suado.ai

SUADO privacy notice

Draft, 20 October 2026. The founder edits this draft at the first phone tests, and a solicitor reviews the final version before friends join. Anything in square brackets and capitals is still to be filled in or confirmed.

In short

  • SUADO is an AI, not a person. It is not an emergency service, and nobody watches your messages or calls as they happen. If you or anyone else is in danger, call 999.
  • SUADO is a small pilot, by invitation only, run by [COMPANY NAME].
  • SUADO treats everything it holds about you as health data, the most protected kind of personal information.
  • It keeps what you tell it so that it can help you, and keeps most of it until you delete it with /delete.
  • Your information is stored in London, in the UK. Some of the companies that help run SUADO handle parts of it outside the UK, including in the United States.
  • You make three choices about how your information is used. Only the first is needed to use SUADO. You can change any of them at any time with /privacy.
  • SUADO does not sell your information or use it for advertising.

Who runs SUADO

SUADO is run by [COMPANY NAME], a company registered in [COUNTRY OF REGISTRATION] with company number [COMPANY NUMBER]. Its registered address is [REGISTERED ADDRESS]. In this notice, "we" means [COMPANY NAME], and "the founder" means the person who founded SUADO and runs the pilot.

[COMPANY NAME] decides how and why your information is used, so it is the controller of your information under UK data protection law [SOLICITOR TO CONFIRM]. Our registration number with the Information Commissioner's Office (ICO) is [ICO REGISTRATION NUMBER].

Data protection officer: [NAME AND CONTACT DETAILS, OR NONE APPOINTED] [SOLICITOR TO CONFIRM WHETHER ONE IS NEEDED].

To contact us about anything in this notice, email hello@suado.ai.

SUADO is in a pilot. The founder uses it first, and then friends join by personal invitation. There is no public sign-up.

What SUADO is

SUADO is a personal organisation and accountability service. It helps adults plan their day, start what they intended to do and follow through, using calls and messages. It is not intended to diagnose, treat, monitor, prevent or alleviate any disease or medical condition, it does not give medical advice, and it is not a substitute for care from a clinician. It is not an emergency service.

SUADO is an AI, not a person. Its messages, its answers to your questions and, once calls start, its voice on calls all come from software, including AI models from the companies listed under Who handles your information. No person writes its replies or speaks on its calls. Its first message tells you it is an AI, and so does its first call.

SUADO is for adults only.

If you need help now

SUADO cannot help in an emergency, and nobody watches your messages or calls as they happen.

  • If you or anyone else is in danger right now, call 999.
  • For urgent help that is not an emergency, call NHS 111, which has a mental health option.
  • In Northern Ireland, call Lifeline on 0808 808 8000.
  • Samaritans are free, day or night, on 116 123.

If SUADO picks up a risk of harm

SUADO checks every message you send, and later in the pilot every call and anything you type on the board, for signs that you may be at risk of harm. Once you have agreed to Service, that includes your answers while you set up. Anything sent before that, or after you switch Service off, is not checked, so SUADO's first message to you gives the numbers above. Nor is anything you send once you have confirmed /delete: until the deletion has finished, SUADO stores it, sends it to no one and deletes it with everything else, and after that SUADO keeps of it only what it keeps from anyone who has not joined: the chat ID, the date and any command, deleted after 30 days.

  • If it finds a concern, SUADO sends you a message pointing you to human support, with the numbers above. It does not carry on as usual with that message: it saves nothing you asked for in it, does not answer a question in it, and does not change your calendar because of it. A command, such as /pause or /delete, still does what it always does, after that message.
  • On a call, the coach stops coaching and points you to human support.
  • The founder gets an alert straight away or, for a call, once the call has ended and been processed. The alert says that a concern was flagged for your account. It does not include your words.
  • If the concern looks urgent, or SUADO has to try a second time to record a concern, it also pauses everything it starts for you for 24 hours, including calls you booked. SUADO still replies to your own messages during the pause. Only the founder can end the pause early.
  • [WHAT THE FOUNDER DOES WHEN AN ALERT ARRIVES, INCLUDING AT NIGHT (LAUNCH-CHECKLIST ITEM 27)]

SUADO is not monitored. Nobody watches your messages or calls as they happen, an alert may not be seen straight away, for example at night, and SUADO cannot send help. If you or anyone else is in danger, call 999.

