Privacy Policy
Last updated November 4, 2026
Overview
This Privacy Policy explains how Hey Ida handles information through the Ida Mac application, related services, and heyida.ai. Ida is operated by PRISM19, INC. Voice input is captured only when you deliberately invoke recording, and consequential actions wait for your approval.
The Voice Data Ida Processes
With push-to-talk, Ida records while the assigned key is held or while a recording you deliberately started remains active. You can choose Local or Cloud ASR, where available. Cloud audio and transcripts are processed to complete your request and are not retained by Ida. When you request Cloud features, Ida may send relevant prompts, context, or screen content off your device as needed to provide them. Ida may also process information through external services you have authorized. We will never send your data to a service or integration that you have not explicitly given Ida access to. Production diagnostics are designed not to contain audio or transcript content or any Personally Identifiable Information (PII).
Confirmation Before Action
Ida shows you a preview of every consequential action and waits for your approval before carrying it out. If you decline, Ida does not intentionally carry out the proposed action. Connected services may still receive authorization, lookup, or validation requests needed to prepare that preview.
Data Retention
Ida retains information only as long as reasonably needed to provide and secure the service, resolve disputes, and meet legal obligations. Cloud audio and transcripts are not retained by Ida after the request is complete. Settings, encrypted credentials, memory, and limited diagnostics stored on your device remain until you delete them or remove Ida application-support data. External services you connect may retain information they process under their own terms, retention practices, and account settings.
Third-Party Services
Ida uses its Cloud services and service providers to provide and support features. If you connect an external account or service, Ida may exchange information needed for your request with that service. Ida only accesses services or integrations you explicitly authorize. Information sent to or from Ida’s Cloud services is encrypted in transit. External services and providers process information under their own terms and privacy policies, and may process it in the United States or other countries. The providers Ida uses may change over time.
Google User Data
If you connect a Google account, Ida accesses Gmail, Google Calendar, Google Contacts, and Google Drive only to carry out requests you make: searching and reading messages, drafting and sending email you approve, finding contacts by name, checking your availability and creating events, and finding, reading, renaming, and sharing files.
Who receives it. To answer a request, the relevant portion of your Google data is sent to the AI model providers that generate Ida’s responses and, if you ask Ida to read content aloud, to a text-to-speech provider. Ida’s servers run on a third-party cloud infrastructure provider. These service providers process the data only to return a response to Ida, under contractual terms. We do not sell Google user data, use it for advertising, or transfer it to anyone else except as required by law.
AI models. Ida does not use Google user data to develop, improve, or train generalized AI or machine-learning models.
How it is protected. Ida requests Google data directly from your Mac. When you connect Google, your access tokens pass through Ida’s servers for up to five minutes so the app can collect them, and are then deleted. After that, they are stored only on your Mac, encrypted. All data in transit between Ida, our servers, our providers, and Google is encrypted with TLS. Ida’s servers process request content to produce a response and do not store your email, calendar, contacts, or files. Operational logs record request metadata, not content, and are kept for a short period. Memories you ask Ida to keep are stored on your Mac, where you can review or delete them.
Your control. You can disconnect Google at any time in Ida’s settings, or revoke access at myaccount.google.com/permissions.
Limited Use. Ida’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your Choices
You can choose Local or Cloud ASR where available, decline a proposed action, disconnect integrations, remove locally stored credentials, and review or delete information you asked Ida to remember. You may request access to, correction of, or deletion of personal information controlled by PRISM19 by emailing privacy@heyida.ai. Depending on where you live, additional rights may apply. PRISM19 does not sell personal information, share it for cross-context behavioral advertising, or use voice recordings, prompts, or connected-service data to train AI or machine-learning models.
Children’s Privacy
Ida is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has provided us with information, please contact us so we can remove it.
Changes to This Policy
We may update this policy as Ida changes. If a change is material, we will update the date above and provide any additional notice required by law. Continued use after an updated policy takes effect is subject to the updated policy.
Contact Us
Ida is operated by PRISM19, INC. Privacy questions and requests can be sent to privacy@heyida.ai.