Privacy Notice

Andi AI, Inc.

Last Updated: September 15, 2026

Privacy, in plain English

Your family's data is not our business model.

We do not sell your data.
We do not use your family's schedules, messages, photos, health details, or children's conversations for advertising.
We do not send your waitlist name, email address, form source, or family or child data to Meta Pixel. If you choose to allow website measurement, Andi sends Meta PageView and one property-free waitlist submission signal after the website confirms a signup, plus the basic browser and page information Meta receives with Pixel events.
We use cookie-free Vercel Web Analytics to count visits to the public website. It receives only an approved page path and standard request context; we do not send waitlist form values, family or child data, or custom events through it.
We do not use your family's personal information to train general-purpose AI models for other customers.
Your family's information is not public. Only people you authorize and the providers needed to run and protect Andi can access it, except when law or safety requires otherwise.
Parents approve and control child accounts, including who can access them.

The full notice below explains what we collect, why we need it, and when it may be disclosed.

Andi AI, Inc. ("Andi," "we," "our," or "us") provides a family coordination and AI companion service. This Privacy Notice explains how we collect, use, disclose, and protect personal information when you use our website at andi.ai, our mobile application, and related services (collectively, the "Services").

Andi is built around adult-owned family accounts. A child does not create an independent Andi account. A parent or legal guardian creates or invites the child, approves the child's access, and retains control over the child's account and information.

1. Scope and Updates

This Privacy Notice applies to personal information processed through the Services. It does not apply to a third-party service that you choose to connect to Andi, such as a calendar provider, before that information reaches Andi.

We may update this Privacy Notice as our Services or legal obligations change. If a change is material, we will provide notice through the Services, by email, or by another appropriate method before the change takes effect when required by law. The "Last Updated" date shows when this version was revised.

2. Who May Use Andi

Only an adult who is at least 18 years old may create and own an Andi family account.

A child may use Andi only through a parent-controlled child account. The parent or legal guardian:

creates the child's profile or sends the invitation that allows the child to join;
approves activation of the child's access;
controls the child's permissions, connected features, and family sharing;
can review and correct the child's profile and information;
can revoke the child's access and request deletion of the child's information; and
remains responsible for the child's use of Andi.

A child cannot independently register for Andi, accept our Terms of Service, invite a caregiver, connect an external service, or change the family's permissions. Caregivers and other adults may receive limited access only when invited by an authorized adult and only within the permissions that adult grants.

3. Personal Information We Collect

The information we collect depends on the features your family chooses to use.

3.1 Adult Account, Authentication, and Website Waitlist Information

We may collect:

name, email address, phone number, and profile photo;
age or date-of-birth confirmation;
sign-in provider identifiers from Apple, Google, or another supported provider;
one-time verification codes and authentication events; and
account role, family membership, invitation, and permission information.

If you join the Andi website waitlist, we collect your first name, email address, the website action you used to open the form, and limited technical information used to prevent repeated or automated submissions. We also save the full landing-page URL when you sign up, including campaign tags (UTM parameters), ad click identifiers such as fbclid, other query parameters, and any fragment after the # symbol. We store campaign tags as separate fields and keep the original URL so we can understand which campaigns lead to signups and recover campaign details later. This information is stored with your waitlist entry by our hosting and database providers. It is not added to our Vercel Analytics or Meta Pixel event parameters. Joining the waitlist does not create an Andi family account, and you should not submit information about a child or family member in the waitlist form.

Andi currently uses passwordless sign-in. We do not ask you to create an Andi password.

3.2 Family and Child Profile Information

An authorized adult may provide information about family members, including:

names, nicknames, pronouns, dates of birth, ages, and family relationships;
school, grade level, activities, routines, schedules, and preferences;
allergies, dietary restrictions, medical notes, accessibility needs, and emergency contacts;
household information, care instructions, and caregiver relationships; and
child-account permissions and parental approval records.

Some of this information may be sensitive. Please provide only what Andi needs to support your family.