What is running now, and what comes later

The pilot starts small. Some parts of SUADO run from the start, and others come later in the pilot. This notice covers both, and marks each part that is not running yet. We will update it as each part starts. [UPDATE THIS SECTION, AND THE LABELS BELOW, AS EACH PART STARTS]

From the start Running now

  • Joining by invitation, and setting up inside Telegram.
  • Texting SUADO to add, change, finish and cancel tasks, appointments and plans.
  • Asking SUADO about your day. An AI writes the answer from your own information.
  • The commands /today, /tasks, /settings, /pause, /privacy, /delete and /help.
  • The safety check on your messages.

Saved now, used later

  • Your call times. Calls start later in the pilot.
  • Your fixed points, up to three daily times you set. They start later in the pilot, and only after you tap to start them.
  • Anything you ask SUADO to remember. It is used once SUADO's memory starts, if you have agreed to it.

Later in the pilot Not running yet

  • Phone calls, their transcripts and the summaries after them, and SUADO's memory of you, if you agree.
  • Google Calendar, if you connect it, and rules you set in your own words, such as "no calls before 9 at weekends".
  • The board, a screen inside Telegram with your tasks.
  • Nudges, reminders, your fixed points and an optional wake-up call.
  • Calendars you publish as a link, and an optional copy of them in Google Calendar.
  • A first call that gets to know you, and help with steps towards your goals.
  • Trying different approaches at random, if you agree, to learn what helps.
  • Referral links, and display mode, which is for the founder and test accounts only.
  • After that, SUADO choosing, within limits you set, when to get in touch and when to stay quiet.
  • After friends have joined, email from your own Gmail when you ask. We will update this notice before that starts.

What SUADO collects

From the start Running now

  • Your Telegram chat ID, which is how SUADO knows a message comes from you.
  • The name you want SUADO to call you.
  • Your mobile number, which you share with one tap in Telegram. SUADO accepts only your own number. It is used for calls once they start.
  • Your time zone, call times, quiet hours and other settings.
  • Your consent choices, each with the date and time you made it.
  • What you tell SUADO in messages: tasks, appointments, plans, what you have done, pauses, notes and questions, with any details you add.
  • Your answers when you join: up to three goals, what usually gets in the way, up to three fixed points, how direct SUADO should be, and anything it should never bring up.
  • A record of what SUADO did and what happened next: which messages it sent and when, and how you responded. Once calls start, this includes each decision about whether to contact you, and why. These records hold codes, numbers and times, not your words.
  • Whether a message raised a safety concern.
  • A record of each request SUADO makes to an AI model: which model, how long it took and what it cost, not what was said.

Things you tell SUADO about other people, such as "call mum", are part of your information and are protected in the same way.

Later in the pilot Not running yet

As each part starts, SUADO also collects what that part needs. Each part has its own section below.

  • Your calls: when they happen, how long they last, whether you answered, what they cost, and a written transcript of each one. Calls are not recorded, but they are transcribed.
  • What you agree on calls, and how your day is going, such as your energy, mood or sleep, only where you say so clearly.
  • SUADO's memory of you, if you agree: a written summary of at most 1,200 words.
  • Rules you set in your own words.
  • Your calendar events, the changes you ask for, the guest addresses you confirm, and the keys or links to your calendars.
  • How you respond to nudges, reminders and fixed points, and your answers to short questions about whether SUADO helped.
  • If you share your referral link, the Telegram chat ID of each person who opens it.

What SUADO does not collect

  • Call audio. Calls are never recorded.
  • Your location.
  • Your email. SUADO never reads your inbox.
  • Your phone's contacts. If you share someone else's contact card, SUADO does not keep its details.

