Back

Privacy Policy

Last updated: 23 June 2026

Baylo ("we", "us", "our") is operated by Mindspar Limited, a company registered in England and Wales (company number 17148103). We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we use it.

If you have any questions, contact us at hello@baylo.ai.

1. Who We Are

Baylo is an AI-powered reminder and notification service available at www.baylo.ai. We are based in England and Wales.

Registered office: 124 City Road, London, United Kingdom, EC1V 2NX.

2. What Data We Collect

Account information When you sign in, we collect your email address and name (from your Google account or as you provide it). We also record the time of your first sign-up and subsequent logins.

Settings and preferences We store the preferences and options you choose in the app (for example timezone, notification choices, and similar settings). We may add new settings over time; they are covered by this description.

WhatsApp (optional) If you choose to link WhatsApp to your account, we store your WhatsApp phone number and use it to send and receive Baylo messages on that channel. Messages you send us on WhatsApp (including text, voice notes we transcribe, and images we process for reminders) are handled like other reminder content described below.

Email (optional) If you use email with Baylo, we process emails you send to your personal Baylo inbound address and emails we send on your behalf (such as calendar invites when you share a reminder). These are handled like other reminder content described below. We do not send you email when a reminder is due; reminder alerts use push notifications and/or WhatsApp instead.

Calendar import (optional) If you choose to import a calendar, we process calendar events (and related details) from Google Calendar, Outlook, a pasted calendar link, or an uploaded .ics file so we can create reminders. If you connect Google or Outlook, we store the tokens needed to read your calendar until you disconnect or delete your account.

Reminders and notes We store reminders and notes you create, including the original text or voice input you provided, any clarifications or edits made during the conversation with Baylo, the full history of changes, and items you have deleted. Deleted reminders are retained in our database in a deactivated state and are not shown to you in the app. If you wish to have deleted reminders permanently removed, contact us at hello@baylo.ai.

Voice and images If you use voice in the app, your spoken words are converted to text. On most devices this conversion happens via your browser's built-in speech recognition (processed by your browser provider, e.g. Google Chrome). On Apple iOS devices in the app, and for voice notes you send on WhatsApp, audio is sent to one of our AI providers for transcription. If you send an image (in the app, on WhatsApp, or by email), we send it to our AI providers to extract reminder information. We do not keep raw audio recordings or image files after processing; we store the text and reminder data that result.

Usage data To run Baylo and keep it working well, we also keep records of how the service is used alongside your account. This includes a history of the actions taken on your reminders and notes (for example what was created, edited, completed, or deleted, by whom and when), records of the requests we send to our AI providers and the responses we get back so we can debug and improve how Baylo behaves, delivery status for WhatsApp, push, and email so we can see whether messages got through, error and diagnostic logs to help us fix bugs, and product analytics about which pages and features people use. Some of these records may include the reminder, note, or message content involved, since that is often what we need in order to investigate a problem. We use this data only to operate, support, and improve the service - we do not use it for advertising and we do not sell it.

3. Why We Collect This Data

We use your data to:

  • Provide the Baylo service - creating, scheduling, and delivering your reminders and notes (including by push notification and WhatsApp if you enable it, and by optional email for sign-in, inbound messages, and calendar invites)
  • Send and receive email for Baylo (sign-in links, calendar invites, and inbound messages to your Baylo address) - not for due-time reminder alerts
  • Run optional calendar import when you ask for it
  • Improve and fix the app based on error logs, analytics, and usage patterns
  • Occasionally send you product updates, tips, or marketing communications (see Section 7)

We do not use your reminders, notes, or messages to train our own AI models. We send content to third-party AI providers only to operate the Service; their use of API data is governed by their own policies (linked in Section 4).

Our lawful basis for processing

We process your data on the following legal grounds:

  • Contract - processing your account information, settings, reminders, notes, voice and image inputs, WhatsApp messages, email, and calendar data is necessary to provide the Baylo service you signed up for.
  • Legitimate interests - we process the usage data described above (activity and audit history, AI call logs, delivery logs, error and diagnostic logs, and analytics) to operate, maintain, troubleshoot, and improve the service. Our legitimate interest in keeping the service running, debugging problems, and making the product better is balanced against the privacy impact, and you can ask us to delete or restrict this data under Section 8.

4. Who We Share Your Data With

We use the following third-party services to operate Baylo. Each receives only the data necessary for their function:

Supabase - our database and authentication provider. All your account data, settings, reminder content, and notes are stored on Supabase servers located in the European Union. Supabase privacy policy: supabase.com/privacy

AI providers (OpenAI, xAI, Anthropic) - Baylo uses AI models from these providers across the Service. This includes understanding your messages, extracting and editing reminders and notes, routing requests between internal tools, looking things up (including reading web pages), maintaining memory and conversational context, generating replies, and generating images for certain features. The same content may be sent to any of these providers depending on which model handles a given step, and we may switch between providers and models over time as the Service evolves.

Content we may send to these providers includes reminder and note text, your conversation with Baylo and related context, voice audio (for transcription on Apple iOS in the app and for voice notes sent via WhatsApp), and images you include. We do not keep raw audio recordings or image files after processing.

