privacy policy

Friday (“Friday”, “we”, “us”, or “our”) is a voice-first AI assistant that runs as a desktop application on your computer. This Privacy Policy explains what information we collect, how it is used, and the choices you have. Friday is operated by Sagar Tamang (feynmanpi).

• Friday is designed to be privacy-first. The vast majority of your data — your API keys, your conversations, and your activity logs — stays on your own device and is never sent to us.
• The only information we store on our servers is the basic profile from your Google sign-in (your name, email, and profile picture), so we know who our users are.
• When you talk to Friday, ask it to look at your screen, search the web, or control your computer, that content is sent directly from your device to OpenAI using your own OpenAI API key. We do not receive, see, or store it.

a. Account information (stored on our servers)

When you sign in with Google, we receive and store:

• your name;
• your email address;
• your Google profile picture URL;
• your Google account identifier;
• the dates and times of your sign-ins.

We use Google Sign-In and receive this profile information from Google. We do not receive or store your Google password, and we do not retain Google access or refresh tokens.

b. Information that stays on your device (we never receive it)

The following is stored only locally on your computer, in the app’s data folder:

• API keys — your OpenAI API key (and any other provider keys) are encrypted at rest using your operating system’s secure storage (Keychain on macOS, DPAPI/Credential storage on Windows, libsecret on Linux) before being saved.
• Conversation history and logs — transcripts of what you say and what Friday says, the tools Friday uses, your web-search queries and results, and diagnostic logs are written to a local log file on your machine.
• Preferences — your onboarding choices and settings.

We have no access to any of this. It is not transmitted to our servers.

c. Information processed by AI providers (we never receive it)

To understand and respond to you, Friday sends certain data directly from your device to OpenAI, authenticated with your own OpenAI API key:

• Voice & audio — your microphone audio is streamed to OpenAI’s Realtime API so Friday can hear and respond.
• Screen captures — when you ask Friday to look at your screen (or when it uses computer control), screenshots of your screen are sent to OpenAI’s vision models.
• Web searches — the text of your search requests is sent to OpenAI’s web-search tool.
• Computer-control context — when you ask Friday to operate your computer, screenshots and the actions to take are exchanged with OpenAI’s computer-use model; the resulting mouse and keyboard actions are then performed locally on your machine.

This data flows directly between your device and OpenAI. We are not an intermediary for it — it does not pass through, and is not stored on, our servers. Because you use your own OpenAI API key, this processing is governed by OpenAI’s API terms and privacy policy. OpenAI states that data submitted through its API is not used to train its models by default.

Friday relies on the following third parties:

• OpenAI — powers voice conversation, screen understanding, web search, and computer control, using your own API key. See OpenAI’s Privacy Policy.
• Google — provides Sign-In (authentication). The app also requests website favicons from Google’s favicon service to display icons next to web-search results, which sends the relevant website domains to Google. See Google’s Privacy Policy.
• Cloudflare — hosts our website and stores the sign-in records described in section 1(a) (Cloudflare D1). See Cloudflare’s Privacy Policy.
• Vercel Analytics — our website (friday.feynmanpi.com) uses privacy-friendly, aggregate analytics that do not use cookies to identify you.

We use the limited account information we collect to:

• understand who our users are and how many people use Friday;
• communicate with you about the product, important updates, or support, where appropriate;
• maintain the security and integrity of the service.

We do not sell your personal information, and we do not use it for advertising.

To function, the desktop app asks your operating system for:

• Microphone access — to hear your voice commands.
• Screen recording / capture — to let Friday see your screen when you ask it to.
• Accessibility / automation control — to let Friday move the mouse and type on your behalf when you ask it to control your computer.

You can grant or revoke these permissions at any time in your operating system settings. Friday only uses them in response to your requests.

• Your API keys are encrypted on your device using OS-level secure storage.
• Communication with OpenAI, Google, and our servers uses encrypted HTTPS/TLS connections.
• The sign-in records on our servers are limited to the basic profile fields listed above.

No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

• Revoke Google access at any time at myaccount.google.com/permissions.
• Delete local data — your keys, logs, and history live on your device; you can clear them by resetting the app or uninstalling it.
• Delete your account record — to have the sign-in profile we store deleted, email us at build@sagartamang.com.

Depending on where you live, you may have additional rights under laws such as the GDPR or India’s DPDP Act, including the right to access, correct, or delete your personal data.

Friday is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.

Questions about this policy or your data? Email us at build@sagartamang.com.