All of it is treated as health data

What you tell SUADO about your day, your plans and what gets in the way can say something about your health. So SUADO treats everything it holds about you as special category health data, the most protected kind of personal information under UK data protection law. In practice:

  • Your information is encrypted when it is stored and while it travels between SUADO's systems.
  • The keys to your calendar, and any calendar link you give SUADO, are kept in a separate locked store.
  • SUADO's logs and the records of its background tasks hold reference numbers and codes, never what you say.
  • Analysis of how the pilot is going uses internal ID numbers, never names or phone numbers.
  • People who work on SUADO's code use made-up test data, never yours.
  • Calendar information is kept out of everything used to improve the service, whatever you choose.

What the founder sees

In the normal running of the pilot, the founder sees each user's short handle and first name with counts, such as calls planned and answered, and gets alerts when something fails or a safety concern is flagged. None of these include what you said. [WHEN THE FOUNDER MAY LOOK AT WHAT YOU SAID, FOR EXAMPLE TO FIX A FAULT OR TO ANSWER A REQUEST FROM YOU: TO DECIDE]

Your three choices

When you join, SUADO asks about each of these separately, one at a time, with nothing ticked in advance. Only the first is needed to use SUADO. You can see and change all three at any time with /privacy, and each change is saved with its date and time. Withdrawing a choice does not undo what was done before.

[THE BOT'S CONSENT TEXTS MUST MATCH THESE QUOTES WORD FOR WORD. THE SERVICE TEXT IS A PROPOSAL: THE DOCUMENTS GIVE NONE]

1. Service (needed to use SUADO)

Using what you tell SUADO, in messages and on calls, including anything about your health, to run the service for you.

Under this choice, SUADO also measures how the pilot is going as a whole: for example, how many calls were planned and made, and how many people are still using SUADO after a week and after 30 days. These counts use internal ID numbers, never names or phone numbers, and leave out test accounts.

If you withdraw it, SUADO stops working for you: it stops contacting you and stops using your information. What it already holds stays until you delete it with /delete.

2. Personalisation (optional) Starts with calls

With this, SUADO keeps a running memory, built from your calls, of your patterns and personal context, so it learns from your own data and adapts to you over time. This is how the service works. What you tell SUADO directly, your tasks, plans and the last two days of contact are always used.

With it, an AI updates a written memory of you after your calls. The coach uses it on calls, and SUADO uses it to answer your questions. You can read it with /memory, and ask SUADO to remember or forget something: the change is made at the next update after a call.

Without it, there is no memory. SUADO still uses your profile, tasks and plans.

If you withdraw it, SUADO stops building and using the memory. [WHETHER THE MEMORY ALREADY BUILT IS DELETED WHEN YOU WITHDRAW: TO DECIDE]

3. Improvement (optional)

You're invited to help improve SUADO for everyone. If you agree, SUADO keeps your call transcripts for 12 months instead of 90 days, and uses your SUADO data to improve the service, which can include trying different approaches at random, in nudges and, later in the pilot, in when and how SUADO gets in touch, to learn which help. Agreeing never means selling your data or using it for advertising. You can change your mind at any time with /privacy, as you can for the other two.

With it:

  • your call transcripts are kept for 12 months instead of 90 days;
  • once nudges start, the founder may switch on a trial for you, in which the approach each nudge takes is picked at random from the approaches you have left switched on, and the odds are recorded, so that SUADO can learn which approaches help;
  • once SUADO starts choosing for itself when to get in touch, about one in ten of its choices about whether and how to contact you is picked at random from the options your settings allow, and the odds are recorded;
  • your information is used in analysis to learn what helps.

Whatever you choose, nothing is picked at random for you without this consent, how direct SUADO is with you never changes at random, SUADO never uses shame, guilt or fear, and your calendar information is never used in analysis to improve the service.

If you withdraw it, transcripts older than 90 days are deleted at the next daily clean-up, nothing more is picked at random for you, and analyses run after that leave your information out.

