Your privacy, in plain language

Smitty is designed for shared family coordination. Family events and responsibilities can be visible to the adults coordinating them.

When coordinating through a connected personal AI assistant, another adult’s private calendar events can be represented as free/busy availability rather than exposing private details.

Smitty can connect with compatible personal AI assistants through an authorized connection. Each adult connects their own assistant and controls the permissions granted to it.

Connecting an assistant does not automatically give it unrestricted access to your household’s information. Smitty enforces permissions when sharing information or handling coordination requests.

You can revoke your assistant’s connection in Smitty’s settings. Disconnecting stops future access; it does not erase information previously shared or undo completed actions.

Your account info — email, an optional phone number, your household name, and how you sign in (a magic link/code, or email and password).

The stuff you send us — emails you forward, attachments, your texts and WhatsApp messages, voice notes (if you opt in), and your questions. This is what we turn into your digests, reminders, calendars, and lists.

Some of that is sensitive — like medical appointments or details about your kids. We treat it as confidential and only use it to run the features you asked for.

A little operational data — timestamps, delivery receipts, and error logs so we can keep things running and fix problems. These logs never include your message contents, attachments, voice audio, or family profiles.

Smitty is built to help you manage life for other people — your kids, your partner, your contacts. When you share their information, you're confirming you're allowed to. We use it only to help you, never to profile or advertise to anyone, and never for kids. If someone in your household wants their info corrected or removed, you can do it in the app, or email us at privacy@smittyhq.com.

Smitty is for adults. We don't knowingly let anyone under 13 create an account.

Smitty uses AI to turn information from approved sources into useful family plans, reminders, and answers. For example, a school email announcing an early dismissal can become a calendar event and a timely reminder. Smitty shares information with its AI processing providers only as needed to deliver the requested functionality. Smitty does not authorize its AI providers to use your family’s content to train their models.

Voice notes. If you send a supported voice note (and have opted in under settings), Smitty sends the audio to OpenAI to turn it into text. OpenAI's published data controls say audio sent for transcription isn't used for training and isn't retained. Once it's a transcript, we treat it exactly like your other messages — and we delete the original audio right after transcribing it. We never build a voiceprint or use your audio to identify anyone.

One honest note: AI isn't perfect, and transcripts can have errors. Please don't rely on Smitty for medical, legal, or financial decisions — double-check anything that matters.

We keep the web app lean. To stay signed in, we use a secure session, and we store a few preferences in your browser (like your timezone and view settings).

For product analytics, we use Google Analytics only if you opt in — it's off by default, and you can change your mind anytime in your privacy settings. We don't intentionally send any of your household content to Google. (We're also working to keep analytics away from the pages that show your family's information.)

• Forwarded emails and attachments: 30 days or less, then automatically deleted.
• Voice audio: deleted right after we transcribe it — we keep only the text.
• The items we create for you (events, lists, reminders): kept until you delete them or close your household.
• Operational logs: 90 days, then purged.

Smitty only sends you service messages — digests, reminders, confirmations, and replies to your commands. No marketing.

Want to stop? Text STOP and we'll turn off all Smitty messaging — both SMS and WhatsApp. Text HELP if you need a hand.

Text DELETE to Smitty (or use the delete control in the app). For your safety, this starts a 24-hour confirmation window — reply DELETE CONFIRM to finish. Deletion requires that confirmation step. After you confirm, your household data — messages, calendar, attachments, the items we created, and your account — is removed from our active systems. We're introducing a 24-hour post-confirmation undo window; until it ships, treat confirmation as irreversible.

You can manage your connected sources, notification preferences, and authorized AI assistant connections.

Wherever you live, you can ask us to show you your data, correct it, export it, or delete it — just email privacy@smittyhq.com. If you're in California, the EU, or the UK, you have specific legal rights (and the right to complain to your regulator); the Privacy Policy spells those out.

For additional details about retention periods, deletion procedures, and service providers, see our Privacy Policy. Questions? Contact privacy@smittyhq.com.

A small set of trusted vendors, each under a data-protection agreement: Supabase (database and sign-in), Railway (hosting), Twilio (SMS and WhatsApp delivery), Anthropic (our AI assistant), OpenAI (voice transcription for supported voice notes), and — only if you opt in — Google Analytics. Want the current full list? Email privacy@smittyhq.com.

If there's ever a security incident that affects your data, we'll tell you within 72 hours of confirming it — whether or not the law requires us to.