Privacy Policy

This Privacy Policy describes how Field Labs Inc., a Delaware corporation doing business as Fieldy (“we”, “us”, “our”), collects, uses, and shares your personal information when you visit or make a purchase from fieldy.ai (the “Site”) or use our devices, applications, and services (collectively, the “Services”).

Fieldy is a personal AI assistant. Our wearable device and apps record audio you choose to capture, transcribe it, and turn it into searchable notes, summaries, and assistant features. You can also connect third-party accounts, like your email and calendar, so your assistant can work with that information for you. This policy explains what we collect, how we use it, who processes it on our behalf, how long we keep it, and how you can delete it.

If you use Fieldy through an organization (such as an employer or team), some parts of this policy work differently for you. See Fieldy through an organization.

Personal information we collect

Account information. When you create a Fieldy account, we collect information such as your name, email address, and phone number, along with authentication details.

Audio and transcripts. When you use recording features, your audio is transcribed into text. We use your audio only to produce these transcripts and to recognize speakers, and delete it as soon as it is no longer needed for that processing. You do not have access to the audio files themselves, and what remains available to you are the transcripts. Recordings may capture the voices of people around you, so you are responsible for using the recording features lawfully and, where the law requires it, for obtaining consent before recording (see our Terms of Service). To label who said what, we generate speaker-recognition profiles (numerical voice representations) from your audio; these are used only to identify speakers in your own transcripts. Because these profiles can identify a person by their voice, we treat them as biometric data (special category data under the GDPR). We generate them only with your explicit consent, which we ask for separately in the app before speaker recognition is enabled; this consent is our legal basis for the processing (Article 9(2)(a) GDPR where it applies). You can withdraw your consent at any time in the app, as easily as you gave it. Withdrawing consent stops further profile generation and deletes your existing speaker-recognition profiles. Unlike your audio, speaker-recognition profiles are retained until you withdraw consent or delete your account, whichever comes first (see Data retention).

Content you create and we generate for you. Notes, summaries, tasks, reminders, memories, and messages you exchange with your assistant, including assistant “memory” derived from your content to personalize your experience.

Connected Services data. If you connect third-party accounts (for example, email or calendar), we collect data from those accounts as described in Connected Services below.

Location information. With your consent, we collect location information to attach places to your memories in the app.

Device Information. When you visit the Site or use our Services, we automatically collect certain information about your device, including your web browser, IP address, time zone, and some of the cookies installed on your device, as well as how you interact with the Site and Services. We collect Device Information using cookies, log files, and pixels. Where required by law, we ask for your consent through a cookie banner before setting non-essential cookies, and you can change or withdraw your cookie preferences at any time. See Cookies and similar technologies for the full list of cookies we use.

Order Information. When you make (or attempt) a purchase, we collect your name, billing address, shipping address, payment information (including credit card numbers, processed by third-party payment providers: Stripe, Apple, Google, and Shopify), email address, and phone number.

Communications. Records of your communications with us, including support conversations.

When we talk about “Personal Information” in this Privacy Policy, we mean all of the information described above.

By using our website, you agree to allow third parties to process your IP address to determine your location for currency conversion, and to have that currency stored in a session cookie in your browser, so prices display in your local currency.

Connected Services

You can optionally connect third-party accounts (“Connected Services”) so Fieldy can use their data to power your assistant. Connecting a service is always your choice, each service is connected separately with your explicit authorization, and you can disconnect a service at any time in the app.

Connected Services fall into these categories:

• Email (e.g., Gmail): we read your messages to make them searchable and to let your assistant answer questions, summarize, and prepare drafts for you.
• Calendar (e.g., Google Calendar, Outlook Calendar): we read your events to give your assistant context about your schedule, and create, update, or delete events when you ask us to.
• Tasks and reminders (e.g., Apple Reminders): we read and create tasks so your assistant can track and export to-dos for you.
• Notes and documents (e.g., Notion, Google Sheets): we read and create content so your assistant can capture and retrieve your notes.
• Files and storage (e.g., Google Drive, Dropbox): we read or save files when you use features that need them.
• Messaging (e.g., Slack): we read or send messages where you have enabled a messaging feature.

