Privacy Policy
Last updated: 2 August 2026
Baylo ("we", "us", "our") is operated by Mindspar Limited, a company registered in England and Wales (company number 17148103). We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we use it.
If you have any questions, contact us at hello@baylo.ai.
1. Who We Are
Baylo is an AI-powered reminder and notification service available at www.baylo.ai. We are based in England and Wales.
Registered office: 124 City Road, London, United Kingdom, EC1V 2NX.
2. What Data We Collect
Account information When you sign in, we collect your email address and name (from your Google account or as you provide it). We also record the time of your first sign-up and subsequent logins.
Settings and preferences We store the preferences and options you choose in the app (for example timezone, notification choices, and similar settings). We may add new settings over time; they are covered by this description.
WhatsApp (optional) If you choose to link WhatsApp to your account, we store your WhatsApp phone number and use it to send and receive Baylo messages on that channel. Messages you send us on WhatsApp (including text, voice notes we transcribe, and images we process for reminders) are handled like other reminder content described below.
Telegram (optional) If you choose to link Telegram to your account, we store your Telegram user id, chat id, and username (if you have one). We receive the messages you send the Baylo bot (text, voice notes, images, and files), store that content, and send it to our AI providers to generate replies and process reminders - the same way we handle WhatsApp and in-app messages. We keep message history while your account is active. You can unlink Telegram in Settings or by sending /stop to the bot.
Email (optional) If you use email with Baylo, we process emails you send to your personal Baylo inbound address and emails we send on your behalf (such as calendar invites when you share a reminder). These are handled like other reminder content described below. We do not send you email when a reminder is due; reminder alerts use push notifications and/or a messaging channel you have linked instead.
Calendar sync (optional) If you enable calendar sync with Google Calendar or Outlook, we connect to one calendar, read events into Baylo, and write reminder changes back. Sync may take up to about 30 minutes until the next pass, and continues until you disconnect.
If you link Apple Calendar or another calendar via a public calendar link (iCal / webcal), we periodically read that feed into Baylo (sync may take up to about 30 minutes). This is one-way: we do not edit that external calendar. You can have one synced calendar at a time (Google/Outlook or an Apple / iCal link).
Calendar import (legacy) Older one-off calendar imports (including past Google/Outlook imports and uploaded .ics files) may still appear in your reminder history. New connections use calendar sync as described above. We do not offer uploading a .ics file any more.
Reminders and notes We store reminders and notes you create, including the original text or voice input you provided, any clarifications or edits made during the conversation with Baylo, the full history of changes, and items you have deleted. Deleted reminders are retained in our database in a deactivated state and are not shown to you in the app. If you wish to have deleted reminders permanently removed, contact us at hello@baylo.ai.
Voice and images If you use voice in the app, your spoken words are converted to text. On most devices this conversion happens via your browser's built-in speech recognition (processed by your browser provider, e.g. Google Chrome). On Apple iOS devices in the app, and for voice notes you send on WhatsApp or Telegram, audio is sent to one of our AI providers for transcription. If you send an image (in the app, on WhatsApp, on Telegram, or by email), we send it to our AI providers to extract reminder information. We do not keep raw audio recordings or image files after processing; we store the text and reminder data that result.
Usage data To run Baylo and keep it working well, we also keep records of how the service is used alongside your account. This includes a history of the actions taken on your reminders and notes (for example what was created, edited, completed, or deleted, by whom and when), records of the requests we send to our AI providers and the responses we get back so we can debug and improve how Baylo behaves, delivery status for WhatsApp, push, and email so we can see whether messages got through, error and diagnostic logs to help us fix bugs, and product analytics about which pages and features people use. Some of these records may include the reminder, note, or message content involved, since that is often what we need in order to investigate a problem. We use this data only to operate, support, and improve the service - we do not use it for advertising and we do not sell it.
3. Why We Collect This Data
We use your data to:
- Provide the Baylo service - creating, scheduling, and delivering your reminders and notes (including by push notification and linked messaging channels such as WhatsApp or Telegram if you enable them, and by optional email for sign-in, inbound messages, and calendar invites)
- Send and receive email for Baylo (sign-in links, calendar invites, and inbound messages to your Baylo address) - not for due-time reminder alerts
- Run optional calendar import when you ask for it
- Keep calendar sync up to date when you connect Google Calendar or Outlook
- Improve and fix the app based on error logs, analytics, and usage patterns
- Occasionally send you product updates, tips, or marketing communications (see Section 7)
We do not use your reminders, notes, or messages to train our own AI models. We send content to third-party AI providers only to operate the Service; their use of API data is governed by their own policies (linked in Section 4).
