RYX Privacy Policy

Effective date: 7 October 2026

RYX is made by Leeam Applications. This policy explains, in plain English, what information the RYX app handles, why, and what control you have. It applies to the RYX mobile app and this website. If you have any question about it, email info@leeamapplications.com.

The short version

You speak, RYX schedules. To do that, your voice is turned into text and interpreted by AI services acting under our instructions. Your events, tasks and settings are stored securely in the European Union. We do not sell your data, we do not show adverts, and you can delete your account and all its data at any moment from inside the app.

Who we are

RYX is operated by Leeam Applications, the data controller for the personal information described here. Contact: info@leeamapplications.com.

What we collect and why

Account details. Your email address, first name, chosen nickname, sign-in method, and an optional profile photo. Used to create and secure your account and personalise the app. You can sign in with email and password, Google, or Apple.

Your voice. When you speak to RYX, the audio clip is sent securely to Google’s speech-to-text service to be turned into written text, then the audio is discarded. RYX does not keep your recordings. The written text of your request is sent to Anthropic’s Claude AI to work out what you asked for, for example the event name, time and place. Spoken replies are generated by Google’s text-to-speech service.

Your calendar and tasks. The events and to-dos you create, and, if you connect Google Calendar, secure tokens that let RYX sync with it. Apple Calendar access happens on your device through an iOS permission you control in Settings. Used solely to provide the service.

Your settings and preferences. Timezone, language, voice choice, notification and do-not-disturb settings, plus preferences RYX learns from how you use it, such as your usual meeting length. Used to make the assistant genuinely yours.

Subscription status. Whether you are on the free, Personal or Pro plan, and a count of your monthly voice interactions. Payments are handled entirely by the App Store or Google Play together with our subscription partner Superwall. RYX never sees or stores your card details.

Device information. A push notification token so reminders can reach your phone, and basic app diagnostics.

Analytics and crash reports. We use PostHog to understand how the app is used, for example which features are popular, and Sentry to receive crash reports when something goes wrong. This helps us fix problems and improve RYX. This data is about app behaviour, not the content of your events.

Who helps us run RYX

These companies process data under our instructions to make RYX work: Convex hosts our database and backend in the European Union, in the eu-west-1 region. Google Cloud provides speech-to-text, text-to-speech, and calendar sync if you connect Google Calendar. Anthropic provides the Claude AI that interprets your requests. Superwall, together with Apple and Google, manages subscriptions and billing. Expo delivers push notifications. Resend sends the emails that carry your sign-up verification and password reset codes, so it receives your email address for that purpose only. PostHog provides analytics and Sentry provides crash reporting. We share only what each service needs to do its job. We never sell your personal information, and we do not use it for advertising.

RYX’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your Google Calendar data

Connecting Google Calendar is optional. If you connect it, RYX asks Google for two calendar permissions only: to see the list of calendars in your Google account, and to view and edit the events on those calendars. RYX also records the email address of the Google account you connected, so you can see which account is linked.

RYX uses your Google Calendar information only to provide the features you see in the app: showing your Google events alongside your other events, answering when you ask about your schedule, warning you when two events clash, sending the reminders you ask for, and creating, changing or deleting events when you ask it to. To do this, RYX keeps a copy of your events (title, time, place and notes) in its database in the European Union and keeps it in step with Google.

When you speak or type a request about your schedule, the details of the relevant events are sent to Anthropic’s Claude AI so it can understand and answer that one request, and the spoken reply is produced by Google’s text-to-speech service. These providers act under our instructions and, under their terms, do not use this information to train their models. RYX does not use information received from Google Calendar or any other Google Workspace API to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models.

We never sell your Google Calendar information, never use it for advertising, and never pass it to data brokers. Nobody at Leeam Applications reads your calendar information unless you ask us to in order to help you, it is needed to investigate a security problem, or the law requires it.

You can disconnect Google Calendar at any time from the Calendars section of your Profile in the app. When you do, RYX asks Google to revoke its access and deletes its copies of those events, together with the access tokens, from its systems. Your events stay in Google Calendar. You can also remove RYX’s access yourself at any time from the security settings of your Google Account.

