Privacy Policy
Exhale is a family assistant chatbot operated by Grey AI LLC ("Grey AI," "we," "us," or "our"). This Privacy Policy explains what information Exhale collects, how we use and share it, and the choices you have. It applies to the Exhale service, including our web application and chat interfaces (collectively, the "Service").
By using Exhale, you agree to the practices described in this Policy.
- Read-only email access. Exhale reads your email to find what matters to your family — but it cannot send, edit, or delete your email.
- You choose what Exhale sees. Connect the specific folders you want — you decide what Exhale can access, and you can disconnect at any time.
- Calendar and tasks, handled for you. With your permission, Exhale helps manage your Google Calendar and Google Tasks — adding and organizing events and to-dos so you don't have to.
- No selling, no ad sharing. We never sell your personal information or share it for advertising.
- No training on your data. We never use your personal data to train AI models.
1. Who we are
Grey AI LLC
Email: privacy@greyai.ai
Exhale connects, with your permission, to the communication channels and folders in a parent's or caregiver's Google account, and to websites you ask it to monitor (such as a school's online calendar), and helps you stay on top of family and household life by reading and organizing what matters — dates, deadlines, tasks, links, and messages — and surfacing it in a clear, usable form.
2. Information we collect
Information you provide to us. When you sign up and use Exhale, we collect information you give us directly, such as your name and email address, the contents of your interactions and chats with the assistant, and any information you provide through onboarding, applications, surveys, or support requests.
Information from your connected Google account. With your explicit authorization through Google's secure OAuth process, Exhale connects to your Google account. We request the following access:
- Gmail (read-only): We read and analyze the folders you connect so we can identify and organize family-related information. Our Gmail access is read-only — Exhale cannot send, change, or delete your email.
- Google Calendar and Google Tasks: As part of how Exhale helps you, it connects to your Google Calendar and Google Tasks so it can surface, add, and organize events, dates, and to-dos on your behalf, as you request.
- Basic profile and account identifiers (such as your email address and basic profile information) to create and secure your account.
You choose what Exhale sees. You can connect specific folders in your inbox, so you decide what is made available to the Service. We do not store your Google password; access is managed through Google's OAuth tokens, which you can revoke at any time.
The email content we process may include the bodies of messages, their metadata, links contained in them, and attachments such as documents, images, and audio files.
Information collected automatically. When you use the Service, we and our analytics providers may collect device and usage information — such as your IP address, browser type, pages or features used, and similar activity — through analytics technologies, including cookies and similar tools.
Information from others. Because Exhale reads the email in the folders you connect, we necessarily process the contents of messages that other people (such as schools, teachers, coaches, or other parents) have sent to you. We process this content only as needed to provide the Service to you.
Information from websites we connect to. To provide the Service, Exhale may access and retrieve information from websites — including links that appear in your email and websites you ask it to monitor, such as a school's online calendar — and process the information found there to surface what matters to you.
3. How we use your information
We use the information we collect to:
- Provide, operate, and maintain the Service, including reading and organizing your email, calendar, and tasks and generating summaries, reminders, and daily plans;
- Authenticate you and secure your account;
- Respond to your questions and requests within the Service;
- Provide customer support;
- Monitor, debug, secure, and improve the Service;
- Understand how the Service is used through analytics;
- Send you marketing or promotional communications where you have opted in to receive them;
- Conduct research and development to improve our products; and
- Comply with legal obligations and enforce our agreements.
We do not use your information for paid third-party advertising.
4. Google API Services Limited Use disclosure
Specifically, the information we obtain from your Google account is used only to provide and improve the Service's features as described in this Policy. We do not transfer or sell this data for advertising, and we do not allow humans to read this data except where you give consent for specific items, where necessary for security purposes (such as investigating abuse), or to comply with applicable law.
5. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We share information only as follows:
Service providers (sub-processors). We use trusted third-party providers to operate the Service. They process information on our behalf and are limited to using it to provide services to us. Our current providers include:
- Hosting and infrastructure providers — to run and host the Service
- Database and storage providers — to store your data and access tokens securely
- AI processing providers — to read, organize, and summarize your information (see Section 6)
- A messaging provider — to deliver SMS messages if you opt in (see Section 7)
- A third-party chat platform — if you choose to access Exhale through a connected chat application
- Analytics providers — to measure and understand how the Service is used
Payment processing. If you make a payment, it is processed by an independent payment provider (such as PayPal), which handles your payment information under its own privacy policy.
Legal and safety. We may disclose information if required by law, to respond to legal process, or to protect the rights, safety, and security of our users, the public, or Grey AI.
Business transfers. If Grey AI is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
6. Artificial intelligence and model training
Exhale uses artificial intelligence to read, organize, summarize, and respond to information in your connected accounts. To do this, we send relevant content to our AI service providers for processing. These providers act on our behalf and are not permitted to use your content for their own purposes.
We do not use your personal data to train AI models.
7. SMS messaging
Exhale offers optional SMS messaging as an opt-in feature. If you choose to enable text messaging, we will use a third-party messaging provider to deliver messages to you. You may opt out at any time by replying STOP to any message, or reply HELP for assistance. Message and data rates may apply. We only send text messages to users who have opted in.
8. Data retention
We retain your information for as long as your account is active and as needed to provide the Service. You can disconnect or request deletion of your data at any time. When you do, we promptly remove your data from our active systems.
Some information may be retained for a limited period where necessary to comply with our legal obligations, resolve disputes, prevent fraud, or maintain the security of the Service, and residual copies may persist in our backups until they are cycled out in the ordinary course.
9. Security
We take the security of your information seriously. We protect data in transit using HTTPS/TLS encryption, and data at rest is encrypted by our database provider. Exhale is available via web application and chat interface (currently Telegram). Exhale conversations on Telegram are not end-to-end encrypted. We connect to your accounts using secure OAuth and do not store your Google password. We limit internal access to your information to authorized personnel who need it to operate the Service.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. How to access or delete your data
You are in control of your data. You can:
- Disconnect your Google account at any time, which revokes Exhale's access;
- Request deletion of your data by using the deletion option in the Service or by emailing us at privacy@greyai.ai.
When you request deletion, we will delete your information as described in Section 8.
11. Children's privacy
Exhale is intended for use by adults — parents and caregivers. It is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child has provided us with personal information, please contact us at privacy@greyai.ai.
12. Your choices and tracking signals
Cookies and analytics. You can control cookies through your browser settings and can opt out of Google Analytics using Google's opt-out browser add-on.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.
14. Contact us
If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@greyai.ai.
← Back to home