Privacy Policy

Last updated: September 8, 2026

Summary

Asios products are designed to minimize data collection. Room messages and participant data in Asios Rooms are permanently deleted when rooms expire. We don't sell your data and we don't use ads or tracking pixels. We do use Google Analytics 4 to understand aggregate site usage — see Analytics & Cookies below — and you can decline it via the consent banner.

Asios Android Apps

Asios Chat + AI, Asios Rooms, and Asios Standup are separate Android apps operated by Asios LLC. They use one phone-verified Asios identity, but each product has its own session, backend, and product data. The identity service stores your verified phone number and an app installation identifier to authenticate devices. Rooms and Standup receive an opaque account identifier, not your phone number or email address.

  • Private Chat: direct and group messages are encrypted on the sender's device and decrypted on recipients' devices. Our server stores ciphertext, delivery metadata, public encryption keys, and account identifiers; it cannot read the message plaintext.
  • Voice and video calls (Asios Chat + AI only): WebRTC carries live camera and microphone streams between participants. Asios does not record or retain calls. Asios Rooms and Asios Standup do not provide calling and do not request camera access.
  • QR friend-add (Asios Chat + AI only): camera access is used to scan another user's QR code. Images from the QR scanner are processed on-device and are not uploaded or retained. Asios Rooms and Asios Standup do not include QR scanning.
  • Asios Rooms: stores an opaque account ID, display name, room messages, participant data, and AI replies. Room content is stored only for the room's configured lifetime (1 hour to 7 days), then deleted. Messages that invoke Asios are processed by the configured AI provider to generate the requested reply.
  • Asios Standup: stores an opaque account ID, display name, timezone, group membership, schedules, text check-ins, transcripts, streaks, prompts, and summaries until the applicable group or account deletion. Voice check-in audio is never stored on Asios servers: it is held in memory only for the length of the transcription request, sent to OpenAI Whisper for transcription, and then discarded. Only the transcript is saved as the check-in.
  • Asios AI: prompts, AI replies, and conversation context are stored with the phone identity. Text is PII-redacted before AI inference. Voice-note audio is sent to OpenAI Whisper and discarded after transcription.
  • Notifications: when notifications are enabled, an Expo push token and product user ID are stored so the selected product can deliver requested notifications. Expo and Google Firebase Cloud Messaging process the token and notification payload for delivery.
  • Local data: app installation identifiers and authentication tokens are stored in Android-protected local storage. Chat private encryption keys are also stored locally and are not sent to Asios.

Each Asios app offers deletion of your whole Asios account and, separately, deletion of just that product's data. Follow the public instructions at asios.app/delete-account.

SMS Messaging (Asios Line)

Asios Line is a personal AI assistant accessed by SMS. When you text our Asios Line phone number, the following applies:

  • Opt-in: You opt in to receive SMS replies from Asios by initiating the conversation — i.e., sending any text to the Asios Line number. We do not add anyone to SMS from any other channel.
  • Opt-out: Reply STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT) at any time to immediately stop all messages from Asios. You will receive a single confirmation message. To resume, reply START.
  • Help: Reply HELP (or INFO) to receive support contact information.
  • Frequency: Message frequency varies — Asios Line is conversational, so you will receive one reply for each message you send.
  • Carrier disclaimer: Message and data rates may apply. Asios does not charge per message; standard rates from your mobile carrier may apply.
  • What we store: Your phone number (in E.164 format), the content of your messages, AI-generated replies, and a rolling summary used to maintain conversation context. We do not share your phone number or message content with third parties for marketing.
  • AI processing: Your messages are sent to our AI providers (Groq and OpenAI — both USA) for response generation. Neither provider trains on your data on the API tiers we use. Other people's phone numbers, emails, and obvious sensitive number patterns are redacted from message bodies before they reach the provider.
  • Retention: Message content is retained on a rolling 90-day window; the per-user summary persists until you delete your account or reply STOP and request deletion.
  • No sharing for marketing: Mobile information (phone numbers, opt-in status, and message contents) is never shared with third parties or affiliates for marketing or promotional purposes.
  • Carriers supported: US carriers via a 10DLC-registered long code. International SMS is not supported in v1.

Account deletion or SMS-specific data requests: email asios_app@proton.me from the address associated with your account, or text HELP for instructions.

