Rallee Me — Privacy Policy

Last updated: 14 July 2026

Rallee Me ("Rallee Me", "we", "us") is a personal AI assistant operated by Kultivator Consulting Ltd, registered in New Zealand. This Privacy Policy explains what information Rallee Me accesses, how we use and protect it, and the choices you have. It applies to the Rallee Me apps and the service at rallee.me.

Rallee Me is a single-user assistant: each person runs their own private instance, and the data below is accessed solely to provide that person's assistant. We do not operate a shared multi-tenant store of user content.

1. Information we access

Google account data (via OAuth, read-only). When you connect a Google account, you authorise Rallee Me to read:

• Google Calendar — your events and their details (scope …/auth/calendar.readonly), to show and summarise your schedule.

Rallee Me does not request access to your Gmail. If you want the assistant to work with your email, you connect a mailbox over IMAP instead (see below), using credentials you provide — no Google email scope is involved.

We request the minimum, read-only scopes needed for these features. Rallee Me cannot modify, send, or delete your Google data.

Connector credentials. For other sources you choose to connect (e.g. IMAP, Nextcloud, an API key), we store the credentials you provide so the assistant can read from those sources on your behalf.

Account & operational data. Authentication data for your Rallee Me account, and basic operational logs needed to run the service.

2. How we use your information

We use the information only to provide the assistant's features to you: showing, searching and summarising your calendar, any mailbox you connect, and other connected data; generating your day plan; running the routines you configure; and answering your questions in chat.

To generate these responses, relevant content may be sent to the AI model that powers your assistant — either a self-hosted model or a third-party cloud AI provider you choose — strictly to produce output for you. We do not use your data for advertising, and we do not sell it.

3. Google API Services — Limited Use

Rallee Me's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data is:

• used only to provide or improve user-facing features that are prominent in the Rallee Me interface (your calendar, email, and assistant features);
• not transferred or sold to third parties for advertising or marketing;
• not used to train or improve generalised or non-personalised AI/ML models;
• accessed by humans only with your explicit consent, for security or debugging where strictly necessary, or to comply with applicable law — never for other purposes.

4. How we store and protect your data

• Per-user isolation. Each user's data is confined to their own Rallee Me instance; there is no shared pool of user content.
• Encryption. Secrets and OAuth tokens are encrypted at rest and are never shown again after entry.
• Blind relay. Rallee Me brokers Google sign-in through a control-plane relay so you don't need your own Google app. This relay handles only encrypted OAuth tokens sealed to your instance — it never accesses your decrypted calendar, email, or other content.
• In transit. All connections use TLS.

5. Sharing and disclosure

We do not sell your data or share it for advertising. We disclose data only:

• to the AI model provider you use (a third-party cloud AI provider and/or your self-hosted model), acting as a processor, to generate your responses;
• where required by law.

Push notifications, where you enable them, are delivered through the ntfy service configured for your account. The managed service is hosted on infrastructure operated by Kultivator Consulting Ltd. We use no other sub-processors.

6. Data retention and deletion

• OAuth tokens and connector credentials are retained until you disconnect the connector or delete them.
• You can revoke Rallee Me's access to your Google account at any time at myaccount.google.com/permissions.
• You can delete your account and all its data at any time — in the app (Settings → Delete account) or by emailing support@rallee.me; see how to delete your account. We remove your instance and its data, and purge residual backups within 30 days.
• Operational logs and backups are retained for up to 30 days, then deleted.

7. Your rights

Under the New Zealand Privacy Act 2020 (and other laws that may apply to you), you may request access to, correction of, or deletion of your personal information. Contact us at support@rallee.me.

8. Children

Rallee Me is not directed to children under 16, and we do not knowingly collect their data.

9. Changes

We may update this policy; we will post the new version here and update the "Last updated" date.

10. Contact

Kultivator Consulting Ltd — support@rallee.me