For every Connected Service, the same rules apply:

• We access only the data needed for the features you use, with the permissions shown on the provider’s consent screen.
• We use Connected Services data only to provide user-facing features to you, never for advertising, and we never sell it or transfer it to data brokers.
• We do not use Connected Services data to train or improve generalized AI models, whether ours or our vendors’ (see How we use AI).
• Access credentials (such as OAuth tokens) are stored encrypted.
• Disconnecting a service stops all syncing; for some services (including Gmail and Google Calendar) we also delete the data we stored from it shortly after you disconnect. Deleting your account deletes all Connected Services data and revokes our access.

Google user data

When you connect Gmail or Google Calendar, we access Google user data through Google’s APIs with your consent. Before you grant access, we show you an in-product privacy disclosure describing this data use, alongside Google’s own consent screen listing the permissions requested.

What we access and store:

• Gmail: we read your messages. We store message metadata (sender and recipient addresses, subject, a short snippet, labels, and timestamps) in our database, and index message content into your private, per-user search index so search and assistant features work. We do not store full message bodies in our primary database. We do not modify or delete your email, and we never send email from your account without your explicit instruction.
• Google Calendar: we read your events and store event details (title, description, times, location, attendees, and conferencing links) to power calendar and assistant features. We create, update, or delete events only when you ask us to.

How we use it: solely to provide features to you: searching your email and calendar, generating summaries, answering your questions, giving your assistant context, and preparing drafts or creating, updating, or deleting events at your request. We do not use Google user data for advertising, and we do not sell it.

How we share it: Google user data is processed on our behalf and solely to provide these features to you, by the AI service providers described in How we use AI and by Composio, the integration provider that connects to Google and relays your Gmail and Calendar data to us. We do not otherwise transfer Google user data to third parties (except as required by law), and we never sell it or use it for advertising. If you use Fieldy through an organization, Google user data is never included in the data we deliver to that organization (including organization webhook deliveries).

Limited Use: Fieldy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

Personnel access: all Fieldy employees, agents, contractors, and successors are required to comply with the Google API Services User Data Policy. Fieldy personnel do not access Google user data except in the limited circumstances permitted under that policy: with your consent, for security purposes (such as investigating abuse), to comply with applicable law, or as part of internal operations where the data has been aggregated and anonymized.

AI/ML: we do not use Google user data (including data obtained through Google Workspace APIs) to develop, improve, or train non-personalized artificial intelligence or machine learning models. Google user data is used only to provide features to the specific user whose data it is, which may include personalization for that user. Our AI service providers process this data solely to provide the Services and do not use it to train their models.

Retention and deletion: we keep Google user data while your connection is active. If you disconnect Gmail or Google Calendar, we stop syncing and delete the Google user data we have stored for that service, including the indexed content, within about 7 days. If you delete your Fieldy account, all Google user data we have stored (including your search index) is deleted and our access to your Google account is revoked. You can also revoke Fieldy’s access at any time from your Google Account permissions page. Because Gmail metadata and Google Calendar event data are not retained beyond your active connection period, the Services do not provide separate export functionality for Google user data; that data remains available to you for export directly from Google’s own products at all times.

Microsoft user data

When you connect a Microsoft service (such as Outlook Calendar or, in the future, Outlook email), we access your Microsoft account data through Microsoft’s APIs with your consent, and handle it under the same rules as all Connected Services: features for you only, no advertising use, no sale, and no training of generalized AI models.

You can revoke Fieldy’s access to your Microsoft account at any time at account.live.com/consent/Manage (personal accounts) or myapps.microsoft.com (work or school accounts), in addition to disconnecting the service in the app. Disconnecting a Microsoft service stops further syncing, and when you delete your Fieldy account we delete the Microsoft account data we have stored.

