Privacy Policy

Microapp, Inc. (“we,” “us,” or “Thammy”) operates the Thammy service at thammy.ai. We are committed to protecting your privacy and being transparent about how your information is handled. This Privacy Policy explains what data we collect, how we use it, and what choices you have.

By using Thammy, you agree to the practices described in this policy. If you have any questions, you can reach us at any time at support@thammy.ai.

Information We Collect

We only collect what's needed to make Thammy work for you — your email address, the messages you send us, and basic usage data like which features you use. Over time, Thammy learns your preferences to give you better, more personalized replies. If you choose to connect your Gmail account, we access only what's needed to power features like inbox summaries and unsubscribe — nothing more.

How We Use Your Information

Your information is used exclusively to operate and improve Thammy. Specifically, we use it to:

• Process your requests using AI models and deliver accurate, helpful responses.
• Build and maintain your profile so that Thammy's replies become more personalized and relevant over time.
• Store memories from your conversations to provide continuity across sessions.
• Send you replies, reminders, briefings, and other communications you have requested.

We do not use your data for advertising, and we do not sell or rent your personal information to third parties.

Third-Party Service Providers

To provide the Thammy service, we work with trusted third-party providers. These providers only receive the minimum data necessary to perform their function:

• OpenAI (GPT-4o) — processes your requests using artificial intelligence.
• Google AI (Gemini) — provides AI processing and web search capabilities.
• Resend — delivers email responses to you.
• Supabase — hosts our database and provides authentication services.
• Cloudflare — provides infrastructure and security services.

When you send a request, the content of your message is shared with AI providers solely to generate a response. These providers are bound by their own privacy policies and data processing agreements.

Gmail Integration

Connecting your Gmail account is entirely optional and requires your explicit consent through Google's OAuth authorization process. When connected, Thammy accesses your Gmail data only to provide inbox summaries, meeting digests, and unsubscribe features.

You can disconnect your Gmail account at any time from the Thammy dashboard, which will immediately revoke our access. We do not sell, share, or use your Gmail data for any purpose other than delivering the features you have requested.

Thammy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

AI Model Training

We do not use your personal data, email content, or Gmail data to train AI or machine learning models. Your data is used solely to process your requests and provide the Thammy service.

Data Retention

We retain your data only for as long as it is needed to provide the service:

• Memories and profile data are stored for as long as your account is active, or until you request their deletion.
• Conversation history is maintained to provide continuity across your interactions with Thammy.
• Email content is processed to fulfill your request and is not retained beyond what is necessary for the service.

You may request deletion of your data at any time, and we will process your request within 30 days.

Data Security

We take reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction. All data is transmitted over encrypted connections (TLS/SSL), and our infrastructure providers maintain industry-standard security practices. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Cookies

We use only essential cookies required for authentication through Supabase. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Your Rights

You have the right to control your data. At any time, you may:

• Request access to the personal data we hold about you.
• Request deletion of your account and all associated data by emailing support@thammy.ai. We will process deletion requests within 30 days.
• Disconnect Gmail at any time from your dashboard, immediately revoking our access to your Gmail data.
• Request correction of any inaccurate personal information we hold about you.

Children's Privacy

Thammy is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we make changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at support@thammy.ai.