Provider privacy policies: OpenAI - openai.com/privacy · xAI - x.ai/legal/privacy-policy · Anthropic - anthropic.com/privacy

Scrapfly - when a reminder needs to read a web page, we may send the URL to Scrapfly so it can fetch page content for the above AI models to evaluate. Scrapfly privacy policy: scrapfly.io/privacy-policy

Deepgram - we use Deepgram to transcribe voice notes (on mobile, and for voice notes sent via WhatsApp) so we can turn what you said into reminders and notes. Audio is sent to Deepgram for transcription; we do not keep the raw audio after processing. Deepgram privacy policy: deepgram.com/privacy

Fal.ai - for certain image generation features (for example meal recipe photos), we send a text description of the image to be created to Fal.ai. We may also use OpenAI image models as a fallback for the same purpose. We do not send your account details to these providers beyond what is contained in the description. Fal.ai privacy policy: fal.ai/legal/privacy-policy

Resend - we use Resend to send and receive email for Baylo. This includes authentication emails (sign-in links), calendar invites we send when you share a reminder by email, and emails you send to your personal Baylo inbound address. Resend processes your email address, message content, and related metadata (for example delivery status). Resend privacy policy: resend.com/legal/privacy-policy

Twilio - we use Twilio to send and receive WhatsApp messages when you link WhatsApp to Baylo. Twilio receives your WhatsApp phone number, message content, and related delivery metadata (for example delivery status). Twilio privacy policy: twilio.com/legal/privacy

WhatsApp (Meta) - WhatsApp messages are delivered through WhatsApp's infrastructure operated by Meta Platforms, Inc. Meta's terms and privacy notices for WhatsApp also apply to your use of that channel. WhatsApp privacy policy: whatsapp.com/legal/privacy-policy

Vercel - our app is hosted on Vercel's infrastructure. Vercel processes web requests and may log IP addresses and request metadata. We also use Vercel Analytics for privacy-friendly product analytics (see Section 9). Vercel privacy policy: vercel.com/legal/privacy-policy

Google - we use Google OAuth for account sign-in. When you sign in with Google, Google shares your name and email address with us. We use Google Firebase Cloud Messaging to deliver push notifications to your device. If you add a location to a reminder, we send your place search to Google Places so you can pick a result. If you use optional Google Calendar import, Google processes calendar access under the permissions you grant. Google's privacy policy: policies.google.com/privacy. Baylo's use and transfer of raw or derived user data received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Microsoft - if you use optional Outlook calendar import, Microsoft processes calendar access under the permissions you grant. Microsoft privacy policy: privacy.microsoft.com/privacystatement

We do not sell your data to any third party. We do not share your reminder, note, or message content with advertisers.

5. Data Storage and Security

Your data is stored on Supabase servers located in the European Union. We use row-level security to ensure your data is only accessible to your account. All data is transmitted over HTTPS.

We take reasonable technical measures to protect your data, but no system is completely secure. If you become aware of any security issue, please contact us at hello@baylo.ai.

5a. International Data Transfers

Your data is stored in the European Union (Supabase). Some of the third-party providers listed in Section 4 are based in the United States, including OpenAI, xAI, Anthropic, Fal.ai, Vercel, Twilio, Resend, Meta (Facebook Pixel and WhatsApp), and TikTok (ByteDance). Transfers of personal data to these providers are made under Standard Contractual Clauses approved by the UK Information Commissioner's Office, or where applicable under the UK Extension to the EU-US Data Privacy Framework (the UK-US Data Bridge). Each provider's data processing agreement sets out the applicable transfer mechanism.

6. How Long We Keep Your Data

We keep your account and reminder data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it by law.

Deleted reminders (soft-deleted within the app) remain in our database until you request permanent deletion or your account is deleted.

7. Marketing Communications

We may send you occasional communications about Baylo, such as important product updates or service announcements. If we start sending regular communications (for example a recurring newsletter, tips, or marketing emails), every such email will include an unsubscribe link so you can opt out at any time. You can also contact us at hello@baylo.ai to be removed.

7a. WhatsApp messages

If you have linked WhatsApp, you can stop receiving Baylo messages on that channel at any time by replying UNSUBSCRIBE on WhatsApp, or by unlinking WhatsApp in Settings at baylo.ai. Either action immediately removes your WhatsApp number from your account.

8. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

  • Access - request a copy of the data we hold about you
  • Correction - ask us to correct inaccurate data
  • Restriction - ask us to limit how we process your data in certain circumstances, for example while a dispute about accuracy is resolved
  • Deletion - ask us to delete your data
  • Portability - ask us to export your data in a portable format
  • Objection - object to certain types of processing
  • Withdrawal of consent - where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at hello@baylo.ai. We will respond within 30 days.

If you are in the UK or EU and believe we have handled your data unlawfully, you have the right to lodge a complaint with the relevant supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk).

9. Cookies and Analytics

Session cookies - we use strictly necessary cookies to keep you logged in. These are essential and do not require consent.

Analytics - we use Vercel Analytics (privacy-friendly, no advertising) and PostHog to understand how people discover and use Baylo. PostHog only runs on public pages after you accept the cookie banner. If you sign up, we link PostHog to your account so we can see which sources lead to sign-ups. PostHog data is stored in the EU. PostHog privacy policy: posthog.com/privacy

Advertising measurement - on our public marketing pages (landing, blog, and sign-in) we use the Meta (Facebook) Pixel and the TikTok Pixel to measure which ad campaigns lead to sign-ups. These only load after you accept the cookie banner. We may send a hashed version of your email to Meta and TikTok to match conversions. Both tools may set advertising cookies. If you are already signed in to Baylo when visiting a marketing page, these may load without showing the banner again. Neither pixel is loaded inside the Baylo mobile apps.

Meta privacy policy: facebook.com/privacy/policy - TikTok privacy policy: tiktok.com/legal/privacy-policy

10. Children

Baylo is not intended for use by anyone under the age of 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us at hello@baylo.ai.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. Please check back periodically so you are aware of the current version. For significant changes we will notify you by email or via the app.

12. Contact

For any privacy-related questions or requests: hello@baylo.ai