The legal basis for using your information

UK data protection law needs a lawful basis for each use of personal information, and an extra condition for health data. [LAWFUL BASIS UNDER UK GDPR ARTICLE 6, AND CONDITION UNDER ARTICLE 9, FOR EACH OF: THE SERVICE; PERSONALISATION; IMPROVEMENT; MEASURING THE PILOT; SAFETY ALERTS TO THE FOUNDER; GUEST ADDRESSES; REFERRAL WAITLIST ENTRIES, WHICH ARE STORED BEFORE CONSENT; AND THE RECORD KEPT AFTER /DELETE] [SOLICITOR TO CONFIRM]

How SUADO uses your information

  • To do what you ask. SUADO saves and changes your tasks and plans and answers your questions. Later in the pilot, it also calls you, reminds you and changes your calendar when you ask.
  • An AI reads your messages. To understand a message, SUADO sends it to an AI model at Anthropic, with the parts of your information it needs, such as your open tasks, goals and plans. SUADO's own software checks what the AI sends back before anything is saved. SUADO tells you something is saved only once it is.
  • An AI writes your answers. When you ask a question, an AI writes the answer from your own information only. An answer never changes anything. SUADO does not keep the text of its answers.
  • Decisions about contacting you Once calls start. Each time SUADO decides whether to contact you, including when it decides not to, it records the reason and the facts it used, such as the time, your settings and how you responded recently. At first these decisions follow fixed rules and your settings. Later in the pilot, SUADO may choose within limits you set, and it always tells you what it did. These records let SUADO show what it did and why and, with your improvement consent, learn what helps.
  • Keeping SUADO working. The founder gets an alert when something fails and, once calls start, a daily summary of contacts planned and made, in counts.

SUADO does not train AI models on your information in this pilot. It does not sell your information or use it for advertising.

Phone calls Later in the pilot

  • SUADO calls you at the times you choose, and when you ask it to. Each call starts with a fixed greeting that uses your name and nothing else personal, then waits for you to speak.
  • Calls are not recorded. They are transcribed: the call service turns what you and the coach say into text, and SUADO keeps that transcript in private storage.
  • To guide the call, the AI on the call is given your profile, your plan for the day, your open tasks, your fixed points and rules, the next 24 hours of your calendar and, with your personalisation consent, SUADO's memory of you.
  • After the call, an AI reads the transcript to save what you agreed, and SUADO sends you a summary in Telegram, with a button to fix anything wrong.
  • If a call goes to voicemail, SUADO's message says nothing about your health, medication or tasks. It says: "Hi, it's SUADO calling as arranged. I'll send you a message."
  • For how long transcripts are kept, here and at the call providers, see How long SUADO keeps your information.

Google Calendar Later in the pilot, only if you connect it

Connecting

You connect your calendar with /calendar, through Google's own sign-in. SUADO asks for the narrowest permissions that do the job: to see and change events on calendars you own, and to see the list of your calendars. If you want SUADO to read calendars you do not own as well, it asks for one more permission at that moment. It checks what you actually allowed before each kind of request. Until Google has verified SUADO, Google shows a warning that the app is not verified. You can disconnect at any time with /calendar: SUADO withdraws its access at Google and deletes its key.

Reading

SUADO reads your calendar to prepare each call (the next 24 hours), and to understand your messages and answer your questions (the next seven days). The parts it needs go to the AI services that do this work, listed under Who handles your information.

Changes and invitations

  • SUADO adds, moves, cancels or declines events only when you ask, by message or on a call.
  • Anything that deletes or declines an event, or that a guest will see, is shown to you exactly as it will go, and nothing is sent until you tap to confirm.
  • If more than one event or guest could match, SUADO asks and never guesses.
  • A change to your own event with no guests is made straight away, and you can undo it for 24 hours. With your calendar connected, a timed item you text, such as "dentist thursday 2pm", is added to your Google Calendar in this way.
  • Guests on an event receive Google's own emails about the changes you confirm.
  • SUADO tells you a change is made only once Google has confirmed it.

