat, one row per night of sleep and one row per workout. It is saved to your account in the same database as everything else, in the European Union, behind row level security, so only your account can read it. Amira reads again from Apple Health when you open the app, at most every few minutes, and never while the app is closed.

What Amira saves to Apple Health. Only what you log in Amira, and only for the switches that are on in Health, Devices: your weight, your daily water total and workouts you log (on unless you turn them off), and period days (off unless you turn it on). Apple Health also has to allow it in its own sheet.

What it is never used for. Apple Health data is never sold, never used for advertising or marketing, never shared with data brokers, and never used to train AI models, ours or anyone else's. It is not sent to Google Gemini: the readings Amira takes from Apple Health are shown to you in the Health screens and are not part of what she reads to write a reply, a morning brief or a nudge. Period days you import become part of your cycle, which reaches Gemini only if you said Amira may use your cycle.

Stopping it. Disconnect Apple Health in Health settings, or turn its access off in the Health app, and Amira stops reading and saving. What already synced stays in your account until you delete your account, which deletes all of it. What Amira saved to Apple Health stays there, and you can delete it in the Health app.

Google user data (Calendar, Gmail, Contacts and Tasks)

Connecting your Google account is optional. Amira works without it. If you connect it, this is exactly what happens to your Google data.

What we access. Your Google Calendar: the events and the calendars you own or subscribe to, and a second calendar she creates for her own plans. Permission to send email from your Gmail, so she can send an email you have approved. Your Google email address, so you can see which account is connected. We ask for the narrowest permissions the features need.

Three more permissions are optional. Each is asked for on its own screen, one at a time, and only when you turn it on for an account in Settings, then Connections. They are open to invited testers for now.

• Inbox (gmail.modify): the sender, recipients, subject, date and text of new messages in your inbox, and permission to add labels, archive messages and create drafts in a conversation.
• Google contacts (contacts.readonly): the names, email addresses, phone numbers, birthdays, organisations and photos of the contacts saved in your Google account. Read only.
• Google Tasks (tasks): the tasks in one list you choose, which Amira reads and writes.

Why. Calendar access lets her show your real schedule, protect the time you have blocked, and create or change events when you ask her to. She also marks the times of the non-negotiables you set as busy on your main calendar, so nobody books a meeting over them. Gmail access lets her send an email from your own address. She writes it in your thread, and it goes only when you tap Send on it. She invites another person to an event only when you have asked for it.

Inbox lets Amira tell you which mail matters, put it in your morning brief and send you a message when something can't wait, write replies that you edit and send, turn requests, bills, bookings and meeting requests into to-dos, bills, trips and events when you tap to confirm, and archive newsletters and receipts when you allow it. Amira never sends an email without your tap, never deletes a message and never unsubscribes you. Google contacts let Amira know who your people are, when you last met or emailed them, and their birthdays. Google Tasks keeps your to-dos and one Google Tasks list in step, both ways.

Where it goes. The token that keeps your Google account connected is stored encrypted, and the short lived token it issues expires within an hour. Calendar events are synced into your own private area of our database so the app can show them quickly. An email she writes for you is kept with your account, so you can read it, change it and send it, and it is deleted with your account. When she answers you about your calendar, or writes an email you asked for, the parts needed are sent to Google Gemini to write it. Every row is protected by row level security, so no other user can read it.

What we store from the optional permissions. For each email in your inbox: the sender, the subject, the date, Gmail's short preview (at most 200 characters), a one line summary and how it was sorted. Never the full message: its text is read from Gmail when it is needed, to sort it, to draft a reply or to show it to you, and is not kept. These rows are deleted after 30 days unless the email is still waiting on you. A reply you have not sent is kept until you send or cancel it, and then for the life of your account, like other emails she writes for you. For Google contacts: the fields above, and when you last met or emailed each person. For Google Tasks: which to-do matches which task.

Google Gemini. To sort, summarise and draft, the sender, subject and text of an email, and up to four earlier messages in its conversation when drafting a reply, are sent to the Google Gemini API, which uses them to answer that one request. Gmail data is never part of the emailed copy of your morning brief.

