AI FrndPrivacy
Last updated 29 August 2026
AI Frnd is a voice assistant. It listens, so what it does with what it hears is the only question about it that really matters. This page answers that plainly, and it describes what the app actually does today rather than what would be convenient to claim.
The short version. Speech is recognised on your phone, not on a server. Your contacts, notes and appointments never leave the phone. But when you are signed in, the text of each command you give is sent to us so we can see which phrases the app fails to understand. You can read exactly what that means below.
What we hold
| Your phone number | It is how you sign in. We also store your name if you gave one. |
|---|---|
| Your PIN | Only a bcrypt hash of it. We cannot read your PIN, and neither can anybody who steals the database. |
| A referral code | If somebody gave you one when you signed up, so they can be credited. |
| Your device | A random id generated on the phone, its make and model, the Android version, the app version, and which language you chose. |
| What you said | The text of commands you gave, which command they matched, and whether it worked — and, when the assistant could not make out what you said, the text of that too. See below. |
| Crashes | When the app falls over, what it was doing at the time. |
| Payments | Razorpay's order, payment and subscription ids, the amount, and whether it succeeded. |
About what you say
Speech is turned into text on the phone itself, by a model that ships inside the app. That is why the assistant still works with no signal, and it means the sound of your voice is not uploaded anywhere by us.
The resulting text is a different matter. While you are signed in, each command is sent to our server in a batch — the words, the action they were understood as, and whether it succeeded. We use this for one thing: finding the phrases the app mishears, particularly in Telugu, so they can be fixed. Our staff can read these entries in an internal tool.
The turns that went nowhere are sent as well, and they are the ones we most need. When you say the wake word and the assistant then fails to understand you, the words it did make out are sent, marked as not understood, along with the wake word you chose. Without that, a phone that is not hearing its owner looks from our side exactly like a phone nobody is using.
This means that what reaches us is not always something you meant as a command: if the wake word is heard by mistake, whatever was said in the few seconds after it is sent, marked as not understood. Nothing is sent unless the wake word was heard first, the sound itself is never uploaded, and these entries are deleted with the rest when you delete your account.
So: if you dictate a note that says buy milk, the words "buy milk" reach us. If you say call Amma, "call Amma" reaches us — the number dialled does not, and neither does the call.
If you would rather we did not
Sign out. Nothing is uploaded when you are not signed in — the check happens before anything is queued. The assistant keeps working, because recognition was never the part that needed a server.
What never leaves your phone
- Your contacts. Read on the device to match a name to a number. Never uploaded, in whole or in part.
- Your notes and appointments. Stored in the app's own storage on the phone.
- Your photos. Taken and saved by the phone's camera, into your gallery.
- Anything on screen we read aloud. Read and spoken on the device; nothing is sent.
- The sound of your voice. Processed and discarded frame by frame.
One exception, and it is your choice
You can switch on Google's speech recogniser instead of the built-in one — it is more accurate in English and needs a connection. When it is on, audio goes to Google and is handled under Google's privacy policy, not this one. It is off unless you turn it on.
Who else sees anything
- Razorpay — takes the payment. Card and UPI details go straight to them and never touch our servers or the app.
- Our SMS provider — receives your number in order to send the sign-in code.
- Railway and Cloudflare — host the server and the website.
- Google Play — if you installed from the store, they know that. Not from us.
- Google Analytics — counts visits to this website: which pages, roughly where in the world, what kind of device.
- Firebase Analytics — inside the app, counts which commands get used and whether they worked, so we can tell a feature nobody reaches from one nobody wants. It records the name of the command — "call", "note", "photo" — and never what you said, who you called, what number, or what the note was. It is set up to collect no advertising ID and no device ID, and it is switched off in our own test builds.
- Meta (Facebook) Pixel — on this website only, not in the app. When you visit aifrnd.in, Meta's pixel tells Meta which pages were opened, so we can measure whether our Facebook and Instagram ads work and show them to people likely to want AI Frnd. Meta may combine this with what it knows about your Meta account and use it to deliver ads; it does not get your phone number, PIN or payment details. To opt out of ads based on this, use your Meta ad settings, aboutads.info/choices or youronlinechoices.eu, or block third-party cookies in your browser.
We do not sell anything about you, and there is no advertising in the app.
Permissions, and why
| Microphone | To hear the wake word and your commands. It is always listening for the wake word; that is the point of the app. |
|---|---|
| Contacts | So "call Amma" works instead of a ten-digit number. |
| Phone & SIM | To place the call, and to pick the right SIM on a dual-SIM phone. |
| Camera & photos | To take a photo when you ask, and to put one on the television. |
| Calendar | Only if you switch on "also put it in the calendar". Off by default. |
| Notifications | To read them aloud, and to say who is calling. |
| Accessibility | To scroll, press things and read the screen on your behalf. This is what lets the app act instead of just answering. |
How long we keep it
Account details last as long as the account. Command logs and crash reports are kept while they are useful for fixing the app. Payment records are kept as long as tax and accounting rules in India require, which is longer than the rest and not something we can shorten.
Deleting your account
Write to hello@aifrnd.in from the number on the account, or ask in the app. Deleting removes your account, your devices, your command logs and your crash reports. Payment records survive, for the reason above. Notes and appointments are on your phone, so uninstalling takes them with it.
Removing the app
AI Frnd registers as a device administrator, because locking the screen by voice is impossible otherwise. Android will not let you uninstall an app while it holds that, so to remove it go to Settings → Security → Device admin apps, switch AI Frnd off, then uninstall as usual.
Children
AI Frnd is not built for children and we do not knowingly hold anything about anyone under 18.
Changes
If this page changes in a way that affects what we do with what you say, we will say so in the app rather than only here.