Privacy Policy

ARIA — Voice AI Assistant · Last updated: 4 August 2026

ARIA is a personal project built by Nihhar K Sonee that lets you read, search, summarize and send email using your voice. This policy explains exactly what data ARIA touches, where it goes, and what it is never used for.

The short version: ARIA stores as little as possible. Your email content is never sold, never used to train any AI model, never read by a human, and never shared with anyone beyond the specific services needed to answer the request you made.

1. What ARIA accesses

Data	Why	Stored?
Google account email, name, profile picture	To sign you in and show who is logged in	Yes — until you sign out or delete
Google OAuth tokens	To access the mailbox you explicitly connected	Yes — encrypted at rest
Email metadata (sender, subject, date)	To list and rank your emails	No — fetched live per request
Email body content	Only when you ask for a summary or reply	No — processed in memory, then discarded
Your chat messages with ARIA	To keep conversation history across devices	Yes — until you delete them
Voice audio	Speech recognition runs in your browser	No — audio never leaves your device

2. Google user data — Limited Use

ARIA's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, ARIA:

Does not use Gmail data to train, improve, or fine-tune any AI or machine-learning model.
Does not transfer Gmail data to anyone except as needed to provide the feature you requested, or as required by law.
Does not allow humans to read your email, except with your explicit consent, for security purposes, or where required by law.
Does not sell, rent, or use Gmail data for advertising of any kind.
Requests the narrowest scopes that make the requested features work.

3. Third parties that process your data

ARIA is a thin client over a small number of providers. Data reaches them only when a request requires it:

Provider	Receives	When
Groq (AI inference)	Your message, and email content when you ask for a summary or reply	Only on requests that need AI
ElevenLabs (speech)	The text ARIA speaks back to you	Only when voice replies are on
Google	API calls against your own mailbox	Only for the mailbox you connected
Cloudflare (hosting)	Requests transit their network	Always
Supabase (database)	Session, profile, chat history, encrypted tokens	Always

Please note: when you ask ARIA to summarize an email or draft a reply, the content of that email is sent to Groq to generate the response. Groq does not train on API data. If you would rather no email content ever leave Google's systems, do not use the summarize or reply features.

4. What ARIA never does

Never sends an email without showing you the exact contents first and requiring confirmation.
Never permanently deletes email. "Delete" moves a message to Trash, which you can restore.
Never stores your Google password. Sign-in uses OAuth; ARIA never sees your password.
Never shares your data with advertisers or data brokers.

5. Your controls

Disconnect any app — Settings → Integrations → Disconnect. Deletes the stored tokens.
Sign out — clears your session, profile, connected apps and conversations from that browser.
Revoke access at Google — myaccount.google.com/permissions at any time, independent of ARIA.
Delete everything — email the address below and all server-side records are removed.

6. Retention

Chat history and connected-account records persist until you delete them or ask for deletion. Email content is never written to disk — it exists only in memory for the seconds it takes to answer your request.

7. Security

All traffic uses HTTPS. API keys live server-side in Cloudflare Workers and are never exposed to the browser. OAuth tokens are stored encrypted and are never returned to the client. Rate limiting is in place to protect against abuse.

8. Beta status

ARIA is a personal project under active development, currently in limited beta. It is provided as-is, without warranty. Please do not use it for anything mission-critical.

9. Children

ARIA is not directed at children under 13 and does not knowingly collect their data.

10. Changes

Material changes will be reflected in the "last updated" date above. Continued use after a change constitutes acceptance.

11. Contact

Questions, access requests, or deletion requests:
Nihhar K Sonee — github.com/NKS-Coder/ARIA-voice-agent
Open an issue on the repository, or contact via the email listed on the GitHub profile.

← Back to ARIA · Terms of Service