Privacy Policy
Last updated: 2026-08-05
Secretary is a personal-assistant app for Android, published by ShuttleLab. It stores the tasks, reminders, journal entries and chat messages you create, so that it can remind you at the right time and answer questions about what you've done. There are no ads, no analytics, and no tracking SDKs. This policy describes exactly what is collected and why.
What is collected
A username and password (stored only as a salted hash), a device name and your timezone, plus the content you create: tasks, reminders, journal entries and your chat with the assistant. If you link Telegram or Discord, the identifier of that chat is stored so reminders can be delivered there. If push is available, a Firebase push token for your device is stored. Nothing else on your phone is read — no contacts, no location, no files, no SMS.
Why your messages leave the device
The assistant that understands "remind me at 8 tomorrow" runs on the server, not on the phone, so the message you type is sent there and passed to a language-model provider to be interpreted. Your chat history is kept so the assistant has context, and so you can read it back; it is deleted after the retention period, or immediately when you clear it.
Permissions
Secretary asks only for what delivery requires: notifications (to show reminders), exact alarms (to fire at the moment you asked for, not several minutes later), battery-optimization exemption (so the system doesn't freeze the app and swallow the alarm), and boot-completed (to restore your alarms after a restart, without needing the network). It requests no location, contacts, storage or SMS permissions.
How it is stored
Your API key is encrypted on the device with AES-256-GCM under a key held in the Android Keystore. Android's cloud backup is switched off for this app on purpose, so that key is never copied to Google Drive and restored onto another phone. On the server, content is stored per account and reachable only with your credentials.
Retention & deletion
Completed tasks, chat history, journal entries and delivery logs are each kept for a bounded period and then removed automatically. You can delete your account from inside the app (Account → Delete account) or from the public deletion page; that erases every table associated with it — tasks, journal, messages, linked channels and device keys.
Children
Secretary is a general-purpose productivity app and is not directed at children.
Changes & contact
If this policy changes we will update this page and the date above. Questions: [email protected].