Privacy Policy

This Privacy Policy explains how Optiarms, Inc. (“we,” “us” or “our”) collects, uses and shares personal information through getdaryl.com (the “Site”), including the DARYL assistant for people with a beta account.

1. Information we collect

Information you give us

When you use the contact form, we collect:

your name and email address;
your message;
optionally, your project timeline and who referred you; and
if the page link you followed carried a referral tag (a ?ref= code), that tag.

If you email us directly, we receive your email address, your message and anything else you choose to include. Please don't send payment card, bank account or government ID numbers; the contact form rejects messages that appear to contain them.

When you join the Daryl waitlist, we collect your email address, your IP address (for IPv6, only the network prefix) to limit abuse, and the time you signed up. If the link you followed carried a referral tag, we keep that too.

If you have a DARYL account

DARYL is in private beta, and accounts are created by invitation. For an account we keep your email address, your two-factor settings and the devices you have signed in on. When you use DARYL, we store what you ask it and what you choose to keep there: messages, tasks, events, notes, the memories it saves (which you can read, correct and delete), and any finance or health entries you add or connect. If you use push-to-talk, the recording is sent for transcription and not kept after the text comes back. DARYL only sees your screen or hears you when you press the key.

Information collected automatically

Network and device data. Like most websites, our hosting provider receives your IP address, browser type, the pages you request and the time of each request, and records some of this in server logs. When you submit the contact form, we keep your IP address (for IPv6, only the network prefix) with the submission to prevent abuse.
Spam signals. The contact form records how long it was open before you sent it and includes a hidden field that only automated bots fill in. We use these only to filter out spam.

Cookies

The public pages of the Site don't set cookies, and we don't use analytics, advertising or social-media tracking cookies or pixels. The only cookies the Site sets are strictly necessary sign-in and security cookies for people who sign in to DARYL. The home page stores nothing in your browser. The Site never asks for your microphone or camera. Because we don't track visitors across sites, there is nothing for a browser's “Do Not Track” or Global Privacy Control signal to switch off, though we honor both.

2. How we use information

to read and reply to your message and to follow up about a possible project you raised;
if you joined the waitlist, to confirm your signup and to email you when a seat opens;
if you have an account, to run DARYL for you: answering, acting on your requests, keeping your memory and sending the reminders you ask for;
to keep records of our business inquiries and correspondence;
to operate, maintain, secure and troubleshoot the Site, including rate limiting and spam and abuse prevention; and
to comply with the law and to establish, exercise or defend legal claims.

We won't add you to a mailing list or send you marketing because you contacted us. Waitlist emails are limited to the signup confirmation and the notice that a seat is open. If you are in the European Economic Area or the United Kingdom, our legal bases are: taking steps at your request before entering into a contract, our legitimate interests in replying to inquiries and keeping the Site secure, and compliance with legal obligations.

3. How we share information

We don't sell personal information or share it for cross-context behavioral advertising. We share it only:

With service providers who run the Site for us under contracts that limit how they may use the data, such as our hosting provider (Vercel), our database provider (Neon), our rate-limiting and caching provider (Upstash), our email provider (SendGrid) and push notification services;
To run DARYL, for account holders only: the content of a request goes to the AI model provider that answers it, voice recordings to our speech-to-text provider, web searches you ask for to our search provider, Android notifications through Firebase Cloud Messaging, and billing details to our payment processor (Stripe). They process it to provide their service to us, not to advertise to you, and we don't send it to anyone to train public models;
With image hosts. Some images on the Site may load from Unsplash, which receives your IP address and browser details when your browser fetches them;
For legal reasons, when we believe in good faith that disclosure is required by law or legal process, or is needed to protect the rights, property or safety of us, our users or others; and
In a business transfer, such as a merger, acquisition or sale of assets, in which case the information stays subject to this policy.

3A. Daryl accounts and households

If you have a Daryl account, Daryl keeps what you tell it, what you connect to it and what it learns about how you like things done, so it can help you. That can include money, health, calendar and home data. Sensitive fields are encrypted field by field with a key for your household; deleting your household destroys that key, which makes the encrypted data unreadable. Each person's data is private by default and reaches other members of a household only through what that person chooses to share. You can export everything Daryl holds about you, and forget any memory or a whole domain, from your settings.

Daryl uses these subprocessors, each under a contract that limits their use of the data to providing the service:

Our AI model provider: the models that write Daryl's answers. Requests are not used to train their models.
Neon: the database. Vercel: hosting. Upstash: rate limiting and caching.
Our speech-to-text provider: turning voice notes into text, when you use voice.
Our web search provider: web search, when Daryl searches the web for you (the search words only, never your records).
Google Firebase Cloud Messaging: notifications to Android phones and watches. SendGrid: account email.
Stripe: billing, for paid plans.
A backup AI model provider: only if you switch on the backup provider in Settings, and only when Daryl's main models are unavailable. It never receives money, health or children's data, nothing it says is saved to memory, and it uses a zero-data-retention endpoint.

Daryl accounts are for adults in the United States. An adult who runs a household may add profiles for their own teen or younger children, and consents for them; we use a child's data only to provide Daryl to that household, never for advertising, and the adult can review or delete it at any time.

4. How long we keep it

We keep contact form submissions and email correspondence for as long as we need them to respond to you and to keep reasonable business records, and delete them when they are no longer needed or when you ask us to, unless the law requires us to keep them. Server logs are kept for about 90 days. Rate-limiting records expire automatically, typically within minutes to days. Deleted data may remain in encrypted backups for a short period until those backups expire. We keep a waitlist signup until a seat opens and you are invited, or until you ask to be removed; reply to any waitlist email and we will delete it. DARYL account data stays until you delete it in the app or close your account; voice recordings are not kept after transcription.

5. How we protect it

The Site is served only over HTTPS. Contact form submissions, waitlist addresses and the personal content you keep in DARYL are encrypted at rest, field by field, in addition to the encryption provided by our database host. Every sign-in needs a single-use emailed link and a two-factor code, each device gets its own revocable token, and every change DARYL makes is logged. No method of transmission or storage is perfectly secure, but we work to protect your information and will notify you of a breach where the law requires it.

6. Your choices and rights

You can ask us to tell you what personal information we hold about you, to correct it, to delete it or to give you a copy of it. You can also object to or ask us to restrict our use of it. Depending on where you live, including in California, other U.S. states with comprehensive privacy laws, the European Economic Area and the United Kingdom, these may be legal rights. We honor such requests from anyone, wherever they live.

To make a request, email hello@getdaryl.com. We may need to confirm your identity, usually by replying to the email address you used to contact us. You may use an authorized agent where the law allows. We won't discriminate against you for exercising these rights. If you are in the EEA or the UK, you may also complain to your local data protection authority.

7. Where we process it

We are based in the United States, and our service providers store and process data in the United States. If you contact us from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

8. Children

The Site is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.

9. Other websites

The Site links to websites we don't control, such as X and the sites DARYL links to in its answers. Their privacy practices are governed by their own policies.

10. Changes to this policy

We may update this policy from time to time. When we do, we will post the new version here and change the effective date above. If a change materially affects how we use information you have already given us, we will take reasonable steps to let you know.

11. Contact us

Questions or requests about your privacy can go to hello@getdaryl.com or by mail to:

Optiarms, Inc.
6545 Market Ave N, Ste 100
Canton, OH 44721
hello@getdaryl.com