Who we share your Google data with

This section explains who RYX shares, transfers or discloses Google user data to. Google user data means the information RYX receives from your Google Account: the basic profile details Google provides if you sign in with Google (your name, email address and profile picture), and, if you connect Google Calendar, your list of calendars and the events on them.

RYX does not sell Google user data. RYX does not share, transfer or disclose Google user data to anyone except the service providers listed below, and only so that the app can do what you ask of it. Each of them processes the data on our behalf and under our instructions.

Convex. Convex hosts RYX’s database and servers in the European Union. Your Google profile details, and the copy of your Google Calendar events that RYX keeps, are stored there.

Anthropic. Anthropic provides the Claude AI that understands your requests. When you speak or type a request about your schedule, the title, time and place of the relevant calendar events are sent to Anthropic so it can understand and answer that one request.

Google Cloud. Spoken replies are produced by Google’s text-to-speech service. The words of a reply, which can include details of your events, are sent to Google to be turned into speech.

Expo, Apple and Google notification services. When a reminder you asked for is due, the title of the event, and its place if it has one, are sent through Expo’s push notification service and then through Apple’s or Google’s notification service, so that the reminder can appear on your phone.

Our other providers, Superwall, Resend, PostHog and Sentry, do not receive your Google Calendar information.

Apart from the providers above, we would only disclose Google user data if the law required it, for example in response to a valid court order, or if it were needed to protect the security of RYX and the people who use it. If RYX were ever acquired by or merged with another company, we would ask for your explicit consent before any Google user data was transferred.

We do not share, transfer or disclose Google user data to anyone else. In particular, we never give it to advertisers, data brokers or other information resellers.

Where your data lives

Your account, events, tasks and preferences are stored in the European Union. Some of our service providers, such as Anthropic and Google, process requests in other countries including the United States. Where that happens, the transfer is protected by recognised safeguards such as the UK Addendum to the Standard Contractual Clauses or an adequacy framework.

How we protect your data

We use the following measures to protect your information, including information from Google Calendar.

Encryption in transit. Everything that travels between the app, our servers and the services that help us run RYX is encrypted using TLS, the same protection used by online banking.

Encryption at rest. Your account, events, tasks and settings are held in a database hosted by Convex in the European Union, where all data is encrypted at rest using 256-bit AES. Convex is independently audited to the SOC 2 Type II standard.

Google access tokens stay on our servers. The access tokens Google gives RYX when you connect Google Calendar are kept only on our servers. They are never sent to your phone, never shown in the app, and are used only to keep your calendar in step.

Passwords and sign-in. If you sign in with a password, it is stored only as a salted one-way hash, never as readable text. The keys that keep you signed in are held in your phone’s own secure storage, the iOS Keychain or the Android Keystore.

Restricted access. Access to the systems that hold your data is limited to the two founders of Leeam Applications. The secret keys that connect RYX to its providers are kept on our servers and are not included in the app.

Collecting less. We collect only what RYX needs to work. Voice recordings are discarded as soon as they have been turned into text, and our crash reports and analytics are set up to leave out the content of your events.

If something goes wrong. If we ever became aware of a security incident affecting your personal data, we would tell you and the UK Information Commissioner’s Office as the law requires.

Our legal bases

We process your data to deliver the service you signed up for, which covers your account, calendar, tasks and voice requests. We rely on our legitimate interest in improving and securing RYX for analytics and crash reporting. Where the law requires consent, for example device permissions for the microphone, calendar or notifications, the app asks you and you can change your mind in your device settings at any time.

How long we keep things

Your data stays for as long as your account exists. When you delete your account, everything is erased immediately from our live systems: your profile, events, tasks, preferences, photo and sign-in records. Voice recordings are never stored in the first place. Routine security backups expire automatically on a rolling basis.

Your rights

You have the right to see the data we hold about you, correct it, take a copy of it away, restrict or object to how it is used, and delete it. Most of this you can do directly in the app, and deletion in particular is available right in your profile. For anything else, email info@leeamapplications.com and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk, though we would appreciate the chance to sort it out first.

Children

RYX is designed for adults and is not directed at children. You must be at least eighteen to create an account.

Changes to this policy

If we change this policy in a meaningful way, we will say so in the app or by email before the change takes effect, and this page always shows the current version with its effective date.