Privacy Policy

Viro AI

Effective Date: June 13, 2025
Last Updated: August 23, 2026

Privacy at a Glance

✔ We don’t sell your data
✔ We don’t train AI models on your chats
✔ We don’t build behavioral advertising profiles
✔ We don’t share your identity with advertisers
✔ You can delete your chats and account
✔ Ads are contextual, not behavioral
✔ Safety reviews are limited to what is necessary to protect users and enforce our Terms

Viro AI (“Viro,” “we,” “us,” or “our”) operates the Viro AI mobile and web applications (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the App.

Our priority is transparency and user trust. We do not sell your data, we do not build behavioral advertising profiles, and we do not train AI models on your chats.

1. Information We Collect

We collect only the information needed to provide, improve, secure, and support the App.

Email Address

We collect your email address when you create or sign in to your account.

We use your email address for authentication, password resets, account-related notifications, customer support, and important service updates.

Chat History

We store your conversations so you can access them across devices and continue where you left off.

You may delete individual chats or your entire account at any time.

We do not use your chat history to train AI models or build advertising profiles.

Payment Information

Payments are processed by third-party payment providers:

Mobile subscriptions: RevenueCat and the applicable app store payment system
Web subscriptions: Stripe Checkout

We do not store your payment card information.

Connected Services

If you choose to connect third-party services, we access only the information necessary to provide the feature you asked for. Each service is connected separately and can be disconnected at any time in Settings, which deletes your stored tokens.

Google Calendar — we read your calendars and your events (titles, times and locations), and, when you ask us to, create new events. We never modify or delete existing events.
Google Tasks — we read your task lists, and, when you ask us to, add new tasks or mark tasks complete. We never delete tasks.
Google Drive — we can only access individual files you explicitly select using Google's file picker. We cannot browse, search or list the rest of your Drive.
Outlook Calendar — we read your calendars and your events (titles, times and locations), and, when you ask us to, create new events. We never modify or delete existing events.
Microsoft To Do — we read your task lists, and, when you ask us to, add new tasks or mark tasks complete.
OneDrive — we can search and list files in your OneDrive and read the contents of ones you ask us to work with. Our access is read-only: we can never add, change or delete anything.
Outlook Mail — we read messages in your mailbox so we can answer questions about them and help you draft replies. Our access is read-only. Viro AI cannot send email, and cannot create, change, delete or mark messages as read. Any reply we draft is text you copy and send yourself.

Viro AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. Advertising

The App may display contextual advertising.

How Ads Work

Ads may be based on the content of the current message or session context. For example, a message about “homework” may show an education-related ad.

What Ads Do Not Do

We do not:

Create behavioral or interest-based advertising profiles
Perform cross-site or cross-app tracking
Share your email address or account identity with advertisers
Train advertising models on your chat history
Allow advertisers to access your past conversations
Sell, rent, or trade your personal information

Advertisers do not receive your identity, email address, account details, or full chat history.

3. How We Use Your Information

We use information to:

Authenticate your account
Display and sync chat history
Generate AI responses
Operate connected features you choose to enable
Handle subscription billing
Provide customer support
Send account-related or service-related communications
Improve app performance and reliability
Detect abuse, fraud, security threats, or misuse
Enforce our Terms and protect the safety of users and the public
Comply with legal obligations

We do not use your personal data for targeted advertising, data sales, or AI model training.

4. AI Model Providers

When you send a message, the content of that message and relevant context may be securely transmitted to third-party AI providers to generate a response.

AI providers are used for inference only.
We do not send your email address or account identity to AI model providers.
We do not permit AI model providers to use your chats to train their models.
AI-generated responses may be processed by one or more third-party AI providers depending on the model or feature you choose.

