Sir Walter Privacy Policy

Effective date: November 6, 2026.

This policy explains what Sir Walter collects, why, and what you can do about it. Sir Walter is run by Hibiscus Consulting LLC, doing business as Sir Walter, of Cary, North Carolina ("we", "us"). The app and service are at sirwalter.ai.

The short version

• We use your mail only to run your own assistant.
• We never sell your data, never use it for ads, and never use it to train models.
• The language models that read your mail run inside our own Google Cloud project in the United States. The companies that made those models do not receive your data.
• Sir Walter sorts your mail into folders and marks it read. It never deletes mail and never archives it. You can undo any move.
• Your mailbox connection is encrypted on our servers.
• You can disconnect your mailbox or delete your account at any time from the You tab.

What we collect

Account information. When you sign in with Apple, Apple gives us an account identifier and, if you choose to share them, your name and email address. If you choose Hide My Email, we receive an Apple relay address instead of your real one.

Your mailbox connection. You connect Gmail with Google sign-in. Google gives us a token that lets Sir Walter read your mail, move it between folders, mark it read, and send mail from your address when you ask it to. The permission is Google's "gmail.modify" scope. It does not let us permanently delete mail. If you connect a mailbox another way, with an app password under "Other email", we keep that password encrypted in the same vault and use it only to read and move your mail.

Your mail. Once connected, we read your messages so the assistant can sort them, find things that need you, find verification codes, and find trips. Google tells us when new mail arrives (through Gmail push notifications and Google Pub/Sub inside our Google Cloud project), so we read only the new message's headers and preview right away. We read the full text of a message only when a feature needs it, for example to summarize it or draft a reply.

What the assistant makes from your mail. The sorted state of your mail, summaries, drafts, the "things you missed" list, trips with their dates, bookings and the people on them, and verification codes it found. These are made on demand and stored in your account.

To-dos. The to-dos you type or speak. When you speak a to-do, your phone turns speech into text, using Apple's on-device recognition where it is available. Only the text reaches us.

Coordination records. When you offer someone times to meet, we keep the times you offered, who you sent them to, and their reply.

Connected computers. If you connect your own computer as an agent, we keep its name, its connection details, and the tasks you approve for it.

Notification details. A push notification token for each device where you allow notifications.

Your settings. Your preferences.

Technical information. Basic server logs needed to run and secure the service. If you have chosen to share analytics with app developers in your iPhone settings, Apple may share crash reports with us. We use no third-party analytics.

We do not collect your device location, contacts from your address book, photos, health data or financial account data.

How we use it

We use your data only to provide the features you use in Sir Walter:

• sorting your mail into folders and marking it read, so important messages are easy to find
• listing the things in your mail that need you
• sending you verification codes found in your mail
• writing summaries and drafts when you ask
• keeping your to-dos
• collecting bookings into trips
• offering times to people and collecting their replies
• relaying tasks you approve to a computer you connected
• sending the notifications you turned on
• keeping the service secure and fixing problems

We do not:

• sell your data
• use your data for advertising, or share it with advertisers
• use your data to train, fine-tune or improve any AI or machine learning model, ours or anyone else's
• use third-party analytics or track you across other companies' apps or websites
• delete or archive your mail
• let people read your mail, except as described under "Who can see your data"

How the assistant works

Sorting. Sir Walter moves messages between Gmail folders (labels) and marks them read. It never deletes a message and never archives one. Every move is recorded, and you can undo any of them in the app.

Language models. The text the assistant reads (message headers, and the full text of messages that need you) is processed by a language model running inside our own Google Cloud project, through Google's Vertex AI service. The model is an open-weights DeepSeek model served by Google. We also run Google's Gemma model on the same text as a shadow test, to compare its results; its output is not shown to you. Google states that it does not log these prompts and that caching is turned off. The makers of the models do not receive your data. We have not independently audited Google's handling of this data.

Verification codes. When a verification code arrives in your mail, we send it to your phone as a push notification. The code appears in the notification itself, so anyone who can see your lock screen can see it. You can turn this off in the app or in your iPhone settings.

Coordination. When you offer someone times, Sir Walter sends one email from your own mailbox, and only after you tap send. The email links to a web page we host that shows only the times you offered. The link expires.

