Privacy policy

For the Aforeday iPhone app and this website. Effective 21 October 2026, version 2.0. It describes the app as it actually works today, not as we intend it to work.

• 1. Who is responsible
• 2. What Aforeday processes
• 3. The agent and your approvals
• 4. AI processing
• 5. Not available yet
• 6. Why, and on what legal basis
• 7. Who else sees it
• 8. Where it is processed
• 9. How long it is kept
• 10. Exporting and deleting
• 11. Security
• 12. Your rights
• 13. Children
• 14. This website
• 15. Changes

1. Who is responsible

The controller for the data described here is Neurotech AI Solutions GmbH, Lückstraße 24, 10317 Berlin, Germany, registered at the Amtsgericht Charlottenburg under HRB 270776 B, represented by its Managing Director, Ashraf Al-Eryani. For anything about your data, write to contact@aforeday.com. We have not appointed a data protection officer, as we are not required to.

2. What Aforeday processes

Your account

You sign in with Sign in with Apple; it is the only way to sign in. We store the email address Apple gives us (this may be a private relay address if you choose to hide yours), your name if Apple provides it on your first sign-in, Apple’s account identifier for Aforeday, and a record of each device that signs in: model, iOS version, app version and when it was last seen. Sign-in sessions are stored as a random token, kept only as a hash, valid 30 days, replaced each time it is used, and bound to the device it was issued to.

Your iPhone’s calendars and reminders

With your permission, the app reads the calendars and reminder lists you include — on first run, all visible ones — and uploads, for each event, its title, start and end, time zone, all-day flag and the display names of its attendees, and for each reminder its title and due date. Events from 90 days back to 60 days ahead are included, along with reminders that are open or were completed in the last 7 days.

Notes, event links and addresses are not uploaded. Organiser and attendee email addresses are reduced on the device to three yes/no facts: whether you organised the meeting, whether the organiser is outside your organisation, and whether your invitation is still unanswered. Short phrases derived from those facts, such as “booked by someone outside your organisation”, are uploaded as part of the cards Aforeday shows you.

Addresses you enter for travel planning, and the locations of your events, stay on your iPhone. They are sent from your phone to Apple Maps and Apple Weather to work out when to leave and whether weather will delay you; only the resulting “leave by” time and the meeting it belongs to reach us. The app never asks for your device location, contacts, photos, camera or health data. Voice input is transcribed on your device; the audio is never uploaded, and the text is sent only if you send it.

What you create in Aforeday

The cards Aforeday shows you and what you do with them (shown, done, dismissed, snoozed, and when); your conversations with the assistant, including the replies and the items they cite; drafts you ask for, such as a note declining or moving a meeting, including any edits you make; meeting briefs and daily briefings; what the agent proposed and your decision on each (section 3); and your settings, including how Aforeday may act, what a notification may reveal, and your AI choices.

Face ID and your passcode

Before Aforeday widens what it may do on its own (section 3), the app asks iOS to confirm it is you, with Face ID, Touch ID or your passcode. That check is made by iOS on your device. Aforeday receives only whether it succeeded; no biometric data exists in the app or reaches our servers.

Notifications

If you allow notifications, we store your device’s push tokens. Every notification and Lock Screen activity we send follows the preview mode you choose in Settings — full details, a discreet summary, or only that Aforeday has something for you — which the app sends to us so our servers can honour it. We keep a record of each push we send — its type, status and time, never its text — and, for the reminders before a meeting, the meeting’s title and time. We also send empty background pushes with no text and no identifiers, so a change you make on one device reaches your other devices sooner.

Your subscription

Aforeday requires a subscription, bought through Apple’s App Store. Apple processes the payment; we never see your card, billing address or Apple ID password. From Apple we receive signed transaction information and store the subscription’s product, status, expiry, whether it renews, and Apple’s transaction identifier. Apple also sends us notifications when a subscription changes; we keep a content-free record of each: its type, Apple’s identifiers and when it was processed.