Google User Data & Limited Use

Viro AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access. You can connect Google Calendar, Google Tasks and Google Drive individually. Each is optional, is requested only when you choose to connect it, and requires your explicit consent through Google's sign-in screen.
- Google Calendar — we read your calendar list and your events (titles, times and locations), and, when you ask us to, create new events. We never modify or delete existing events.
- Google Tasks — we read your task lists, and, when you ask us to, add new tasks and mark tasks complete. We never delete tasks.
- Google Drive — we can only access individual files you explicitly select using Google's file picker. Viro AI cannot browse, search, or list the rest of your Drive, and has no access to any file you have not chosen. For a file you select, we read its text — including spreadsheets (all tabs) and PDFs.
How we use it. This data is used solely to provide the features you request inside Viro AI — showing your schedule, answering questions about your events, tasks or a document you've shared, and creating events or tasks when you ask. Viro AI confirms the details with you before creating anything on your behalf. We do not use it for any other purpose.
AI processing. When AI is used to answer a calendar-related question, your Google user data is processed exclusively by Google's own Gemini API. Our systems enforce this at a technical level: any conversation containing Google user data is permanently routed to Google's API and is never sent to any other AI provider or model aggregator.
No AI training. We do not use Google user data to train, fine-tune, or improve any AI or machine-learning models — ours or anyone else's — and we do not permit our AI providers to do so. Google user data is also excluded from Viro AI's memory and personalization features.
No advertising, no selling. We never sell Google user data and never use it for advertising purposes.
No human access. Our staff do not read your Google user data except with your explicit permission, where necessary for security or abuse investigation, to comply with applicable law, or in aggregated, anonymized form for internal operations.
Storage, retention & disconnection. We store the OAuth tokens needed to maintain your connection, encrypted at rest. Calendar information appears only within your own conversations. You can disconnect Google Calendar at any time in Settings, which deletes your stored tokens; you can also revoke Viro AI's access from your Google Account permissions page. Deleting a conversation deletes the calendar content within it.

Microsoft Account Data

Information we receive from Microsoft Graph — your Outlook Calendar events, Outlook Mail messages, Microsoft To Do tasks and OneDrive files — is used only to provide the features you asked for. We do not use it for advertising or marketing, we do not sell or transfer it, and we do not use it to train or improve any AI model.

When a conversation includes information from a connected Microsoft account, we process that conversation using an AI provider whose terms prohibit training on the data, and it is excluded from our long-term memory features.
You can review and revoke Viro AI's access to your Microsoft account at any time at myapps.microsoft.com for work or school accounts, or account.live.com/consent/Manage for personal Microsoft accounts.

5. Safety, Abuse Prevention & Legal Compliance

We may process limited account, usage, and conversation information when reasonably necessary to operate Viro AI safely, prevent abuse, detect fraud, enforce our Terms, comply with legal obligations, respond to valid legal requests, investigate user-submitted safety reports, or protect the rights, safety, and integrity of Viro AI, our users, and the public.

We do not broadly monitor private conversations for advertising or profiling.
If a user submits a report, we may review the reported content and related technical information necessary to understand and address the issue.
We do not use user chats to train AI models. Safety review is limited to what is reasonably necessary to address abuse, security, legal, or safety concerns.

6. Information Sharing

We only share information with essential service providers that help us operate the App, including:

RevenueCat for mobile subscription management
Stripe for web subscription payments
Cloud infrastructure providers for secure storage and app operation
Third-party AI providers for message inference
Analytics providers for app performance and anonymous usage insights
Customer support, security, fraud prevention, legal, and compliance providers, where necessary

We may also disclose information when we believe in good faith that disclosure is necessary to comply with applicable law, legal process, court order, subpoena, warrant, valid government request, or to protect the rights, safety, and security of Viro AI, our users, or others.

If Viro AI is involved in a merger, acquisition, financing, restructuring, bankruptcy, or sale of assets, user information may be transferred as part of that transaction, subject to this Privacy Policy.

We do not sell, rent, or trade your personal information.

7. Data Retention, Control & Deletion

You are in control of your data.

You may request to:

Delete individual conversations
Delete your account entirely
Request a copy of your data
Confirm deletion of your data

When you delete your account, your personal data, including your email address and chat history, is permanently removed from our active systems, unless limited retention is required for security, fraud prevention, legal compliance, dispute resolution, or enforcement of our Terms.

8. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information.

You may contact us at nick@viro.app to exercise your privacy rights.

We may need to verify your identity before fulfilling certain requests.

9. Children’s Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Users under 18 should use the App only with permission and supervision from a parent or legal guardian.

Viro AI is a general-purpose AI assistant and is not designed to provide therapy, crisis counseling, companionship, romantic interaction, sexual content, or other age-restricted experiences.

If you believe we have inadvertently collected personal information from a child under 13, please contact us at nick@viro.app, and we will take appropriate steps to delete it.

10. Security

We implement reasonable security measures designed to protect your information, including:

TLS encryption for data in transit
Encrypted cloud storage where supported
Strict access controls
Account-level data isolation
Secure authentication practices
Monitoring for abuse, fraud, and security threats

The App uses secure cloud infrastructure hosted in the United States.

No system is completely secure, and we cannot guarantee absolute security.

11. Third-Party Links and Services

The App may contain links to third-party websites, ads, services, or content.

We are not responsible for the privacy practices, security, or content of third parties. Your interactions with third-party services are governed by their own privacy policies and terms.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, features, service providers, or legal obligations.

We will revise the “Last Updated” date when we make changes. If we make material changes, we will provide notice within the App or through another appropriate method.

13. Contact Us

For questions or requests regarding privacy or data, contact us at:

Email: nick@viro.app

​