Trips. Bookings found in your mail become a trip. You can share a trip with an invite link. Until Sir Walter is in the App Store, the link opens a web page showing the trip's dates, schedule and the people on it. After that, the link only offers the app. Links expire, and you can revoke them.

Connected computers. You can connect a computer you own as an agent. Your phone never talks to that computer directly. It talks only to our service, and our service relays to the computer only the tasks you approve, and relays its replies back to you. The result the computer reports back is stored in your account like any other item until you delete it.

The assistant can make mistakes. It may miss something, sort a message in the wrong place, or read a code wrong. Check the original message for anything important.

Who can see your data

People at Sir Walter. No one at Sir Walter reads your mail, except:

• when you ask us to, for example for support, and give us permission for that request
• when it is needed for security, such as investigating abuse
• when the law requires it
• when the data has been made anonymous and combined for running the service

Service providers. We use these providers to run the service. They process data only to provide their service to us:

• Google Cloud, for hosting, storage, encryption keys, and running the language models (Vertex AI), in the United States
• Apple, for Sign in with Apple and push notifications

Google already holds your mail as your mail provider. We connect to it on your behalf.

People you choose. When you offer times to someone, that person receives an email from you and can see the times on the web page. When you share a trip link, anyone with the link can see the trip's dates, schedule and people until the link expires or you revoke it. A computer you connect receives the tasks you approve.

Legal reasons. We may disclose data if required by law, or to protect the rights, safety or property of our users or others. Where the law allows, we will tell you first.

Business transfers. If Sir Walter is merged or sold, your data would move only under this policy, and we would tell you before it does.

Google user data

Sir Walter's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

In line with that policy, we use Gmail data only to provide or improve user-facing features of Sir Walter, we transfer it only as needed to provide those features, for security, or to comply with the law, and we never use it for advertising or to train models.

How we protect it

• All connections between the app, our servers, Google and a computer you connect are encrypted (HTTPS or TLS).
• Data we store is encrypted at rest. Mailbox connection tokens are encrypted with keys held in Google Cloud Key Management Service (KMS).
• Tokens are used only by our servers to reach your mail. They are never stored on your device.
• Access by our staff to production systems is limited and logged.

No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.

How long we keep it

• Mail bodies: we do not store the text of your messages beyond what a feature shows you, such as a summary or a draft.
• Everything else (your account, mailbox connection tokens, the sorted state of your mail, to-dos, trips, coordination records and device push tokens): kept while your account exists.
• After you delete your account: removed from our systems.
• Server logs: kept only as long as needed to run and secure the service.

Your choices and controls

Undo a move. Every move Sir Walter makes in your mailbox can be undone in the app.

Disconnect your mailbox. In the You tab, disconnect Gmail. We stop reading your mail right away and delete the stored token. You can also remove Sir Walter's access at https://myaccount.google.com/permissions.

Delete your account. In the You tab, delete your account. This removes your account and its data, including your mailbox token, the sorted state of your mail, to-dos, trips, coordination records and push tokens, and revokes our Sign in with Apple token. Deletion from our live systems is immediate; copies in backups are gone within 30 days. Server logs are kept for up to 30 days.

Links you shared. You can revoke a trip link at any time. Coordination links expire on their own.

Connected computers. You can remove a connected computer at any time. It stops receiving tasks right away.

Notifications. You can turn notifications off, including verification codes, in the app or in your iPhone settings at any time.

Access and correction. You can ask for a copy of your data, or for us to correct it, by writing to info@sirwalter.ai.

Your rights by location. Depending on where you live, you may have rights to access, correct, delete or move your data, and to object to or limit some uses. We honor these requests for all users. If you are in the EU or UK, your data is processed in the United States to provide the service you asked for, and you can complain to your local data protection authority. California residents: we do not sell or share personal information as those terms are defined in California law.

Where data is stored

Your data is stored and processed on Google Cloud in the United States.

Children

Sir Walter is not for children under 13. We do not knowingly collect data from them. If you think a child has signed up, contact us and we will delete the account.

Changes to this policy

If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect. We will not use data already collected in a new way without your consent.

Contact

Hibiscus Consulting LLC, doing business as Sir Walter Cary, North Carolina info@sirwalter.ai