Our lawful basis for processing
We process your data on the following legal grounds:
- Contract - processing your account information, settings, reminders, notes, voice and image inputs, WhatsApp and Telegram messages, email, and calendar data is necessary to provide the Baylo service you signed up for.
- Legitimate interests - we process the usage data described above (activity and audit history, AI call logs, delivery logs, error and diagnostic logs, and analytics) to operate, maintain, troubleshoot, and improve the service. Our legitimate interest in keeping the service running, debugging problems, and making the product better is balanced against the privacy impact, and you can ask us to delete or restrict this data under Section 8.
4. Who We Share Your Data With
We use the following third-party services to operate Baylo. Each receives only the data necessary for their function:
Supabase - our database and authentication provider. All your account data, settings, reminder content, and notes are stored on Supabase servers located in the European Union. Supabase privacy policy: supabase.com/privacy
AI providers (OpenAI, xAI, Anthropic) - Baylo uses AI models from these providers across the Service. This includes understanding your messages, extracting and editing reminders and notes, routing requests between internal tools, looking things up (including reading web pages), maintaining memory and conversational context, generating replies, and generating images for certain features. The same content may be sent to any of these providers depending on which model handles a given step, and we may switch between providers and models over time as the Service evolves.
Content we may send to these providers includes reminder and note text, your conversation with Baylo and related context, voice audio (for transcription on Apple iOS in the app and for voice notes sent via WhatsApp or Telegram), and images you include. We do not keep raw audio recordings or image files after processing.
Provider privacy policies: OpenAI - openai.com/privacy · xAI - x.ai/legal/privacy-policy · Anthropic - anthropic.com/privacy
Scrapfly - when a reminder needs to read a web page, we may send the URL to Scrapfly so it can fetch page content for the above AI models to evaluate. Scrapfly privacy policy: scrapfly.io/privacy-policy
Deepgram - we use Deepgram to transcribe voice notes (on mobile, and for voice notes sent via WhatsApp or Telegram) so we can turn what you said into reminders and notes. Audio is sent to Deepgram for transcription; we do not keep the raw audio after processing. Deepgram privacy policy: deepgram.com/privacy
Fal.ai - for certain image generation features (for example meal recipe photos), we send a text description of the image to be created to Fal.ai. We may also use OpenAI image models as a fallback for the same purpose. We do not send your account details to these providers beyond what is contained in the description. Fal.ai privacy policy: fal.ai/legal/privacy-policy
Resend - we use Resend to send and receive email for Baylo. This includes authentication emails (sign-in links), calendar invites we send when you share a reminder by email, and emails you send to your personal Baylo inbound address. Resend processes your email address, message content, and related metadata (for example delivery status). Resend privacy policy: resend.com/legal/privacy-policy
Twilio - we use Twilio to send and receive WhatsApp messages when you link WhatsApp to Baylo. Twilio receives your WhatsApp phone number, message content, and related delivery metadata (for example delivery status). Twilio privacy policy: twilio.com/legal/privacy
WhatsApp (Meta) - WhatsApp messages are delivered through WhatsApp's infrastructure operated by Meta Platforms, Inc. Meta's terms and privacy notices for WhatsApp also apply to your use of that channel. WhatsApp privacy policy: whatsapp.com/legal/privacy-policy
Telegram - if you link Telegram, messages are delivered through Telegram's Bot API operated by Telegram Messenger Inc. Telegram receives your Telegram account identifiers and the message content you exchange with the Baylo bot. Telegram's terms and privacy notices also apply to your use of that channel. Telegram privacy policy: telegram.org/privacy
Vercel - our app is hosted on Vercel's infrastructure. Vercel processes web requests and may log IP addresses and request metadata. We also use Vercel Analytics for privacy-friendly product analytics (see Section 9). Vercel privacy policy: vercel.com/legal/privacy-policy
Google - we use Google OAuth for account sign-in. When you sign in with Google, Google shares your name and email address with us. We use Google Firebase Cloud Messaging to deliver push notifications to your device. If you add a location to a reminder, we send your place search to Google Places so you can pick a result. If you use optional Google Calendar import or calendar sync, Google processes calendar access under the permissions you grant (read-only for import; read and write for sync). Google's privacy policy: policies.google.com/privacy. Baylo's use and transfer of raw or derived user data received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Microsoft - if you use optional Outlook calendar import or calendar sync, Microsoft processes calendar access under the permissions you grant (read-only for import; read and write for sync). Microsoft privacy policy: privacy.microsoft.com/privacystatement
We do not sell your data to any third party. We do not share your reminder, note, or message content with advertisers.