3.3 Family Content and Communications

Depending on how you use Andi, we may process:

prompts, messages, AI responses, family chat messages, and feedback;
family memory, summaries, preferences, and inferences created from information your family provides;
tasks, goals, reminders, nudges, calendars, events, locations, attendees, and care instructions;
photos, images, documents, attachments, and email content sent to Andi;
voice input, audio sent during a voice session, transcripts, and text summaries;
customer-support messages, bug reports, and safety reports; and
records of actions taken in the Services.

Andi does not currently store raw realtime voice recordings on its own servers. Audio is transmitted to our speech and AI providers to conduct the voice session. We may store transcripts, conversation turns, summaries, tool actions, safety events, and usage records so the feature works and the parent can retain appropriate visibility.

3.4 Device, Usage, and Location Information

We may automatically collect:

device type, operating system, app version, language, and mobile network information;
device or app identifiers, push-notification tokens, IP address, browser type, and access time;
feature use, interaction events, session information, diagnostics, crash reports, and performance data;
general location inferred from an IP address; and
precise location, contacts, photos, camera, or microphone access only when you enable a feature that needs it and grant device permission.

You can change device permissions in your device settings. Some features may not work when a required permission is disabled.

Andi uses Vercel Web Analytics on the public website to count anonymous page views. We allow only the homepage, Privacy Notice, and Terms of Service paths, strip query strings and fragments, and block custom events. Vercel may process the event time, approved page path, referrer, coarse location derived from the request, and browser, operating system, and device type. The integration does not use cookies, Vercel resets its visitor hash daily, and Andi does not send waitlist form values, family or child data, or free text through it. This operational measurement is separate from optional Meta advertising measurement and is not controlled by the Meta privacy choice.

Meta Pixel is optional on andi.ai. It remains off unless you select Allow in the website privacy choices. If allowed, Meta may receive a PageView when you visit a page and one property-free custom event after the website confirms a waitlist signup. Meta also receives the page URL and referrer, browser and device information, your IP address, and Meta browser cookie identifiers with Pixel events. Andi does not include your waitlist name or email address, the form source or state, family or child data, free text, or custom event parameters in this website integration. Global Privacy Control disables Meta Pixel on the website.

3.5 Connected Services and Subscription Information

If an authorized adult connects Google Calendar or Microsoft Outlook, we may receive calendar events, attendees, descriptions, locations, availability, and connection tokens needed to keep the integration working. We process only the information needed for the features the adult enables.

If you purchase a subscription through an app marketplace, we receive purchase status, product, entitlement, renewal, and transaction identifiers from the marketplace and our subscription-management provider. We do not receive or store full payment-card numbers.

3.6 Information from Other People

We may receive information about you from another authorized family member, a caregiver, a connected service, a communications provider, or someone who sends content to Andi. The adult family owner is responsible for having the authority to provide information about family members and invite other people.

4. How We Use Personal Information

We use personal information to:

create and secure adult-owned family accounts and parent-controlled child accounts;
provide family memory, conversations, voice features, calendars, tasks, reminders, nudges, caregiver handoffs, and connected services;
personalize Andi to the family that provided the information;
give the parent or guardian visibility into and control over a child's account and information;
process invitations, verify contact information, manage subscriptions, and send service communications;
manage the website waitlist, tell adults when Andi is ready for them, and use the saved signup URL and campaign tags to understand how adults found the waitlist;
count anonymous visits to the approved public website pages, without custom events or submitted waitlist values;
use Meta Pixel to measure whether Meta ads lead adults to the Andi website and to confirmed waitlist signups, but only when the website visitor selects Allow;
provide support and respond to privacy requests;
detect, investigate, and prevent fraud, abuse, security incidents, harmful content, and violations of our Terms;
monitor reliability, diagnose errors, and understand how features are used;
improve and evaluate the Services using privacy-protective testing and analysis;
comply with law and protect the rights, safety, and integrity of families, Andi, and others; and
send product news or marketing to adults where permitted by law. We do not direct behavioral advertising to children.

5. AI and Voice Processing

AI is central to Andi. We use AI to respond to requests, create family-specific memory and summaries, identify relevant context, support voice conversations, suggest actions, and apply safety safeguards.

