Ballast Privacy Policy

1. Overview

Ballast is designed to keep your personal information on your phone. Its AI processes only what each task needs, inside a sealed service that your phone verifies and that is designed not to store your data. Ballast is a personal assistant app for Android made by Reserve Labs ("we," "us"). It reads your email to suggest to-dos, reminders and security alerts, and it can take actions such as sending email when you approve them.

This policy explains what Ballast accesses, how it uses that information, and the choices you have. It applies to the Ballast app and this website.

2. What Ballast accesses

Ballast accesses only what it needs for the features you turn on.

Ballast does not access your contacts, photos, location or other apps. If a future feature needs one of those permissions, we will update this policy first.

3. How Ballast uses your information

Ballast uses your information only to provide features you can see and use in the app:

• Suggesting to-dos and sending you reminders you can reply to
• Flagging security risks in your email, such as phishing attempts, password resets you did not request, and accounts named in breach notices
• Summarizing emails and drafting replies in the chat
• Sending an email only after you review it and tap Send

Ballast never sends an email, deletes an email or changes your account without your explicit action. We do not use your information for advertising, and we do not sell it.

4. Where your information is stored and processed

Your phone holds your information. A sealed AI service does the thinking. Your phone carries out actions.

• Your phone is where your information lives. Your email cache, tasks, reminders, chat history and memories are stored only on your phone, encrypted with keys held in its secure hardware.
• The AI processes only what a task needs. For each task, such as finding to-dos in new email or drafting a reply, your phone sends the relevant content to a confidential AI provider, which runs the AI model inside hardware-protected confidential computing. We will name this provider here before launch.
• Your phone checks before it sends. The service proves cryptographically which software it is running, and your phone is designed to send nothing unless that proof matches the approved version. Requests are encrypted so that only the verified service can read them.
• The service is designed not to keep your data. It processes each request without storing its content.
• Actions happen on your phone. When you approve an action, such as sending an email, your phone carries it out. The AI never sees your passwords, payment details or login sessions.
• Access tokens. The credential that lets Ballast reach your Gmail stays in your device's secure key storage.

5. Sharing and transfers

We do not sell your information or use it for advertising. The only third party that receives your content is the AI provider described in section 4, solely to process the task you asked for, inside the verified confidential service. Ballast's own servers, if any, handle only account and billing functions and never receive your email or chat content.

If Ballast later uses an outside service, such as crash reporting or payment processing, we will name it here and confirm it never receives your Google user data. We may disclose information we hold, which does not include your email, if the law requires it.

6. Google API Services User Data Policy and Limited Use

Ballast's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Ballast uses Google user data only to provide or improve the user-facing features described in this policy.
• Ballast does not transfer Google user data to others, except as needed to provide those features, to comply with the law, or as part of a merger or acquisition with notice to you.
• Ballast does not use Google user data to serve advertisements.
• No person at Reserve Labs reads your Google user data, unless you ask us to for a specific message, it is necessary for security, or the law requires it.
• Ballast does not use Google user data to develop, improve or train generalized AI or machine learning models.

7. Keeping, deleting and disconnecting

You control your data. Because Ballast stores your information only on your phone:

• Delete in the app. Settings > Delete my data erases everything Ballast stored on your device.
• Uninstall. Removing Ballast deletes its stored data from your phone.
• Disconnect Gmail. You can revoke Ballast's access at any time in your Google Account permissions or in Ballast's settings. Ballast then stops reading or sending email immediately.

Ballast keeps on-device summaries and tasks only as long as you keep them, and you can delete any item at any time.

8. Security, children, changes and contact

Security. Ballast encrypts stored data on your device and connects to Google only over encrypted connections. No system is perfectly secure, so we encourage you to use a screen lock on your phone.

Children. Ballast is not intended for anyone under 13, and we do not knowingly collect information from children.

Changes. If we change how Ballast handles your information, we will update this page and its date, and we will notify you in the app before any change that affects your Google user data.

Contact. Questions or requests: privacy@useballast.net. Reserve Labs, Wyoming, USA.