Privacy Policy

Last updated: June 1, 2026

ButterflAI ("we," "us," or "our") operates the ButterflAI personal relationship assistant service delivered via SMS. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

SMS Messaging Program

By texting START to our number or signing up via an invite link, you expressly consent to receive recurring automated SMS messages from ButterflAI. Consent is not a condition of any purchase. Carriers are not liable for delayed or undelivered messages.

Information We Collect

We collect information you provide directly and information generated through your use of the service:

• Account information: Your name and mobile phone number, collected during onboarding.
• Contact information: Names, phone numbers, and relationship context (e.g., cadence preferences, shared history) that you add for the people you want to stay in touch with.
• Message content: SMS messages you exchange with ButterflAI to manage your contacts, set preferences, and coordinate plans.
• Calendar data: If you connect Google Calendar via OAuth, we read and write event data solely to check your availability and schedule get-togethers on your behalf.
• Usage data: Interaction logs, feature usage, and service health metrics.

Information About Your Contacts

When you add a contact to ButterflAI, we store the information you provide about them (name, phone number, relationship notes). We collect this data on your behalf to power the service.

Your contacts can view, edit, or erase their own data at any time by visiting the link provided in any message we send them, without needing to go through you. When a contact corrects a fact about themselves, their version takes precedence and you are notified of the change.

Contacting someone on your behalf requires that person's consent. The first message we send to any new contact on your behalf clearly identifies ButterflAI as an AI agent acting for you, names you as the requesting user, and offers an immediate permanent opt-out via STOP before any further messages are sent.

How We Use Your Information

• Deliver the ButterflAI service: nudges, coordination, venue suggestions, and onboarding.
• Maintain your contact list and relationship preferences.
• Check calendar availability and create events when instructed.
• Send account and verification messages.
• Improve the service and diagnose technical issues.

We do not sell your personal information or your contacts' personal information to third parties. We do not use your data for advertising.

Data Storage and Security

Personal data — including relationship preferences and contact notes — is stored server-side, encrypted at rest using AES-256-GCM with per-record key wrapping under a KMS master key. Every read of private data is logged in an access audit log.

Honest disclosure: ButterflAI holds the encryption keys and can technically read your private data. This is a deliberate design choice that allows your agent to act autonomously on your behalf (e.g., send a coordinating message while your phone is offline) without requiring you to authorize each action. We do not claim otherwise. Access is restricted to automated agent paths and, in exceptional cases, authorized break-glass admin access. Every such access is audited. You can request a copy of your access log at any time by emailing privacy@butterflai.social.

Data Retention

• Active account data is retained while your account is active.
• Passively accumulated signals (e.g., inferred contact frequency) are subject to decay and periodic refresh prompts.
• Upon account deletion, your data is hard-deleted. A deletion receipt is sent to you. Backup propagation may take up to 30 days to complete fully.
• Contact data is deleted upon a contact's erase request, subject to the same 30-day backup window.

Sharing With Third Parties

We share data only as necessary to operate the service:

• Twilio: Our SMS delivery provider. Messages are transmitted through Twilio's infrastructure.
• Anthropic: Our AI provider. Message content is processed to generate agent responses.
• Google: If you connect Google Calendar, we access your calendar via Google's OAuth APIs.
• Fly.io: Our cloud hosting provider, which stores and runs the service.

All third-party providers are bound by data processing agreements. We do not share your data with any other parties.

Your Rights

• Access: Request a copy of the data we hold about you.
• Correction: Correct inaccurate data.
• Deletion: Request deletion of your account and all associated data.
• Opt-out of SMS: Reply STOP at any time to stop all SMS messages.
• Contacts: Your contacts can exercise these rights independently via the link in any message they receive from us.

To exercise any of these rights, email us at privacy@butterflai.social or reply HELP to any ButterflAI message.

Children's Privacy

ButterflAI is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users of material changes via SMS. Continued use of the service after notification constitutes acceptance of the updated policy.

Contact Us

Questions about this Privacy Policy? Contact us at:
Email: privacy@butterflai.social
Website: butterflai.social