What We Collect

We collect only what is necessary to provide the service:

  • Verified phone number, app installation identifier, and device/session records (shared identity and account security)
  • Opaque account ID, display name, timezone where applicable, and product-local user ID (Rooms and Standup accounts)
  • Push token when notifications are enabled (notification delivery)
  • Newsletter email address (if you subscribe to Asios Weekly — processed by Beehiiv)
  • Payment information (processed by Stripe — we never see your card number)
  • Room data (messages, display names) while a room is active — deleted on expiration
  • Standup group data, check-ins, transcripts, prompts, and summaries until the group or account is deleted
  • Encrypted Chat message ciphertext, public encryption keys, and delivery metadata until the account is deleted
  • Asios AI prompts, replies, and conversation context until the account is deleted or the applicable retention window expires
  • Voice-note audio only while it is being transcribed, never written to Asios storage; live call audio/video only while the call is active
  • Phone number and SMS message content (if you use Asios Line — see the SMS section above)
  • Server logs (IP addresses for rate limiting) — deleted within 48 hours

What We Don't Do

  • We don't sell your data to third parties
  • We don't use advertising cookies or run ads
  • We don't track you across other websites
  • We don't store room messages after expiration
  • We don't train AI models on your data

Analytics & Cookies

We use Google Analytics 4 to understand how visitors use asios.app. We collect:

  • Page views, referrer, and country (not city)
  • Device class and browser type
  • Aggregate event counts: newsletter signups, outbound clicks to Asios Rooms

We do notshare data with Google's ads products (Google Signals is disabled), and we do not pass any personal information into analytics events. Event data is retained for 14 months.

On your first visit a banner asks for consent. We use Google Consent Mode v2 with all consent categories defaulted to denied until you accept. If you decline, Google Analytics receives only cookieless pings used for aggregate modeling — no identifiers are stored on your device.

You can revoke consent at any time by clearing your browser's site data for asios.app, or by installing the Google Analytics opt-out browser add-on. Honoring browser DNT/GPC signals is on our backlog.

AI Processing and Third-Party Processors

When you send a message with @asios in Asios Rooms, we route it to one of our AI providers based on your plan. Specifically:

  • Your message is sent to the selected provider's API endpoint (USA)
  • Free plan: Groq (Llama 3.3 70B). Pro / Team: OpenAI (GPT-4.1). Google Gemini may be used as a cross-provider fallback.
  • None of these providers train on your data on their production API tiers
  • Providers may retain your message for up to 30 days for safety/abuse monitoring only
  • Your message is not retained by us after the room expires

Your data is also processed by these service providers:

  • Render (USA) — Database and backend compute hosting
  • Vercel (USA) — Frontend hosting and edge functions
  • Stripe (USA) — Payment processing (PCI DSS compliant)
  • Groq (USA) — AI inference (Free plan)
  • OpenAI (USA) — AI inference (Pro & Team plans) and voice transcription (Whisper)
  • Google Gemini (USA) — AI inference fallback
  • Expo / Google Firebase Cloud Messaging (USA) — Android push-token registration and notification delivery
  • Resend (USA) — Standup invitations and transactional email
  • Twilio (USA) — Phone verification and SMS delivery for Asios Line. Processes phone numbers, verification messages, and SMS content as applicable for delivery and carrier compliance.
  • Beehiiv (USA) — Newsletter delivery for Asios Weekly. Stores subscriber email and engagement metadata. Used only if you subscribe.
  • Google Analytics (USA) — Aggregate site usage analytics. See the Analytics & Cookies section above. Subject to consent.

Each processor is bound by their published Terms of Service and our agreements with them.

Data Retention

  • Room messages: 1 hour to 7 days — deleted on room expiration
  • Encrypted Chat records: retained until account deletion; message bodies remain ciphertext on our servers
  • Standup check-ins and group data: retained until the host deletes the group or the account is deleted
  • Voice-note audio: discarded after transcription; only the transcript is stored
  • Live call audio/video: not recorded or retained
  • Push tokens: retained until logout/account deletion or automatically removed when the push provider reports them invalid
  • SMS messages (Asios Line): rolling 90 days — older messages auto-purged
  • SMS conversation summary: retained until you delete your account or request deletion
  • Rate limit logs: 48 hours — auto-deleted
  • Account data: retained until you delete your account
  • Database backups: 30 days — auto-purged by provider
  • Payment records: 7 years — required by law

Your Privacy Rights

You have the right to:

  • Access: request a copy of your account data
  • Deletion: delete your account and all associated data
  • Portability: export your account data
  • Correction: update inaccurate information
  • Use without account: create and join rooms with no personal data stored

Security

We use HTTPS encryption for all network traffic, bcrypt-hashed passwords, JWT authentication, rate limiting, and Android-protected storage for local credentials. Private Chat message bodies are end-to-end encrypted; only participants' devices hold the private keys needed to decrypt them. Rooms, Standup, and Asios AI are server-mediated and are not described as end-to-end encrypted. The Service is hosted on Render (backend) and Vercel (frontend), both of which maintain SOC 2 compliance.

Privacy Requests & Contact

To exercise your privacy rights or ask questions, email us at asios_app@proton.me

We handle the following request types:

  • Data access: we'll send you a copy of your account data within 30 days
  • Account deletion: we'll permanently delete your account and all associated data
  • Data correction: we'll update inaccurate information on your account
  • Questions: we'll respond within 5 business days

Please include the verified phone number or account details needed to locate your account and a description of your request. We may ask you to complete phone verification before fulfilling sensitive requests. Do not email us an SMS verification code.

Asios LLC · Austin, TX · USA