Guest addresses are other people's information

  • SUADO remembers a guest's email address only if you confirmed it, or used it in a change you tapped to confirm. It uses these addresses only to suggest guests to you, and deletes them when you delete your account.
  • Guests on your other events are looked up only when you ask, and are not stored.
  • The details of each change, guest addresses included, are cleared once the change is finished, or once its 24 hours to undo have passed.

Event titles in Telegram

Your event titles appear in your Telegram chat with SUADO: in reminders, in notices when SUADO moves a call, in answers to your questions, in messages about calendar changes, and on the board. Anyone who can see your chat, or your phone's notifications, may see them.

Google's rules

SUADO's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Everything SUADO gets from a calendar is marked with where it came from, and is kept out of everything used to improve the service.

The board Later in the pilot

  • The board is a screen inside Telegram, a Telegram Mini App. The founder switches it on for each user.
  • It shows your tasks by urgency and by area and, later, your day, what is coming up and your settings. You can add and change tasks on it, and it shows only what has been saved.
  • Telegram signs you in, so there is no password.
  • Anything you type on the board gets the same safety check as a message.

Display mode Later in the pilot, founder and test accounts only

  • Display mode is a read-only wall view of today and what is next, on any device with a web browser. During the pilot it is only for the founder's own account and test accounts.
  • You pair a screen by sending the bot a code the screen shows. The code works once, for 10 minutes.
  • It shows times and counts, and shows titles only if you switch them on for that screen. It cannot change anything.
  • Anyone who can see the screen can see what it shows.
  • The paired screen keeps one cookie so that it stays signed in, until you unpair it with /display. /delete unpairs every screen.

Fixed points, nudges and your first call Later in the pilot

Fixed points

Fixed points are up to three daily times you set yourself, such as "up at 07:00". At each one, SUADO sends a text with buttons. If you do not answer, it sends one follow-up and then, only if you opted in for that fixed point, makes a short call. A time inside your quiet hours is kept only after you confirm it. You can set fixed points now. They start later in the pilot, and only after you tap to start them.

Nudges and reminders

If you switch nudges on, then when a task you planned is due to start, SUADO sends a nudge with your first step and three buttons. A short call follows only if you opted in and did not answer. SUADO also reminds you before appointments you ask about, or before every one-off appointment if you choose. With wake-up mode on, if you do not answer the morning call, SUADO rings again, twice by default, two minutes apart.

Your first call and your goals

If you join after this part starts, your first daily call gets to know your goals, your fixed points, what gets in the way and how you want to be pushed. Nothing it learns is saved to your profile until you tap to confirm each item in Telegram. On calls, the coach links your day to your goals and may suggest a small next step. A step you agree becomes a task.

Referral links and the waitlist Later in the pilot

  • Each user gets a personal link, with /refer, to share with someone who might want to join.
  • When someone who is not a user opens a link, SUADO stores a small entry: their Telegram chat ID, who referred them and when. Nothing else is stored about them, and nothing more is asked. This happens before they have agreed to anything. [LAWFUL BASIS FOR THIS ENTRY] [SOLICITOR TO CONFIRM]
  • The founder approves or declines each person. An approved person gets an invitation link.
  • If the founder declines, the entry is deleted at once, together with the messages from that person's chat with SUADO, and SUADO does not message them. An entry still undecided after 30 days is deleted in the same way.
  • When an invitation is used or expires, the entry is deleted.
  • If you opened someone's link and want your entry deleted sooner, email hello@suado.ai.

This website, and the website waitlist Running now

  • suado.ai uses no cookies, analytics or tracking, and loads nothing from other companies. Its fonts are served from suado.ai itself.
  • Cloudflare hosts the website. Like any web host, it handles your device's IP address and the pages you ask for, to deliver the site and protect it from attacks. SUADO does not store your IP address. [HOW LONG CLOUDFLARE KEEPS ITS LOGS, AND WHERE: TO CONFIRM]
  • If you join the waitlist on the website, SUADO stores your first name, your email address, the date you joined and the words you agreed to. It uses them only to email you about the pilot. Its lawful basis is your consent [SOLICITOR TO CONFIRM]. They are stored by Cloudflare [WHERE: TO CONFIRM].
  • To come off the waitlist, email hello@suado.ai. Your entry is deleted when you ask, when you join the pilot, or [WHEN UNANSWERED ENTRIES ARE DELETED: TO DECIDE], whichever comes first.
  • Email sent to hello@suado.ai is forwarded by Cloudflare to the founder's inbox [EMAIL PROVIDER: TO CONFIRM].