How we use AI

Fieldy’s core features are powered by AI. When you use them:

• Speech-to-text: audio you record is transmitted to our transcription providers (ElevenLabs or Soniox) or processed by our own speech models to produce transcripts, and is deleted as soon as it is no longer needed.
• Assistant features: your content (transcripts, notes, and Connected Services data) is processed by large-language-model providers (Anthropic, OpenAI, and Google Vertex AI) to generate summaries, answers, and other assistant output, and by Cohere to generate the embeddings that power your private search index.

These providers act as our service providers: they process your data solely to provide the Services to us and are not permitted to use it to train or improve their models. We do not send your data to them except to provide the feature you are using.

We do not sell your personal information, and we do not use it to train generalized AI models. Any AI personalization built from your data (such as your assistant’s memory or your speaker profiles) serves only you and is deleted with your account.

How we use your personal information

We use Personal Information to:

• Provide, personalize, and improve the Services, including transcription, search, summaries, and assistant features.
• Fulfill orders placed through the Site (processing payment, arranging shipping, and providing invoices and order confirmations) and communicate with you about them.
• Screen orders for potential risk or fraud (in particular, using your IP address).
• Send you product information or marketing in line with the preferences you have shared with us.
• Ensure the security of the Services.
• Analyze usage patterns and develop new features.
• Comply with legal obligations.

Marketing emails and tracking technologies

We send promotional emails only if you have opted in. We collect this opt-in through an explicit checkbox, linked to this Privacy Policy, on the forms where you can join our marketing lists, such as our newsletter and checkout forms, and we do not add your email address to our marketing lists without it. These emails, and some transactional emails, may contain small tracking technologies, including web beacons, tracking pixels, and clear GIFs, that tell us whether and when you opened the email, your IP address, your approximate location, your device and email-client type, and whether you clicked links in the message. We use this engagement metadata only to understand how our communications perform and to improve them; we do not use it to access the contents of your inbox or any other messages. You can opt out of marketing emails at any time using the “unsubscribe” link in any such email or by contacting us at hey@fieldy.ai; opting out does not stop essential service messages such as order confirmations or security notices. We deliver these emails through our email providers (SendGrid and Klaviyo).

Sharing your personal information

We share Personal Information with service providers who process it on our behalf, under contracts that limit their use of it, in these categories:

• Hosting and infrastructure: cloud hosting, databases, object storage, search indexing, and sandboxed compute, located in the United States (providers include Railway, Google Cloud, Neon, Cloudflare R2, Turbopuffer, and Modal).
• AI processing: the transcription, language-model, and embedding providers listed in How we use AI.
• Payments and commerce: Stripe, Apple, Google, Shopify, and RevenueCat (subscription management). You can read Shopify’s privacy policy at shopify.com/legal/privacy.
• Communications: providers that deliver our transactional and marketing email (SendGrid, Klaviyo), text and iMessage conversations with your assistant (Sendblue, Linq), push notifications, and customer support (Intercom).
• Analytics and reliability: product analytics (PostHog, Mixpanel), website analytics (Google Analytics, Ahrefs, Microsoft Clarity), and error monitoring (Sentry) that help us understand usage and fix problems.
• Advertising measurement: with your cookie consent, services that measure the performance of our own advertising (Meta, Google Ads, Impact); see Cookies and similar technologies.
• Integrations: Composio, which connects your third-party accounts (such as Gmail, Google Calendar, and other Connected Services) and relays their data to us so your assistant can use it.
• Web search: when your assistant searches the web for you, your search query is sent to our search provider (Exa).
• Order fulfillment and shipping: when you buy hardware, we share the information needed to fulfill and ship your order with our fulfillment and logistics providers (Packiyo, Ecomflow), our shipment-tracking provider (17track), and our subscription provider (Stripe).

Each provider listed above acts as our “service provider” or “processor” (as those terms are defined under applicable privacy laws, including the CCPA and GDPR) and is contractually prohibited from using your personal information for its own purposes. We do not disclose your personal information to third parties for their own independent use, except for organization sharing under a separate agreement (see Fieldy through an organization) and as follows.