Diagnostics

When the app crashes, or dictation fails, it writes a technical note — the kind of failure, the exception or signal, a reason, up to 64 lines of the app’s own call stack, the build number, and for a dictation failure the kind of audio input in use, such as a Bluetooth headset — and sends it the next time you open the app. Never your events, your messages or your transcript, and never a device’s name. This is on by default, is disclosed on the first screen of the app, and can be switched off under Settings › Diagnostics › Send crash reports; switched off, nothing is sent and a note already waiting is deleted. These notes go into our server logs, not our database. Our logs otherwise hold internal identifiers, counts, error descriptions and, for requests we throttle, IP addresses. Aforeday’s code does not write the content of your calendar or your conversations to its logs. The app contains no analytics or crash-reporting service and no third-party code.

3. The agent and your approvals

Aforeday can work on what it shows you. It is off until you turn it on in Settings › Aforeday’s agent. Once on, it proposes drafts and small actions from your calendar, reminders and the cards it has built from them, either on its own or when you tap a card. Every proposal waits on the Now screen until you approve, edit or skip it.

• Ask me first is the default. Each kind of action has its own setting, “Ask me first” or “Act and tell me”, under Settings › Aforeday’s agent › What Aforeday may do on its own. Choosing “Act and tell me” for a kind of action that can leave your phone asks for Face ID or your passcode first. The setting is yours: the AI never sees or changes it.
• Reversible things run at once, with undo. Under “Act and tell me”, an action you can undo inside the app, such as adding a reminder to your iPhone, runs and tells you.
• Anything that leaves your phone is held first. Under “Act and tell me”, a message to someone else is announced by a notification with an Undo button and sent only after a five-minute window. A first message to someone you have never written to from that account always asks you in the app, with Face ID or your passcode, whatever the setting. Today no mail or chat account can be connected (section 5), so Aforeday currently has nothing to send and no one to send it to; these rules govern sending from the day an account can be connected.
• What is kept. For each proposal: what kind of action it was, the reminder title or the draft it referred to, your decision, how you approved it, and the result. We also keep a record of each time the agent worked for you — when, which card, how many steps, the cost and why it stopped, with no text — linked to your account for 30 days.
• Pause. Settings › Aforeday’s agent › Pause stops everything the agent starts on its own: reading, drafting and proposing. Turning the agent off does the same.

4. AI processing

Aforeday uses Google’s Gemini 2.5 Flash model through Google Cloud Vertex AI, in Google’s europe-west1 region (Belgium). It is used for: writing your meeting briefs and daily briefings, answering you in the assistant, writing the meeting decline or reschedule notes you ask for, and, if you turn the agent on, deciding what to propose and drafting it.

What is sent is limited to what the feature needs: a meeting with up to ten earlier meetings involving the same people and your open items; short titles of your open items and upcoming events; or your own question. Never your whole calendar. Before anything is sent, the length is capped and pattern filters replace common secret formats — labelled passwords and tokens, API keys, one-time codes, card- and IBAN-shaped numbers — with placeholders. Requests that exceed the limits are refused rather than trimmed.

Prompts and responses are not written to our logs. We keep a technical record of each AI call — the task, the model and prompt versions, token counts, cost, how long it took and whether it succeeded — with no content and no link to you.

Under our agreement with Google, this data is processed by Google as our service provider and is not used to train Google’s models. We do not use it to train any model of our own, and no part of our code trains or fine-tunes a model.

You can switch AI off entirely in Settings › Privacy & data › AI data controls, or switch off individual sources: calendar content, assistant conversations, and email content for the day mail becomes available. With AI off, Aforeday falls back to its fixed rules, which is how it decides what needs your attention in any case; briefs show facts without a written narrative, and the agent drafts nothing.