Who handles your information

SUADO uses other companies to run. Each one gets only what it needs for its part. [CONFIRM A DATA PROCESSING AGREEMENT IS IN PLACE WITH EACH PROCESSOR (LAUNCH-CHECKLIST ITEM 22)] [WHETHER EACH PROVIDER MAY USE THIS INFORMATION FOR ITS OWN PURPOSES, SUCH AS TRAINING AI: TO CONFIRM FROM ITS TERMS]

Telegram Running now

Carries every message between you and SUADO. These can include your task titles and, later, your calendar event titles. Telegram is your own messaging service, used under Telegram's own terms and privacy policy, not a company working for SUADO [SOLICITOR TO CONFIRM].

Supabase Running now

Holds SUADO's database and private files: everything SUADO keeps about you, with your calendar keys and links in a separate locked store. In London, UK, until SUADO deletes it. Where its backups and logs are kept, and for how long: [TO CONFIRM]. When a database error happens, its logs can hold a small part of the record involved [WHETHER THIS CAN BE SWITCHED OFF: TO CONFIRM]. As with any database host, Supabase's own systems and support staff can technically reach the data, under its terms.

Amazon Web Services (AWS) Running now

Runs SUADO's application in London, UK, so your messages pass through it. It also holds the record of deleted accounts described under What /delete does. AWS's terms say it will not move this out of the region SUADO chose, except to comply with the law. Its logs of SUADO hold reference numbers and codes only, never what you say, and are deleted after 30 days.

Inngest Running now

Runs SUADO's background tasks, such as working on a message after it arrives. It gets reference numbers, counts and codes only, never what you say. It is in the United States. How long it keeps them: [TO CONFIRM].

Anthropic Running now

Its AI models work out from your messages what you want saved or changed, and write the answers to your questions. Later in the pilot, they also read call transcripts to save what you agreed, update SUADO's memory of you (with your personalisation consent) and check your rules before a call. They get your messages and, later, your call transcripts, with the parts of your information each job needs, such as your tasks, plans, goals and calendar events.

This happens outside the UK. Anthropic offers no UK or EU option: requests are handled either in any of the countries where Anthropic runs its service, or in the United States only [WHICH ONE SUADO USES: TO CONFIRM]. How long Anthropic keeps them: under its terms [TO CONFIRM, INCLUDING WHETHER SUADO HAS ZERO DATA RETENTION, WHICH ANTHROPIC OFFERS ON REQUEST].

The founder also builds and runs SUADO with Anthropic's coding assistant, Claude Code. To find the cause of a fault, it may read SUADO's logs, which hold reference numbers and codes only, never what you say. Anthropic keeps what it reads for 30 days, under the founder's Claude Max plan, with the use of his chats to train Anthropic's models switched off, and the assistant's history on the founder's computer keeps it until he deletes it.

Vapi Later in the pilot

Places and runs SUADO's calls. It gets your phone number, the sound of each call as it happens, which is not recorded, and the instructions for each call: your name, your plan, your open tasks, your fixed points and rules, the next 24 hours of your calendar and, with your personalisation consent, SUADO's memory of you. It produces the transcript and a report at the end of each call. SUADO switches off Vapi's recording and logging on every call, and deletes Vapi's record of each call where Vapi allows it [WHEN: AFTER EACH CALL IS PROCESSED, OR WHEN THE TRANSCRIPT IS DELETED HERE, TO CONFIRM]. Where: [TO CONFIRM].

