Who we are
Pally ("we", "us", "our") is a WhatsApp-based personal assistant operated by its founder. You can reach us at support@getpally.ai.
What data we collect
When you message Pally on WhatsApp, we receive and process:
- Your WhatsApp phone number — used to identify your account and route messages.
- Message content — text, images, and files you send to Pally. We process these to provide the service (expense logging, list management, file storage, reminders).
- Expense and list data — amounts, categories, vendors, list items, and other structured data extracted from your messages.
We do not collect your name, email address, location, contacts, or any data beyond what you explicitly send to Pally.
How your data is stored
- Structured data (expenses, lists, reminders, food logs) is stored in Supabase, a hosted PostgreSQL database. All data is scoped to your user ID — we never mix data between users.
- Files and receipts are stored in your own Google Drive, inside a dedicated "Pally" folder. Pally only accesses this folder — never your other Drive files. You can revoke access or delete the folder at any time.
- No data is stored on our servers' local disk beyond temporary processing (e.g., downloading an image to classify it, then discarding it).
Third-party processors
To provide the service, your data passes through these third parties:
- Twilio — delivers WhatsApp messages between you and Pally. Twilio Privacy Policy.
- Anthropic (Claude AI) — processes your messages and images to extract structured data (expense amounts, categories, receipt details). Message content is sent to Claude's API for classification. Anthropic does not use API inputs to train models. Anthropic Privacy Policy.
- Supabase — hosts the PostgreSQL database storing your structured data. Supabase Privacy Policy.
- Google Drive — stores your files and receipts in your own Google account. Pally uses a service account with access limited to the Pally folder. Google Privacy Policy.
Google Drive limited use disclosure
Pally's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only access the Pally folder in your Google Drive — not your other files.
- We do not use your Drive data for advertising or sell it to third parties.
- We do not transfer your Drive data to any party other than as necessary to provide the service.
Data retention
Your data is retained as long as you use Pally. If you stop messaging Pally, your data remains until you request deletion. Files in your Google Drive persist until you delete them yourself.
Your rights
- Access: Message Pally "export" to get a full download of your data.
- Deletion: Email support@getpally.ai and we will delete all your data from our database within 30 days. Files in your Google Drive are under your control — delete the Pally folder anytime.
- Portability: Your expenses can be exported as Excel; your files are already in your own Google Drive.
Security
Messages between you and Pally travel over WhatsApp's end-to-end encryption. Our backend runs on an encrypted, access-controlled server. Database access uses service-role keys and row-level security.
Children
Pally is not intended for use by anyone under 13. We do not knowingly collect data from children.
Changes
We may update this policy. Material changes will be communicated via a WhatsApp message to active users. The "last updated" date at the top reflects the latest revision.
Contact
Questions? Email support@getpally.ai.