We do not use a family's personal information, including a child's conversations, to train general-purpose AI models for unrelated customers or for advertising. AI, speech, and observability providers process information on our behalf to operate, secure, and evaluate the Services. Their processing may include prompts, responses, transcripts, technical metadata, and safety signals.

AI can be inaccurate or incomplete. Parents should review important outputs and should not rely on Andi as a substitute for medical, legal, emergency, or other professional advice.

6. How We Disclose Personal Information

We do not sell personal information. We do not disclose website waitlist names or email addresses, family information, or child information for cross-context behavioral advertising. If you choose to allow optional Meta website measurement, Meta may process the PageView, property-free waitlist submission signal, and browser information described in Section 3.4 for advertising measurement and its own purposes under its terms. Some U.S. state laws may define this processing as sharing or targeted advertising. You can decline or withdraw this choice at any time.

We may disclose information in the following circumstances:

6.1 Within the Family and to Authorized Caregivers

Family information is available to authorized family members based on their role. A parent or family owner decides whether to invite a caregiver and what the caregiver may access through Care Share. The parent can change or revoke that access.

6.2 Service Providers

We use service providers to operate Andi. Depending on the feature, these may include:

AI, speech, and AI observability: OpenAI, Deepgram, and Braintrust;
cloud, databases, media, website hosting, and app infrastructure: Amazon Web Services, MongoDB Atlas, Convex, Redis-hosting providers, Imgix, Vercel, and Expo;
reliability and product analytics: Sentry, PostHog, and Vercel Web Analytics;
optional website advertising measurement: Meta, limited to consented website PageView, a property-free waitlist submission signal, and browser data;
identity, messaging, and email: Apple, Google, Microsoft, Twilio, and Resend;
subscriptions: Apple, Google, and RevenueCat; and
document processing: LlamaCloud, where enabled.

These providers receive the information needed to perform services for Andi. Except for the optional Meta processing described below, we configure and direct providers to use personal information for the Services, security, support, and legal compliance, not for their own advertising.

When you allow Meta website measurement, Meta receives the limited website data described above under the Meta Business Tools Terms and may handle it under the Meta Privacy Policy. Meta and its providers may process that information in the United States and other countries. The property-free signup signal reports only that the website confirmed a waitlist submission. Andi does not use advanced matching or send the submitted contact information, form source, or form state to Meta.

6.3 Connected Services

When an authorized adult connects or directs Andi to interact with a third-party service, we disclose information needed to complete that request. The third party's own terms and privacy notice apply to its processing.

6.4 Legal, Safety, and Business Events

We may disclose information when reasonably necessary to comply with law or legal process; protect a child or another person's safety; investigate fraud, abuse, or security incidents; enforce our agreements; or protect Andi's rights. Information may also transfer as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate protections and notice where required.

We may disclose information for another purpose when an authorized adult directs us to do so or provides consent.

7. Parent Control of Child Accounts

The parent or legal guardian who owns or approves a child's account retains control over it. Subject to identity verification and applicable law, the parent may:

review the categories and specific pieces of information collected from the child;
review the child's profile, saved memory, conversations, and connected information available through the Services;
correct information;
change permissions or revoke the child's access;
refuse or withdraw consent to further collection;
request deletion of the child's information; and
ask us not to disclose the child's information except where disclosure is necessary to operate the child-requested feature.

The child cannot override these controls.

Andi is a family service that may process personal information from children, including children under 13 in the United States. We apply the Children's Online Privacy Protection Act ("COPPA") where it applies.

Before activating access for a child or allowing the child to submit personal information, Andi requires the parent or legal guardian to create or approve the parent-controlled child account. Where COPPA or another law requires verifiable parental consent, we provide direct notice to the parent and use a method reasonably designed to verify that the person giving consent is the child's parent or legal guardian.

We do not condition a child's participation on providing more personal information than is reasonably necessary for the feature. We do not sell children's personal information or use it for targeted advertising.

If we learn that a child provided personal information without the required parent approval or consent, we will suspend the child's access, stop further collection, and delete the information as required by law. A parent or guardian can contact us at privacy@andi.ai to exercise the controls described above.

9. Privacy Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; restrict or object to certain processing; withdraw consent; or appeal a decision on a privacy request.