OpenAI, ElevenLabs and Deepgram, through Vapi Later in the pilot

Vapi uses these companies for parts of each call: OpenAI for the AI that talks with you, which gets the conversation; ElevenLabs to turn the coach's words into a voice; and Deepgram to turn what you say into text. [WHICH OF THESE THE CALLS USE: TO CONFIRM] Where, and for how long: [TO CONFIRM FOR EACH].

Twilio Later in the pilot

Connects SUADO's calls to your phone, so it gets the call and your phone number, and keeps its own record of each call. It does not record SUADO's calls. SUADO deletes Twilio's record of each call, where Twilio allows it, when it deletes the transcript and when you use /delete. Where: [TO CONFIRM].

Google Later in the pilot, only if you connect it

Your calendar is in your own Google account. SUADO reads it, changes it when you ask and, later, can keep the calendar copy there. Google gets the changes you confirm, and the words SUADO searches for when you ask it to find a guest, such as a name or an email address. This stays in Google's own systems, under Google's terms and its Limited Use rules (see Google Calendar).

Two other services receive nothing about you that they can read: GitHub, which holds SUADO's code and, for a day at a time, sealed copies of SUADO's logs that only the founder's computer can open, and the services that host a calendar you publish, such as Outlook or iCloud, which SUADO only reads from.

Where your information is stored

SUADO's database, files and logs are in London, in the UK.

Some companies handle parts of your information outside the UK:

  • Anthropic handles your messages and, later, your call transcripts outside the UK: either in any of the countries where it runs its service, or in the United States only [TO CONFIRM].
  • Inngest is in the United States, and gets reference numbers and codes only.
  • Vapi, the companies it uses for calls, and Twilio: [WHERE: TO CONFIRM].
  • Telegram and Google hold information in their own systems.

For each transfer outside the UK, the safeguard is [TRANSFER SAFEGUARD FOR EACH PROVIDER] [SOLICITOR TO CONFIRM].

How long SUADO keeps your information

Your account, settings, tasks, plans, goals, fixed points, notes, consent history, the messages you send, and the records of what SUADO did
Until you delete your account with /delete.
SUADO's memory of you Later
Until /delete.
Call transcripts Later
12 months if you have given improvement consent, and 90 days if you have not. If you withdraw improvement consent, the period becomes 90 days. The calendar details a call saw are kept with its transcript, and deleted with it. Call audio is never recorded, so it is never kept.
At the call providers Later
SUADO switches off Vapi's recording and logging on every call, and deletes Vapi's and Twilio's records of each call where their systems allow it. Twilio's record is deleted when the transcript is deleted here. [WHEN VAPI'S RECORD IS DELETED: TO CONFIRM] [HOW LONG OPENAI, ELEVENLABS AND DEEPGRAM KEEP ANYTHING: TO CONFIRM]
Details of a calendar change, including guest addresses Later
Cleared when the change is finished, or once its 24 hours to undo have passed.
Guest addresses you confirmed or used Later
Until /delete.
Your Google Calendar key Later
Until you disconnect with /calendar, or use /delete.
A calendar link, and SUADO's latest copy of that calendar Later
Until you remove the link, or use /delete.
Waitlist entries Later
Deleted at once if the founder declines, after 30 days if undecided, or when the invitation is used or expires.
Display pairing codes Later
Valid for 10 minutes, then deleted.
Messages from people who have not joined
SUADO keeps only the chat ID, the date and any command sent, with a record of its reply, and a daily clean-up deletes both after 30 days.
SUADO's own logs
Reference numbers and codes only, deleted after 30 days.
Background task records at Inngest
Reference numbers and codes only. [HOW LONG: TO CONFIRM]
At Anthropic
[HOW LONG: TO CONFIRM]
Backups of SUADO's database
[HOW LONG SUPABASE KEEPS BACKUPS: TO CONFIRM]. If a backup is ever restored, SUADO deletes again every account that was deleted after the backup was made (see What /delete does).

SUADO may delete any of this sooner than the periods given here.

Your rights, and how to use them

UK data protection law gives you these rights over your information [SOLICITOR TO CONFIRM THE LIST AND HOW EACH APPLIES]. To use any of them, use the command shown, or email hello@suado.ai. We reply within one month.