5. Not available yet

Aforeday is built to connect to Google (sign-in, Calendar and Gmail), Microsoft (Outlook), Slack, Telegram and WhatsApp, and to look things up on the web, send check-ins and hold restaurant tables for you. None of these is available today: each is switched off on our servers, cannot be connected or turned on in the app, and no data from any of them is read, received or stored. Before any of them is switched on, this policy will be updated to describe exactly what it reads and keeps, and you will see a notice in the app (section 15).

6. Why, and on what legal basis

• To provide the app — everything in sections 2 to 4. Legal basis: performance of our contract with you, Article 6(1)(b) GDPR.
• To keep the service secure and working — logs, crash notes, request throttling, abuse prevention. Legal basis: our legitimate interest in a secure, functioning service, Article 6(1)(f) GDPR.
• To prove we honoured your choices — the consent and audit records described in section 9. Legal basis: our legal obligation to demonstrate compliance, Article 6(1)(c) with Article 5(2) GDPR.
• To sell and service subscriptions — the subscription and App Store notification records. Legal basis: performance of our contract, and our legal obligations in accounting.

We do not use your data for advertising or profiling, we do not sell it, and we do not make automated decisions about you with legal or similarly significant effects.

7. Who else sees it

• Google Cloud — as our processor, for hosting (Cloud Run), our database (Cloud SQL), short-lived queues and caches (Memorystore), AI processing (Vertex AI), secret storage, scheduling and logs.
• Apple — for Sign in with Apple, push notifications and Live Activities, and the App Store when you subscribe. From your phone only: Apple Maps and Apple Weather for travel planning, on-device speech recognition, and the Face ID or passcode check.
• Where you send it yourself — a draft leaves Aforeday only when you copy it or open it in your own mail app, and you send it.

There is no advertising network, no analytics provider, no crash-reporting service and no data broker in Aforeday. The app contains no third-party code at all.

8. Where it is processed

The app’s servers, database, caches and AI processing run in Google Cloud’s europe-west1 region in Belgium. Our application logs are kept in Google Cloud Logging, whose storage location is global rather than EU-only. Apple’s push, sign-in and App Store services, and the Maps and Weather requests made from your phone, are operated by Apple under its own terms and may involve processing outside the EU. Where a transfer outside the EU occurs, it takes place on the transfer mechanisms in our providers’ terms, such as the European Commission’s standard contractual clauses.

9. How long it is kept

This is what our code actually enforces today. Where a row says “until you delete your account”, section 10 explains what deletion does.

Data	How long
Your profile, settings and sign-in link	Until you delete your account.
Sign-in sessions and device records	Sessions expire after 30 days; the records stay until you delete your account.
Calendar events and reminders from your iPhone	Hidden immediately when the event disappears or you deselect its calendar; erased by a daily job once both the event and its last change are more than 90 days in the past; all erased when you delete your account.
Cards (the items Aforeday shows you) and what you did with them	Marked deleted 30 days after they are done, dismissed or expired. A daily job then erases the title and the reasons 30 days later, leaving only the marker that tells your other devices the card is gone; that marker is erased when you delete your account.
Things the agent proposed or did for you, your decision on each, and the result	Marked deleted 30 days after they are finished, declined, expired or cancelled. A daily job then erases the details 30 days later (the reminder text, the draft reference, the result’s details), leaving a marker that keeps what kind of action it was, how it ended, and when and how you approved it; the marker is erased when you delete your account.
Records of each time the agent worked for you (when, which card, how many steps, the cost, why it stopped — no text)	Erased after 30 days, and when you delete your account.
Assistant conversations	Erased 30 days after the last message, or when you delete the conversation.
Drafts	Erased 30 days after they are created, or when you delete them.
Meeting briefs and daily briefings	Meeting briefs erased 48 hours after the meeting ends, and as soon as the meeting itself is gone from your calendar; daily briefings erased after 30 days. Both are erased when you delete your account.
Meeting reminder records (the meeting’s title and time)	Erased 30 days after the reminder has fired, and when you delete your account.
Push records (type, status, time — no text)	30 days.
Subscription record	Until you delete your account.
App Store notification records (type, Apple’s identifiers, no payment data)	Kept, also after account deletion, for financial records.
Consent history and audit records	Kept to show we honoured your choices. At account deletion every identifier in them is replaced with a random one — including in the records of the deletion itself and of any data export you requested.
Your data export file on our servers	15 minutes, then deleted. The copy you save stays on your phone until you remove it.
Application logs, including crash notes	30 days.
Database backups	The last 14 daily backups, so deleted data leaves our backups within about two weeks.
Technical AI call records (no content, no link to you)	Kept.