5. Data Storage and Security
Your data is stored on Supabase servers located in the European Union. We use row-level security to ensure your data is only accessible to your account. All data is transmitted over HTTPS.
We take reasonable technical measures to protect your data, but no system is completely secure. If you become aware of any security issue, please contact us at hello@baylo.ai.
5a. International Data Transfers
Your data is stored in the European Union (Supabase). Some of the third-party providers listed in Section 4 are based in the United States or elsewhere outside the UK/EU, including OpenAI, xAI, Anthropic, Fal.ai, Vercel, Twilio, Resend, Meta (Facebook Pixel and WhatsApp), Telegram, and TikTok (ByteDance). Transfers of personal data to these providers are made under Standard Contractual Clauses approved by the UK Information Commissioner's Office, or where applicable under the UK Extension to the EU-US Data Privacy Framework (the UK-US Data Bridge). Each provider's data processing agreement sets out the applicable transfer mechanism.
6. How Long We Keep Your Data
We keep your account and reminder data for as long as your account is active. If you request account deletion, we will delete your personal data within 7 calendar days, except where we are required to retain it by law.
Deleted reminders (soft-deleted within the app) remain in our database until you request permanent deletion or your account is deleted.
7. Marketing Communications
We may send you occasional communications about Baylo, such as important product updates or service announcements. If we start sending regular communications (for example a recurring newsletter, tips, or marketing emails), every such email will include an unsubscribe link so you can opt out at any time. You can also contact us at hello@baylo.ai to be removed.
7a. WhatsApp messages
If you have linked WhatsApp, you can stop receiving Baylo messages on that channel at any time by replying UNSUBSCRIBE on WhatsApp, or by unlinking WhatsApp in Settings at baylo.ai. Either action immediately removes your WhatsApp number from your account.
We may also unlink WhatsApp automatically if your account has been inactive for 12 months. Inactive means you have not sent Baylo any WhatsApp messages and have not signed in to the Baylo app (on the web or on a phone or tablet) during that time. You can link WhatsApp again at any time in Settings.
7b. Telegram messages
If you have linked Telegram, you can stop receiving Baylo messages on that channel at any time by sending /stop to the Baylo bot, or by unlinking Telegram in Settings at baylo.ai. Either action removes the Telegram link from your account. Blocking the bot also stops Baylo from messaging you on Telegram.
8. Your Rights
Depending on where you are located, you may have the following rights regarding your personal data:
- Access - request a copy of the data we hold about you
- Correction - ask us to correct inaccurate data
- Restriction - ask us to limit how we process your data in certain circumstances, for example while a dispute about accuracy is resolved
- Deletion - ask us to delete your data
- Portability - ask us to export your data in a portable format
- Objection - object to certain types of processing
- Withdrawal of consent - where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at hello@baylo.ai. We will respond within 30 days.
If you are in the UK or EU and believe we have handled your data unlawfully, you have the right to lodge a complaint with the relevant supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk).
9. Cookies and Analytics
Session cookies - we use strictly necessary cookies to keep you logged in. These are essential and do not require consent.
Analytics - we use Vercel Analytics (privacy-friendly, no advertising) and PostHog to understand how people discover and use Baylo. PostHog only runs on public pages after you accept the cookie banner. If you sign up, we link PostHog to your account so we can see which sources lead to sign-ups. PostHog data is stored in the EU. PostHog privacy policy: posthog.com/privacy
Advertising measurement - on our public marketing pages (landing, blog, and sign-in) we use the Meta (Facebook) Pixel and the TikTok Pixel to measure which ad campaigns lead to sign-ups. These only load after you accept the cookie banner. We may send a hashed version of your email to Meta and TikTok to match conversions. Both tools may set advertising cookies. If you are already signed in to Baylo when visiting a marketing page, these may load without showing the banner again. Neither pixel is loaded inside the Baylo mobile apps.
Meta privacy policy: facebook.com/privacy/policy - TikTok privacy policy: tiktok.com/legal/privacy-policy
10. Children
Baylo is not intended for use by anyone under the age of 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us at hello@baylo.ai.
11. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. Please check back periodically so you are aware of the current version. For significant changes we will notify you by email or via the app.
12. Contact
For any privacy-related questions or requests: hello@baylo.ai