Privacy Policy
oodul, operated by Zykort · Last updated 7 August 2026
oodul is a personal assistant that remembers things for you. Remembering means storing what you tell it, so this policy explains exactly what is stored, why, who can reach it, and how to get rid of it.
oodul is currently available to adults (18+) only. We do not knowingly collect information from anyone under 18.
Who we are
oodul is operated by Zykort, based in Florida, United States. For any privacy question or request, email contactus@zykort.com.
What we collect
| Category | What it is | Why |
|---|---|---|
| Account | Email address, a password hash (never the password itself) or a sign-in identifier from Apple or Google, display name, timezone, subscription tier. | To create and secure your account. |
| Conversations | The messages you send oodul and its replies. | To answer you, and to build memories. |
| Memories | Short statements distilled from your conversations — facts, preferences, events, and open questions — stored so oodul can find them later. | So oodul can recall things later. |
| Skill data | Records created by skills you install, such as reminders, journal entries, or detected recurring charges. | To make those skills work. |
| Connected accounts | If you connect a calendar or a bank, the access credential for that service and the data it returns. | Only to provide the feature you connected it for. |
| Usage | Which features you used, when, and what they cost us to run. | To meter your plan, bill accurately, and keep the service running. |
We do not collect your contacts, your photos, your browsing history, or your location. oodul contains no advertising and no third-party analytics or tracking software.
Sensitive information
Some of what you tell oodul may be sensitive — a health condition, a financial detail. Memories are internally classified as personal, financial, or health, and the more sensitive classes are handled more strictly: they are excluded from diagnostic logs and are subject to tighter handling throughout.
You are always in control of what you tell oodul, and you can view and delete any memory at any time.
Connected accounts
If you connect a calendar (Google or Microsoft) or a bank account (through Stripe Financial Connections), the following applies:
- We request the narrowest access the feature needs. For banks that is transaction history and balances — read only. oodul cannot move money, and does not request the ability to.
- Credentials are encrypted before storage using envelope encryption with keys held in Amazon Web Services Key Management Service. The encryption key never leaves that service.
- Skills never see your credential. The platform makes the outside call and supplies the credential at the moment of use.
- You can disconnect at any time. Where the provider supports it, we revoke the access upstream as well as deleting our copy; where it does not, we tell you plainly and link you to the provider's own page.
Artificial intelligence
oodul uses large language models from Anthropic and OpenAI to understand what you say, distill memories, and compose replies. Your messages and the memories relevant to them are sent to those providers to generate a response. We do not permit those providers to train their models on your data.
Who else can see your data
Nobody. We do not sell your information, we do not share it for advertising, and we do not disclose it to third parties except:
- Service providers who run parts of the service on our behalf — cloud hosting (Amazon Web Services), AI model providers (Anthropic, OpenAI), financial data access (Stripe), notification delivery (Google Firebase), and error monitoring (Sentry). Each receives only what its function requires.
- When legally required, such as a valid subpoena or court order.
- If the business is sold or transferred, in which case you will be told before your information moves.
Your memories are scoped to your account. No other user's account can reach them.
Where your data lives
All data is stored on servers in the United States. Our databases are not accessible from the internet, and traffic between you and oodul is encrypted in transit.
How long we keep it
We keep your information while your account exists. Some low-importance records may age out automatically over time. When you delete something, we delete it — see below. Billing and usage records, which contain no conversation content, are kept after account deletion for financial record-keeping.
Your choices
- See everything. The app shows every memory oodul holds about you.
- Edit or delete individual memories. Deleting a memory removes the record and the conversation it came from. Nothing is retained in a form that could reconstruct it.
- Delete everything. One action erases all memories, conversations, skill data, and connected-account credentials while keeping your account. We keep only a minimal record that a deletion occurred, containing no content.
- Delete your account. One action in the app removes your account, your memories, conversations, skill data, and connected-account credentials. We retain a limited billing and usage record — how much service was used and what it cost — containing no conversation content and nothing that identifies you by name or email. We keep this for financial record-keeping and to understand our own costs.
- Remove a skill. Uninstalling a skill deletes the data it stored.
- Disconnect a service. Removes the credential and stops all access.
- Export. Request a copy of your data at any time.
Depending on where you live, you may have additional rights — to access, correct, delete, or port your information, or to object to certain processing. Email us and we will honor them. We will not treat you differently for exercising a right.
Security
Passwords are hashed and never stored in readable form. Credentials for connected services are encrypted with keys we cannot extract. Our databases are not accessible from the internet. Sensitive content is kept out of diagnostic logs. No system is perfectly secure, but we have built oodul so that a copy of our database would not, on its own, expose your connected accounts.
Children
oodul is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, email contactus@zykort.com and we will remove it.
Changes
If this policy changes in a way that materially affects you, we will tell you in the app or by email before it takes effect. The date at the top always reflects the current version.
Contact
Questions, requests, or complaints: contactus@zykort.com
This policy is governed by the laws of the State of Florida, United States.