You can also:

update adult and child profile information through the Services;
manage notifications and device permissions;
disconnect Google Calendar or Microsoft Outlook;
change or revoke Care Share access;
select Allow or No thanks for Meta website PageView and property-free waitlist signup measurement and reopen the choice from the website footer;
withdraw a prior Meta website measurement choice, which stops future events from Andi, sends Meta's supported consent-revocation command when the Pixel has loaded, and expires first-party Meta browser cookies where the browser permits;
unsubscribe from adult marketing emails; and
request access, correction, deletion, or other privacy assistance at privacy@andi.ai.

We may verify your identity and authority before completing a request. For a child request, we also verify that the requester is the authorized parent or legal guardian. We will not discriminate against you for exercising a privacy right.

Withdrawing Meta website measurement does not delete information already sent to Meta. Global Privacy Control is treated as a direction to keep Meta website measurement off.

10. Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide the Services requested by the family, and to meet legal, safety, security, accounting, and compliance obligations.

In general:

adult account, family profile, child profile, conversation, memory, calendar, task, caregiver, and connected-service information is retained while the relevant account or family workspace is active;
website waitlist information is retained until the waitlist purpose is complete or you ask us to delete it, subject to limited legal and security exceptions;
anonymous website page-view data sent to Vercel is retained under the reporting window and applicable terms for Andi's Vercel plan; Vercel resets its visitor hash daily;
website PageView, property-free waitlist signup signals, and browser information already sent to Meta are retained under Meta's applicable terms and policies; withdrawing the website choice stops future events from Andi but does not delete information Meta already received;
child information is deleted when the authorized parent deletes the child's profile or completes a verified deletion request, subject to limited legal and security exceptions;
raw realtime voice audio is not stored by Andi on its own servers, while transcripts and related conversation records follow the retention settings for the associated family account;
diagnostic, security, support, and safety records are generally retained for up to 30 days, unless a specific issue or legal obligation requires a longer period;
subscription and transaction records may be retained as required for accounting, tax, dispute, and app-marketplace obligations; and
parental notice, consent, and approval records may be retained as needed to document compliance and protect the child, even after other child content is deleted.

When deletion is complete in active systems, limited copies may remain in encrypted backups for up to 30 days before they are automatically deleted. Backup copies are isolated from ordinary use and are restored only for disaster recovery, security, or legal requirements. If a backup is restored, we reapply completed deletion requests before returning the restored data to ordinary use.

Deleting an adult login or leaving a family does not necessarily delete a family workspace that another authorized adult continues to own. The family owner can use the family-deletion process or contact privacy@andi.ai to request deletion of the family workspace.

11. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit and at rest, role-based access controls, authentication safeguards, logging, and monitoring. We limit access to people and providers who need the information to operate and protect the Services.

No security measure is perfect. If we identify a security incident involving personal information, we will investigate and provide notice as required by law.

12. International Data Transfers

Andi is based in the United States, and our providers may process information in the United States and other countries. Those countries may have different privacy laws. Where required, we use appropriate safeguards for cross-border transfers.

Vercel may process anonymous website page-view data in the United States and other countries under its applicable service terms and data-processing commitments.

If you allow Meta website measurement, Meta and its providers may process the PageView, property-free waitlist signup signal, browser, IP address, and cookie information outside your state or country. Andi does not promise that Meta website data stays in one jurisdiction. This transfer remains conditional on legal approval for the production launch.

13. U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights under state privacy laws. These may include rights to know, access, correct, delete, or obtain a copy of personal information, and to opt out of certain sales, sharing, targeted advertising, or profiling.

Andi does not sell personal information. We do not disclose submitted website waitlist contact details, family information, or child information for cross-context behavioral advertising. Optional Meta website measurement, including the property-free waitlist signup signal, may qualify as sharing, targeted advertising, or similar processing under some state laws. You can select No thanks, withdraw an earlier Allow choice through Privacy choices in the website footer, or enable Global Privacy Control. To submit another request or appeal a decision, contact privacy@andi.ai. We will respond as required by applicable law.

14. Contact Us

For privacy questions or requests, including requests about a child account, contact: