Privacy Policy
Last updated: 5 November 2026
This policy explains how Then: Voice Assistant processes information in its mobile app, backend, and connected services. Questions and requests about your data can be sent to join@mitacore.co.
Information used to provide Then
Then processes account identifiers, app settings, calendar items, email actions, voice recordings, and information you choose to provide in typed or spoken requests. Connected-service credentials and tokens are stored using secure storage; they are not analytics data. We do not use Google user data for advertising or sell it.
Google Calendar and Gmail
If you separately connect Google services, Then requests access to read calendars you can access and to send email on your behalf. Calendar information is used to show your schedule and help interpret requested actions. Gmail send access is used to deliver only messages you explicitly authorize, including messages you choose to schedule. Then does not request Gmail inbox-reading access. We do not share Google user data with OpenAI unless you separately authorize an AI request and the minimum calendar context is necessary to interpret it.
You can disconnect Google services in Then or revoke Then's access in your Google Account. This stops future access, subject to information already needed for a confirmed scheduled action or legal obligations.
Apple, Microsoft and email sign-in
Sign in with Apple and Google provide account identifiers used to create a Then session. Magic Link uses the email address you submit to send a one-time sign-in link. Microsoft sign-in and Microsoft Calendar/Mail access are separate flows; when configured and connected, Then uses granted calendar and mail permissions only for the features you request. You can revoke provider access in the provider account settings.
OpenAI processing
Before the first AI request, Then presents a separate notice. If you agree, a selected typed request or submitted audio and the minimum context needed to interpret it are sent securely through our backend to OpenAI for transcription or planning. Canceling the notice sends nothing. OpenAI returns a proposed operation; it does not directly edit a calendar or send email.
Diagnostics
Optional technical diagnostics are off by default and are a separate choice from accepting the Terms and Privacy Policy. You can enable or withdraw that choice in Settings at any time. If enabled, Then uses Firebase Analytics for feature and reliability events, Firebase Crashlytics for crashes, Firebase Performance Monitoring for performance, and Microsoft Clarity for masked interaction recordings and tap patterns. Technical events may include app version, device/OS category, operation outcomes, crashes, and performance. Diagnostics must not include raw audio, commands, event titles or notes, email or message bodies, contact records, precise calendar content, authentication tokens, or provider secrets. We do not use this data for advertising or sell it.
Subscriptions
Apple processes payments for optional Then Pro subscriptions through the App Store. RevenueCat receives your Then account identifier and purchase status so Then can check whether your subscription is active. Then does not receive your payment card details from the App Store.
Storage, retention and account deletion
Information is transmitted using encrypted connections. Access is limited to people and systems that need it to operate and protect the service. Account and action data are retained while needed for the service and applicable security or legal obligations.
You can permanently delete your account without contacting support: open Then, go to Settings → Account → Delete account, and confirm the deletion. This removes the account and authentication sessions, connected-service credentials, scheduled email and messaging actions, synchronized items and attachments, and Then data stored by the app on that device. The action cannot be undone.
Account deletion does not cancel an App Store subscription. Apple and RevenueCat may retain purchase and transaction records when required for payment processing, fraud prevention, dispute resolution or law. Connected providers may retain information under their own policies; you can revoke Then in the provider’s account settings. For access, correction or another privacy request, email join@mitacore.co.
Children and international processing
Then is not directed to children below the minimum age required in their distribution region. Service providers may process information in other countries, subject to applicable safeguards.
Changes
Material changes to data use will be disclosed in the app and may require renewed consent.