Overview
SelfPilot AI is a personal productivity and financial organization tool. It helps users organize tasks, goals, habits, schedules, reminders, and financial records they choose to enter. SelfPilot AI does not connect to bank accounts, process card payments, or ask for online-banking credentials.
Information you provide
Account and profile information
We process your email address, account identifier, authentication provider information, session and security metadata, and profile details such as your name, avatar URL, preferred language, timezone, currency, app mode, monthly-income setting, and selected home-screen preferences. Password authentication and Google sign-in are handled through Supabase Auth and, for Google sign-in, Google.
Productivity information
We store the tasks, task groups, labels, checklists, saved views, goals, milestones, progress and review records, habits, habit logs, schedules, schedule items, exceptions, templates, dates, times, reminders, notes, and descriptions that you create.
Financial information
We store user-entered transactions, accounts, transfers, categories, budgets, debts, debt payments, recurring obligations, due dates, balances, amounts, currencies, notes, and summaries calculated from those records. This is organizational information entered by you; SelfPilot AI is not a bank, lender, payment processor, or financial adviser and does not directly process payment cards or banking login credentials.
Support and diagnostic information
If you submit feedback or a deletion request, we process the content you submit and information needed to respond. In-app feedback may include app version, platform, operating-system version, and locale. Servers and hosting providers may also process basic connection and request information, such as IP address, route, status, and request identifiers, for delivery, security, rate limiting, and diagnostics.
AI processing
SelfPilot AI uses OpenAI's API for the Task Agent, Goal Agent, other supported drafting agents, and certain AI recommendations. When you request an AI feature, the backend sends OpenAI the prompt or transcript you submitted together with the limited SelfPilot context needed for that request. Depending on the feature, that context can include task or goal titles and status, habit or schedule context, profile language and timezone, or compact financial totals, balances, category summaries, and other relevant user-entered records.
OpenAI returns generated text or structured draft data. SelfPilot AI may store generated recommendations, draft actions, request context, and short-lived conversation-session records so the feature can show, confirm, retry, expire, or execute a draft. AI output can be inaccurate and should not be treated as professional legal, medical, or financial advice.
SelfPilot sends OpenAI API requests with response storage disabled. OpenAI states that API data is not used to train its models by default unless the customer opts in, but provider abuse-monitoring data may still be retained for a limited period under OpenAI's applicable data controls, terms, and account configuration. SelfPilot also stores privacy-limited usage metadata such as the authenticated user identifier, feature, model, token counts, latency, outcome, and timestamp to enforce daily limits and monitor reliability and cost. This usage telemetry does not store the prompt.
Voice and microphone processing
Voice input is optional and requires Android microphone permission. SelfPilot AI invokes the device's speech-recognition service to convert speech to text. The device or speech-service provider may process audio remotely depending on the device, language, settings, and available recognition service. SelfPilot AI does not upload raw microphone audio to its FastAPI backend and does not store raw audio in its application database. The resulting transcript is treated as user-entered text and may be sent to the SelfPilot backend and OpenAI when you use it with an AI feature.
Notifications and reminders
SelfPilot AI schedules Android notifications locally on your device for configured reminders, event times, and supported follow-ups. It may request notification and exact-alarm permissions for timely reminders. SelfPilot AI does not currently use Firebase Cloud Messaging or another remote push-notification service. Notification identifiers and scheduling preferences are stored locally and scoped to the signed-in account.
How we use information
- Provide authentication, profiles, syncing, and app features.
- Create, display, update, and organize the records you request.
- Generate AI drafts, recommendations, and summaries you invoke.
- Schedule local reminders and maintain account-scoped settings.
- Protect accounts, enforce authorization, prevent abuse, and diagnose failures.
- Respond to support, feedback, privacy, and deletion requests.
Service providers and data disclosure
We disclose information only as needed to operate requested features, protect the service, comply with law, or respond to valid legal process. Current providers include:
- Supabase for PostgreSQL database hosting, authentication, account identities, and session management.
- Render for hosting the SelfPilot FastAPI backend and processing API requests and operational logs.
- OpenAI for AI interpretation and requested recommendation generation.
- Google for Google sign-in when selected and device speech recognition when the Android recognition service uses Google infrastructure.
- Vercel and the developer's website infrastructure for serving these public pages. Account-deletion requests are sent to the developer's protected support inquiry system for review.
SelfPilot AI does not sell personal data, share personal data for cross-context behavioral advertising, display third-party ads, or include an advertising SDK. It does not include a payment-processing, crash-reporting, or third-party product-analytics SDK. Providers may process data on our behalf to deliver the services described above; this service-provider processing is distinct from selling data or sharing it for advertising.
Security practices
SelfPilot AI uses HTTPS for production network traffic, Supabase JWT authentication, server-side authorization, owner-scoped database queries, database row-level security and grants, secure local storage for authentication sessions, and server-only storage of privileged provider credentials. Sensitive deletion operations require recent authentication. No system can be guaranteed completely secure, and users should protect their device and credentials.
Retention and deletion
User-created application data is retained while the account remains active or until you delete individual records. Some AI drafts, previews, notifications, and conversation sessions have expiration fields or cleanup behavior; other records remain until removed or the account is deleted.
Account deletion removes the inventoried user-owned SelfPilot application records and requests hard deletion of the Supabase Auth identity. A minimal deletion-control record containing the former account's internal subject identifier, deletion state, and timestamps is retained to block writes from still-valid tokens and preserve deletion integrity. The current implementation does not set a fixed automatic expiration for that security record. Limited request logs, provider backups, or abuse-prevention records may remain for periods controlled by the relevant provider or as required for security or law.
A public deletion request stores the submitted email and request details in the developer's support inquiry system until the request is reviewed and manually removed. The current support system does not apply a fixed automatic deletion period to inquiry records.
Your choices and rights
- Edit or delete individual records inside SelfPilot AI.
- Disable optional notification, microphone, biometric, or exact-alarm permissions in Android settings.
- Sign out locally or from all devices using account security controls.
- Delete your account in the app after recent authentication.
- Submit an external request through the account deletion page.
- Contact us to request rights available under applicable law.
International and cloud processing
SelfPilot AI and its providers operate cloud infrastructure that may process information outside your country. Where required, processing is subject to provider agreements and legal safeguards applicable to those services.
Children's privacy
SelfPilot AI is not directed to children and is intended for users who are at least 18 years old. We do not knowingly offer the service to children. If you believe a child has provided information, contact us so we can investigate and take appropriate action.
Changes and contact
We may update this policy when the product, providers, or legal requirements change. The date at the top identifies the current version. Material changes will be communicated through an appropriate product or website notice when required.
Privacy and support contact: selfpilot.support@gmail.com