We may also share Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to protect our rights.

We do not sell your personal information, we do not share it with data brokers, and we do not use it for third-party advertising.

Fieldy through an organization

If you use Fieldy through an organization (such as an employer or team), a separate agreement between us and that organization governs how your data is collected, used, and shared with that organization. Under that agreement, your data, including your conversation transcripts and audio recordings, may be shared with your organization (for example, delivered to the organization’s systems when a conversation completes). Where this policy says that audio is deleted after processing and not accessible, this organization sharing is an exception. Google user data from your Connected Services is never included in the data we deliver to organizations (including through organization webhook deliveries). When you join an organization in Fieldy, we show you an in-product notice explaining this sharing. Your organization is responsible for informing you about how it uses the data it receives.

Data retention

• Audio: we keep your audio only while we process it into transcripts, and delete it as soon as it is no longer needed for that processing. You do not have access to the audio files; your transcripts remain available to you.
• Speaker-recognition profiles: numerical voice representations (biometric data) used to label speakers in your transcripts, generated only with your explicit consent, are retained until you withdraw that consent or delete your account, whichever comes first, and are then deleted.
• Transcripts, summaries, notes, and assistant memory: retained until you delete them or delete your account.
• Connected Services data: retained while the connection and your account are active; when you disconnect a service, syncing stops (and for Gmail and Google Calendar, the stored data is deleted within about 7 days). All Connected Services data is deleted when you delete your account.
• Account, order, and device information: retained for as long as needed to provide the Services and meet our legal obligations (for example, tax and accounting rules for order records), unless and until you ask us to delete it.

Your rights and deleting your data

Delete your account and data. You can delete your Fieldy account at any time in the app (Settings → Delete Account). This deletes the personal data we have stored about you (including your transcripts, summaries, assistant memory, speaker profiles, your private search index, and data from Connected Services) and revokes our access to your Connected Services. You can also request deletion by emailing hey@fieldy.ai.

Export. You can export your transcriptions using our app.

Access, correction, and objection. Depending on where you live (including if you are in the European Economic Area, the United Kingdom, or California), you have rights to access the personal information we hold about you, ask that it be corrected or deleted, object to or restrict certain processing, and receive a copy in a portable format. To exercise these rights, contact us at hey@fieldy.ai. We will not discriminate against you for exercising them. If you are in the EEA or UK, you may also lodge a complaint with your local supervisory authority.

Revoking Connected Services access. You can disconnect any Connected Service in the app at any time, and additionally revoke access from the provider’s side (see the Google and Microsoft sections above).

Cookies and similar technologies

We group the cookies we set into three categories.

Strictly necessary cookies are required for the Site to work: your cart and checkout, your currency selection, and remembering your cookie choice. These are always active and cannot be switched off.

Analytics cookies help us understand which pages people use so we can improve them. These are set by PostHog, Mixpanel, Google Analytics, Ahrefs, and Microsoft Clarity.

Marketing cookies let us measure our advertising and show relevant ads. These are set by Meta Pixel, Google Ads, Impact, Klaviyo, and the Intercom chat widget.

Where required by law, we ask for your consent through a cookie banner before setting any analytics or marketing cookie. Until you consent, we set none of them.

You can change or withdraw your consent at any time:

Your choice applies across fieldy.ai and shop.fieldy.ai.

Data security

We implement security measures to protect your data, including encryption in transit and at rest where appropriate, and we limit access to personal data to systems and personnel that need it to operate the Services.

International data transfers

Your information may be transferred to and processed in the United States and other countries. We use appropriate safeguards for international data transfers. Currently, our servers are hosted in the United States.

Children

Our Services are not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at hey@fieldy.ai and we will delete it.

Changes

We may update this privacy policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the updated policy on this page with a new “Last updated” date, and we will notify you of material changes by email. If we change the way we use Google user data, we will notify you and ask for your consent to the updated policy before the new use begins. Adding support for a new Connected Service provider within the categories described above does not by itself change our practices under this policy.

Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at hey@fieldy.ai.