Privacy Policy

How Finn handles your data

Last updated February 26, 2026

Overview

Finn ("we", "us", "our") is a personal AI assistant delivered over Apple iMessage. This policy describes what data we collect, why we collect it, how we use it, and your rights regarding that data. We built Finn to help you stay organized — not to monetize your information.

What we collect

  • Messages & voice notes

    Text messages and voice notes you send to Finn over iMessage are processed to provide the service. Voice notes are transcribed using OpenAI Whisper and the audio is not retained after transcription.

  • Profile information

    During onboarding, Finn asks for your name, age, profession, and lifestyle context. This information is stored in your private user profile to personalize responses.

  • Google account data

    If you connect your Google account, Finn accesses your Google Calendar events, Gmail (read-only), Google Contacts, and Google Drive to help manage your schedule and responsibilities. We request only the permissions necessary to provide the service.

  • Responsibilities & tasks

    Items you ask Finn to track — deadlines, appointments, reminders, follow-ups — are stored in your isolated environment to maintain continuity across conversations.

  • Payment information

    Payments are processed by Stripe. We do not store your credit card number, bank account details, or other payment credentials. Stripe's privacy policy governs payment data.

How we use your data

  • To respond to your messages and fulfill requests
  • To read and create calendar events on your behalf
  • To proactively remind you of upcoming deadlines and responsibilities
  • To generate voice responses that match the conversation
  • To improve and maintain the reliability of the service

Data isolation

Each Finn user runs in a completely isolated environment. Your data, conversation history, and connected accounts are not accessible to other users. There is no shared database between users — each environment is provisioned independently.

Third-party services

Finn relies on the following third-party services to operate. Each has its own privacy policy:

  • Anthropic (Claude) — AI language model for understanding and generating responses
  • OpenAI (Whisper, image generation) — Voice transcription and image creation
  • ElevenLabs — Text-to-speech for voice replies
  • Google — Calendar, Gmail, Contacts, and Drive integration via OAuth
  • Stripe — Payment processing
  • Apple iMessage — Message delivery

Messages sent to AI providers are used to generate responses and are subject to those providers' data usage policies. We do not permit AI providers to use your data for model training where such opt-out mechanisms are available.

Google user data

Finn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access Google data only to provide and improve the service for you. We do not sell, share, or use Google user data for advertising purposes.

Data retention

Your conversation history and profile data are retained for as long as your account is active. If you cancel your subscription, your isolated environment and all associated data are deleted within 30 days. You may request immediate deletion at any time by messaging Finn or contacting us directly.

Data security

Your data is stored in an isolated environment accessible only to your Finn instance. API credentials are never exposed to your environment — they are injected securely through a proxy layer. Communication between infrastructure components is encrypted via WireGuard VPN. Google OAuth tokens are stored securely and never leave the core infrastructure.

Your rights

  • Access — You can ask Finn what data it holds about you at any time
  • Correction — You can update your profile and stored information via message
  • Deletion — You can request complete deletion of your data and environment
  • Revocation — You can disconnect Google or other integrations at any time through your Google account settings
  • Portability — You can request an export of your stored data

Children's privacy

Finn is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.

Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via iMessage before they take effect.

Contact

Questions about this policy? Message Finn directly or email us at [email protected].