Privacy Policy

1. Who We Are

Sophia is an AI-powered productivity assistant operated by ActuaryHelp Pte Ltd, Singapore. Contact: privacy@actuaryhelp.com

2. Data We Collect

3. How We Process Your Data

Your data is processed by AI to extract commitments, draft replies, detect conflicts, and provide proactive advice. AI processing is performed by third-party providers:

• Default: DeepSeek (servers in China) — your email content and messages are sent to DeepSeek's API for AI analysis
• Alternative: You can configure your own AI provider (OpenAI, Claude, Groq, etc.) in Settings

By using the default AI provider, you consent to your data being processed on servers in China.

4. Data Storage

Your data is stored in Supabase (Sydney, Australia). Data is encrypted in transit (TLS) and sensitive credentials (API keys, OAuth tokens) are encrypted at rest using AES-256-GCM.

5. Data Retention

You can configure your data retention period in Settings (30-365 days, default 90 days). Data older than your retention period is automatically deleted.

6. Your Rights

Under the Singapore Personal Data Protection Act (PDPA) and EU General Data Protection Regulation (GDPR), you have the right to:

• Access: Export all your data (Settings → Export JSON)
• Correction: Edit your profile and commitments in the app
• Deletion: Delete your account and all data (Settings → Delete Account)
• Portability: Download your data in JSON format
• Objection: Contact us to opt out of AI processing

7. Third-Party Email Data

When Sophia scans your inbox, it processes emails from third parties who have not directly consented to AI analysis. This processing is based on our legitimate interest in providing you with commitment tracking services. You can exclude specific contacts from AI scanning in Settings.

8. WhatsApp Integration

Important: Sophia's WhatsApp integration uses an unofficial connection method (not Meta Business API). This may violate WhatsApp's Terms of Service. Your WhatsApp account could be temporarily or permanently restricted by Meta. We are not responsible for any account restrictions resulting from this integration.

9. Cookies

We use essential cookies for authentication (Supabase session). No analytics or tracking cookies are used.

10. Data Breach

In the event of a data breach, we will notify the Singapore PDPC within 3 calendar days and affected users without undue delay.

11. Contact

For privacy inquiries: privacy@actuaryhelp.com

For PDPA complaints: www.pdpc.gov.sg

12. Changes

We will notify you of material changes to this policy via email or in-app notification.