Privacy Policy

Effective October 29, 2026

Ammos ("we") is an AI assistant available on the web, as a Mac app and as iPhone and Android apps. This policy explains what data we collect, why, who processes it, and how to delete it. Questions: support@ammos.dev.

The short version: we use your data to run the assistant for you. We don't sell it, we don't show ads, and the apps contain no analytics or advertising trackers. Our website counts visits with Vercel Web Analytics, which uses no cookies.

What we collect

Your account

Your name, email address and password when you sign up. Passwords are stored hashed by our authentication provider, Supabase.

Your conversations

The messages you send, the assistant's replies, and the text of files you attach, so your chat history is available on all your devices. Chats in incognito mode are not saved to your history and aren't used to personalize Ammos. Images and videos Ammos generates for you are stored temporarily on our servers so they can be shown in your chat.

Memory and personalization

Facts you give Ammos about yourself, and facts and preferences Ammos learns from your conversations (for example, your name or which apps you prefer), plus your custom agents, skills and scheduled tasks. You can view and delete memory in Settings → Personalization.

Connected accounts

If you connect Google (Gmail, Calendar, Drive, Docs, Sheets, Contacts) or GitHub, we store the access tokens those services give us so Ammos can act on your behalf when you ask. Ammos reads or changes data in those accounts only to carry out your requests. You can disconnect any account from Connectors in the app.

Ammos's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, and we don't let humans read it unless you ask us to (for example, for support), it's needed for security, or the law requires it.

Billing

If you subscribe, payment is handled by Stripe. We never see your card number. We keep your plan, subscription status, Stripe customer and subscription IDs, payment events and how much of your weekly allowance you've used.

Device information

With each request, the apps send basic information about where you're using Ammos — platform, device model, operating system and app version, language and time zone — so the assistant can adapt. The Mac app also sends your home folder path so it can work with your files.

Things on your device, only when you ask

The phone apps can use the following only while carrying out something you asked for, and only with the permissions you grant:

• Location — your current location, for requests like "what's near me".
• Contacts (Android) — only the contacts that match a name you mention are sent, never your whole address book.
• Microphone — in voice mode, your voice is streamed to our AI provider to be understood and answered. Recordings aren't kept.
• Clipboard, installed apps, battery and storage — read only when a request needs them.
• Screen content (Android app downloaded from ammos.dev only, after you turn on "Ammos screen control") — while Ammos completes a task in another app, what's on screen is sent to our AI provider to decide the next tap. Ammos never reads or types passwords. This feature isn't in the Google Play version.
• Your Mac (Mac app) — when you ask, Ammos runs commands, reads and edits files and controls apps on your Mac, and the results are sent back to the assistant.

AI phone calls

If you ask Ammos to make a phone call for you, the number you give and what the call is about are sent to Twilio to place the call, and the call audio is processed by our AI provider so the assistant can talk.

Reports

If you report an AI reply, we store the text of that reply, your account ID and the chat it came from so we can review it.

Website visits

When you visit ammos.dev, Vercel Web Analytics records the page you viewed, the site that referred you, your browser, operating system, device type and country. It uses no cookies and doesn't identify you or follow you across other sites.

How we use it

• To run the assistant and the features you use, and to remember context you've chosen to save.
• To manage your subscription and usage limits.
• To keep Ammos secure, prevent abuse, and fix problems.

We don't sell your personal information, use it for advertising, or share it with data brokers.

Who processes your data

We use these service providers to run Ammos. They process data only to provide their service to us:

• Anthropic (Claude API) — the AI models that understand your messages and screen content and write replies. Your messages, attachments' text, memory and the results of actions are sent to it to answer you. It also runs web searches for some requests.
• Google (Gemini API) — voice conversations, the audio of AI phone calls, and image and video generation.
• Supabase — accounts and database (chats, memory, settings, connected-account tokens).
• Render and Vercel — hosting for our servers and website. Vercel also provides our website visit statistics.
• Stripe — payments.
• Twilio — AI phone calls.
• DuckDuckGo — some web searches (the search text only).

When Ammos acts in Gmail, GitHub or another service at your request, that service receives what's needed to carry out the action, under its own privacy policy.

How long we keep it

• Chats, memory and settings: until you delete them or delete your account.
• Generated images and videos: temporarily, on our servers.
• Server logs, which can include parts of requests: kept for a limited time by our hosting providers for troubleshooting.
• Payment records: as long as tax and accounting law requires, even after your account is deleted.

Deleting your account

You can delete your account at any time in the app or on the website: Settings → Account → Delete account. If you can't sign in, email support@ammos.dev from the address on your account and we'll delete it within 30 days.

Deleting your account immediately and permanently removes your account, chat history, memory, custom agents, skills, scheduled tasks and connected-account tokens, cancels any subscription, and revokes Ammos's access to your Google account. Payment records Stripe and we must keep by law are retained. Copies in backups and logs are removed as those expire.

Your choices and rights

• View, edit or delete memory in Settings → Personalization, and delete individual chats from the chat list.
• Use incognito mode for chats you don't want saved.
• Turn off device permissions (location, contacts, microphone, screen control) in your phone's settings at any time.
• Depending on where you live, you may have the right to access, correct, export or delete your data, or to object to how it's used. Email us to make a request.

Security

Data is encrypted in transit (HTTPS). Access to our database is restricted to our servers. No system is perfectly secure, but we work to protect your data and will notify you as required by law if a breach affects it.

Children

Ammos isn't directed to children under 13 (or the minimum age in your country), and we don't knowingly collect their data. If you believe a child has given us data, contact us and we'll delete it.

Changes

If we change this policy, we'll update the date above, and tell you in the app for significant changes.

Contact

Ammos · support@ammos.dev