  • See your information, and get a copy. Much of it is in the bot: /today, /tasks, /settings and /privacy, and later /upcoming and /memory. For a full copy, email us. There is no button for this yet: the founder prepares the copy, in a common format that computers can read, and sends it to you securely. Before sending it, we check that the request comes from you [HOW WE CHECK: TO DECIDE, FOR EXAMPLE A CONFIRMATION IN YOUR CHAT WITH SUADO].
  • Correct it. You can change most things yourself, by text or in /settings, and later on the board. For anything else, email us.
  • Delete it. Use /delete. See What /delete does.
  • Withdraw a consent. Use /privacy, at any time.
  • Object to a use, or ask us to limit it. Email us. To stop contact for a while, use /pause or tell SUADO in a message.
  • Take your information elsewhere. Ask for the copy described above.
  • Automated choices. SUADO's choices about contacting you are made by software. At first they follow fixed rules and your settings. Later in the pilot, SUADO may choose within limits you set, and you can ask the founder to switch that off for you. [WHETHER THE LAW'S RULES ON AUTOMATED DECISIONS APPLY: SOLICITOR TO CONFIRM]

What /delete does

/delete removes everything SUADO holds about you. It asks you to confirm with a button first. Once Google Calendar and the calendar copy start, later in the pilot, the confirmation tells you that events SUADO added to your own Google Calendar at your request will stay there, because they are yours, and that any calendar SUADO created for the calendar copy will be deleted.

When you confirm:

  1. All contact stops at once, and every planned call and message is cancelled.
  2. SUADO deletes your call transcripts and the calendar details saved with them, the calendar it created for the copy, and its latest copy of any linked calendar. It withdraws its access to your Google account, and deletes the call providers' records of your calls where their systems allow it.
  3. SUADO sends you a final message saying how many of your stored files it could not delete, if any. If anything could not be deleted, the founder is alerted too.
  4. SUADO deletes everything else it holds about you: your account, settings, tasks, plans, goals, memory, the messages you sent, the records of what it did, your chat ID and phone number, and the keys to your calendars. Any paired display screens are unpaired, and no waitlist entry names you any more.

After that, SUADO no longer knows you. A new message to the bot gets the reply that SUADO is invite-only, and joining again needs a new invitation.

What is left

  • A record that an account was deleted. SUADO keeps the random ID number it gave your account, and nothing else, in two places: one line in its own records saying that the account was deleted and when, and a separate private list, also in London. The ID says nothing about you on its own. The list is there because SUADO's database has backups: if SUADO ever has to restore the database from a backup made before you deleted your account, it uses the list to delete your information again, so that it does not come back. [HOW LONG THE LIST IS KEPT: TO CONFIRM]
  • Backups. Copies of your information stay in backups until those backups expire. [HOW LONG: TO CONFIRM]
  • Your Telegram chat. /delete removes what SUADO holds, not your chat history in Telegram. You can delete the chat in Telegram yourself.
  • Your Google Calendar. Events SUADO added at your request stay in your calendar, and emails Google has already sent to guests cannot be recalled.
  • Logs and background task records. SUADO's logs, and the records Inngest keeps of its background tasks, hold reference numbers and codes only. The logs are deleted after 30 days, and Inngest's records after [HOW LONG INNGEST KEEPS THEM: TO CONFIRM]. Lines the founder's coding assistant has read from the logs are kept by Anthropic for 30 days, and in the assistant's history on the founder's computer until he deletes them.
  • Anything a provider would not let SUADO delete. The founder is alerted.

Complaints

If you are unhappy with how we handle your information, please tell us first at hello@suado.ai, so that we can try to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint.

Changes to this notice

We will update this notice as each part of the pilot starts, and before any change to how your information is used. The date at the top shows when it last changed. [HOW USERS ARE TOLD ABOUT A CHANGE: TO DECIDE]

Contact

[COMPANY NAME], [REGISTERED ADDRESS].

Email: hello@suado.ai.