What we never do. We do not sell your Google data, we do not share it with advertisers, and we do not use it to develop, improve or train generalised AI or machine learning models. No person at Amira reads your email, contacts, tasks or calendar, except with your explicit permission for a support request, where it is needed for security or to investigate abuse, or to comply with the law. We do not transfer it to anyone except to provide these features: to Google Gemini, as above, and to Supabase, which hosts our database.

Limited Use. Amira's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Turning it off. Each optional permission can be turned off on its own, per account, in Settings, then Connections, then the account. That stops it and deletes what Amira kept for it: the sorted email, the saved contacts, or which to-do matches which task. Nothing in your Google account changes. Google keeps listing the permission until you disconnect the account, or remove Amira at myaccount.google.com/permissions.

To stop everything, in the app, Settings, then Connections, disconnect the account. That stops syncing, removes the busy times she added for your non-negotiables, revokes Amira's access with Google and deletes the calendar data she synced from that account, with everything kept for its optional permissions. Nothing else in your Google account is deleted, including the Amira calendar, which you can remove in Google Calendar. You can also revoke Amira's access at any time at myaccount.google.com/permissions, which stops all future access; to have the synced data deleted after that, disconnect the account in the app, write to hello@myamira.com, or delete your account, which deletes all of it.

Oura

Connecting an Oura ring is optional. If you connect it, she reads your Oura profile details, your daily sleep, readiness and activity, your heart rate, workouts, sessions and blood oxygen, so she can plan around how you slept and recovered. The access tokens are stored encrypted. You can revoke access from your Oura account at any time. To have what she already read deleted, write to us, or delete your account.

Circles

A circle is a small private group you join with a code from somebody already in it. There are no public profiles, no feed and no directory of people.

What you post in a circle, your name and whether you kept your day are seen by the other members of that circle. Every post is screened when it is written, by a word list on our own server; no outside AI reads it. A post someone reports is read by a person at Amira. How reporting and blocking work is on the support page.

If you leave a circle, what you already posted stays with the circle for the people still in it. If you delete your account, your posts and photos are deleted.

Email and notifications

We email you your sign in codes and the messages that belong to your account, such as a welcome and a receipt. Your morning brief, your evening check-in and your weekly sit-down come by email only if you switch that on in Settings. Every email says how to stop it.

Notifications reach your phone through Apple and Expo. You can turn them off in the Settings app on your iPhone.

How long we keep it

As long as your account exists. When you delete your account, your data is deleted from our database straight away, with one exception: a receipt of any purchase is kept for 30 days, as Spanish law requires, and then deleted. Our database provider keeps daily backups for up to 7 days, so deleted data is gone from those within a week. Apple keeps its own record of what you bought, because that record is Apple's.

Your rights

You can:

• ask for a copy of all the personal data we hold about you
• correct it, in the app or by asking us
• delete it, in the app or by asking us
• take it with you, in a machine readable file
• ask us to restrict or stop a use of it
• withdraw a consent you gave, at any time

To delete your account, go to Settings, then Your data, then Delete my account. For anything else, write to hello@myamira.com from the address on your account. We answer within one month.

You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, or to the authority where you live.

How we protect it

• Row level security in the database, so each account can read and change only its own rows.
• Encryption in transit and at rest. The tokens that keep Google and Oura connected are encrypted again, separately, before they are stored.
• No passwords. You sign in with Apple, Google or a one time code.
• Access to our systems only for the people who run Amira, and only for what running it needs.

Children

Amira is not for anyone under 16. We do not knowingly collect data from children. If you think a child has given us personal data, write to hello@myamira.com and we will delete it.

This website

myamira.com sets no cookies and runs no analytics. Some of its pages load their typeface from Google Fonts, so your browser asks Google for the font file, which shows Google your IP address.

Changes to this policy

When this policy changes, the date at the top changes. If a change matters, we tell you in the app or by email before it takes effect.

Contact

Isabella Fernandez Abrahan
Madrid, Spain
hello@myamira.com