Privacy policy

The short version

• Your messages never leave your phone. Sandiko's AI runs on your device. The text of your notifications and chats is not uploaded to us or anyone else.
• No ads, no ad SDKs, no selling data. You pay for Sandiko; you and your customers are not the product.
• The waitlist keeps only your email, country and how you'd use Sandiko — to invite you to the test.
• You can see and undo what Sandiko learned, and delete everything at any time.

1. What the Sandiko app does on your phone

Sandiko is an assistant for Android. With your permission, it reads the notifications your phone already receives (for example from WhatsApp, Messenger, Instagram, SMS, payment and bank apps) using Android's notification access. It stays quiet and shows you only the few things that need you — orders, promises, changed plans, and payments it hasn't seen yet.

All of this happens on your device:

• Notification text, chat content and what other people wrote are processed and stored only on your phone, in an encrypted database.
• The AI model that sorts and summarises runs on your phone. It does not send your messages to a server to be analysed.
• Sandiko shows what it learned about you in plain words (for example “Amara is a customer”), and you can undo any of it with one tap.
• Sandiko never sends a message or takes an action for you without your tap.

Sandiko is careful with what it can't know from notifications alone. It will say “may still be waiting” or “payment not seen yet” rather than claiming someone is unanswered or hasn't paid — cash and accounts it can't see are possible, and you can mark things done in one tap.

2. What Sandiko does not do

• It does not upload notification text, chat content, other people's messages, sender names, phone numbers, email addresses or contacts.
• It does not upload your location history, photos or audio, or the memories and profile it builds about you.
• It does not use an Accessibility Service to read your screen.
• It does not ask for the READ_SMS permission. SMS are read only through their notifications, like any other app.
• It does not include advertising SDKs, and no analytics SDK that sends message content.

3. What can leave your phone (no message content)

To keep the app working and improve it, Sandiko may send information that contains no message content:

• App and model version, and your subscription status (via Google Play Billing).
• Crash reports with message text removed.
• Counts and timings — for example how many notifications arrived, how many times Sandiko interrupted you, battery and processing time, and how often its picks were right, by category.
• Requests to download updated on-device models.

Some optional features need your separate, explicit consent before they run, and are off by default:

• Cloud help for low-end phones: a minimal, selected snippet is pseudonymised on your phone first (names replaced with placeholders like [PERSON_1]) and sent to a language-model provider that is contractually barred from storing it or training on it. We don't keep it on our servers either.
• Helping improve Sandiko: sharing pseudonymised corrections you choose to share. This is a separate consent you can withdraw.
• Backup: an encrypted blob made on your phone with your key. We cannot read it; if you lose the key, it cannot be restored.

4. The waitlist on this website

When you ask for an invite on sandiko.app, we store:

• Email address — to invite you to the Android test and tell you when it opens in your country.
• Country — to decide where to open the test first and to invite people in the right order.
• How you'd use it (“I sell over chat”, “Just for me” or “Both”) — to shape the test and invite a mix of people.
• The date and time you signed up.

We don't store your name, IP address or device details with your sign-up, and we don't use the list for advertising or share it with anyone else. The list is stored with our database provider (Supabase, [REGION]); the website is hosted by Vercel. Only we can read the list — the website itself can add to it but cannot read it back.

Legal basis (where GDPR / UK GDPR applies): your consent, given by submitting the form. You can withdraw it at any time.

Retention: we keep your sign-up until the early test ends or [12] months after you signed up, whichever comes first, or until you ask us to delete it. People who join the test get a separate notice for the app.

5. This website

• No analytics, no ad trackers and no cookies are set by this site.
• The “Paste a chat” demo runs entirely in your browser. The text you paste is never sent anywhere or saved — close the page and it's gone. The page's security policy only allows it to talk to sandiko.app itself.
• Fonts are loaded from Google Fonts, which receives your IP address when the font files are fetched. [We may self-host the fonts before launch.]
• Our host (Vercel) processes standard request data such as IP addresses in its logs to deliver and protect the site.

6. How long data stays on your phone

• Raw notification text: about 30 days, then deleted.
• Individual items (an order, a promise): tidied away some time after they're done.
• Summaries (for example “Amara usually orders on Fridays”): kept longer, fading over time unless they're facts you confirmed.
• Your reactions (Yes / Not right / Done): kept so Sandiko keeps learning what matters to you.

7. Your choices and deleting data

• In the app: forget a single item (its memory and source are deleted and related summaries rebuilt), or delete everything — this removes the on-device database and any copy we hold, such as an encrypted backup.
• Waitlist: to see, correct or delete your sign-up, email [privacy@sandiko.app] from the address you signed up with. We'll act within 30 days.
• Depending on where you live (for example the UK, EU, or US states with privacy laws) you may have further rights, including to complain to your data protection authority.

8. Children

Sandiko is not directed at children under 13 (or the minimum age in your country), and we don't knowingly collect their data. If you think a child has joined the waitlist, contact us and we'll delete it.

9. Contact and changes

Controller: [LEGAL NAME / TRADING NAME], [ADDRESS]. Contact: [privacy@sandiko.app].

If this policy changes, we'll update the date above; for material changes to the app we'll tell you in the app before they take effect.