10. Exporting and deleting

Exporting your data

In Settings › Privacy & data › Export my data, after a recent sign-in. You get a single JSON file containing your profile, your settings, your sign-in method, your devices, your subscription, your consent history, your events, your cards, your feedback, your assistant conversations, your briefings, your drafts, your meeting reminders, the actions the agent proposed or took for you with your decisions and their outcomes, a record of each agent run, and your sign-in history. What it leaves out is credentials: no token, and nothing that stands in for one, is ever included (section 11).

Deleting your account

In Settings › Privacy & data › Delete account, after a recent sign-in, by typing DELETE. The app asks you to confirm with Sign in with Apple once more, so that we can tell Apple to withdraw Aforeday’s access to your Apple ID: the code Apple gives us is exchanged and revoked at once and never stored. Deletion then revokes every session immediately, cancels anything the agent was waiting to do, and permanently deletes your profile, sign-in link, devices and push tokens, calendar events and reminders, cards, feedback, briefings, meeting reminders, assistant conversations, drafts, the agent’s records and settings — then checks that those tables hold nothing of yours. Your phone erases its local copy once the server confirms.

What survives, and why: your consent history and audit records, and the records of the deletion job and of any export you requested — all of them under random identifiers, with nothing left in them that links them to you (see section 9); Apple’s transaction identifiers in our App Store notification records; and anything in a backup, for about two weeks. Deleting your Aforeday account does not cancel your App Store subscription — do that in your iPhone’s Settings, under your name › Subscriptions.

11. Security

Traffic between the app and our servers uses TLS. Our secrets are held in Google Secret Manager; no sign-in token is ever included in an export. On your phone, your sign-in tokens are held in the iOS Keychain, available only after you unlock the device and never synced to iCloud. Our logs pass through a filter that removes addresses, tokens, keys and draft text.

We do not read your calendar, your conversations, or the data Aforeday derives from them. The exceptions are narrow: investigating a problem you report to us, investigating a security incident, or where the law requires it — and in those cases we work from identifiers and counts wherever that is enough. No part of the app or our API lets anyone see another person’s data, and there is no administrative interface that shows your content.

12. Your rights

You have the right to access your data (Article 15 GDPR), to correct it (16), to have it erased (17), to restrict its processing (18), to receive it in a portable form (20), and to object to processing based on our legitimate interests (21). The export and deletion tools in the app cover access, portability and erasure directly; for anything else, or if the export does not include what you need, write to contact@aforeday.com with “Privacy request” in the subject. We answer within one month.

You can also complain to a supervisory authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.

13. Children

Aforeday is made for working adults and is not directed at children. You must be at least 18 to use it, and we do not knowingly process the data of anyone younger.

14. This website

This site sets no cookies, runs no analytics, embeds no third-party fonts or scripts, and stores nothing about you. It is served by GitHub Pages, which receives your IP address and request details in its server logs in order to deliver the pages, under GitHub’s privacy statement.

15. Changes

If Aforeday starts collecting something new, or uses what it has for a new purpose, we update this policy first. The app then shows everyone whose account predates the new version a notice once, and records when you have seen it. This page shows its effective date and version at the top.