Privacy Policy
Heyly is an AI phone assistant for small businesses. It answers, places and assists on phone calls on your behalf, and turns those calls into transcripts, summaries and follow-up actions. Doing that requires handling some genuinely sensitive material, the contents of your phone calls above all. This policy sets out exactly what we collect, why, who else touches it, and what you can demand we do with it.
This policy covers the Heyly mobile application (Android package ai.heyly.app) and the Heyly service behind it.
1. Who we are
Heyly is operated by Anaki. For any privacy question, request or complaint, contact us at support@heyly.ai. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.
2. What we collect
Information you give us
- Account details - your name, email address and profile picture when you sign in with Google, or your phone number when you sign in by SMS verification code.
- Business setup - your business name, the greeting your AI assistant uses, and how you want calls handled.
- Payment details - handled entirely by Stripe. We never see or store your full card number; we keep only a Stripe customer reference and your plan status.
Information from your phone
- Contacts - so a caller shows up as a name rather than a number, and so your assistant knows who it is speaking to.
- Call log - so your call history in the app matches the calls that actually happened on your phone.
- Microphone audio - during calls and meetings you choose to capture.
- Phone state and phone number - to know when a call starts and ends, and which of your lines is in use.
Information generated by using Heyly
- Call metadata - the numbers involved, direction, time, duration and outcome of each call.
- Call recordings - audio of calls handled or captured by Heyly, where recording is enabled.
- Transcripts, summaries and AI notes - text derived from those recordings, including facts your assistant remembers about people and jobs so it is useful on the next call.
Information from services you connect
Connecting Google is optional, and Heyly works without it. If you do connect it, we request these scopes and use them only as stated:
| Scope | What we do with it |
|---|---|
calendar, calendar.events | Read your availability and create or update events when a call results in an appointment. |
gmail.send | Send follow-up emails you or your assistant compose as a result of a call. |
gmail.readonly | Read email context relevant to a caller so your assistant can act on an existing thread. |
Heyly's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve advertising, we do not sell it, and we do not use it to train generalised AI models. You can disconnect Google at any time in the app, or revoke access from your Google account permissions page.
Information from our website
When you visit heyly.ai we record which pages you view, the link or ad that brought you there (UTM tags and Meta's click id), and whether you ask for an invite or download the app. We use the Meta pixel to do this. It sets cookies in your browser and sends those page and click events, together with your IP address and browser details, to Meta Platforms, so we can measure which ads bring visitors and show our ads to people likely to be interested. If you ask for an invite, the email and phone number you type come to us, not to Meta.
Nothing from the Heyly app, your calls, your contacts or your Google data is ever sent to Meta.
Advertising measurement. When you arrive at heyly.ai from an ad or a tagged link, we record the campaign tags in that link (such as utm_source, and the ad click identifiers fbclid or gclid), the page you landed on, your IP address and your browser type. If you create an account within 24 hours, we use this to record which campaign brought you, and we keep the IP address for this purpose for at most 7 days. If you install Heyly from Google Play, the app reads Google Play's install referrer once to learn the same campaign tags.
Meta Conversions API. When you leave your details, create an account, start your free month or make a payment, our server tells Meta Platforms that this happened, so we can measure and improve our ads. We send a one-way hashed (SHA-256) copy of your phone number and email address, a hashed internal account id, your hashed country, Meta's click identifier and browser cookie (fbc, fbp) when present, your IP address and browser type, and, for payments, the amount and currency. We never send call recordings, transcripts, contacts or anything said on a call. Meta's use of this data is governed by Meta's own policies.
If your browser sends a Global Privacy Control signal, or you turn the Meta pixel off below, we record no campaign visit for you and our server sends nothing about you to Meta.
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR/UK GDPR) |
|---|---|
| Answering, placing and assisting on your calls | Performance of a contract |
| Transcribing and summarising calls; assistant memory | Performance of a contract |
| Matching callers to your contacts | Performance of a contract |
| Billing, and preventing abuse or runaway usage | Contract, and our legitimate interests |
| Keeping the service secure and diagnosing faults | Legitimate interests |
| Measuring our website advertising (Meta pixel on heyly.ai) | Legitimate interests, or consent where local law requires it |
| Meeting legal, tax and telecoms obligations | Legal obligation |
We do not sell your personal information. Nothing from the Heyly app, your calls, your contacts or your Google data is shared for advertising. The one place we use advertising technology is our own website, through the Meta pixel described in section 2. We do not use your call content or Google data to train generalised AI models.
4. Who else touches your data
We use a small number of processors, each for one job:
| Provider | Role |
|---|---|
| Telnyx | Carries the calls and provides your phone numbers. Processes call audio and metadata in transit. |
| Cloudflare | Hosts the service and stores recordings, transcripts and account data. |
| AI processing providers | Speech-to-text and language models that produce transcripts, summaries and in-call assistance. |
| Sign-in, and Calendar/Gmail features if you connect them. | |
| Stripe | Subscription payments. |
| Meta Platforms | Website visit and click events from the Meta pixel on heyly.ai, for measuring and targeting our ads. Never app, call or contact data. Meta also uses this data under its own privacy policy. |
These providers act on our instructions under contract. We may also disclose data where legally compelled, or to protect our rights, users or the public. If Heyly is ever acquired or merged, data may transfer as part of that transaction, and we will tell you before it becomes subject to a different policy.
5. Where your data is held
Heyly runs on globally distributed infrastructure, so your data may be processed in the United States, the European Union, Israel and other countries where our providers operate. Where data leaves the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep it
| Data | Retention |
|---|---|
| Call recordings | Kept while your account is active, unless you delete them sooner. Deleted within 30 days of account closure. |
| Transcripts, summaries and assistant memory | Same as recordings. |
| Call metadata | Retained for billing and dispute resolution, then deleted or aggregated. |
| Contacts | Held while your account is active; removed when you disconnect contacts or close your account. |
| Account and billing records | Kept as long as required by tax and accounting law. |
7. Your rights and controls
In the app you can delete individual recordings and transcripts, disconnect Google, disable contact and call-log sync, turn recording off, and close your account.
Depending on where you live, you may also have the right to access a copy of your data, correct it, delete it, restrict or object to processing, port it elsewhere, and withdraw consent. California residents have the rights to know, delete, correct and opt out of sale or sharing under the CCPA/CPRA, and as stated above, we do not sell or share personal information in that sense. We will not discriminate against you for exercising any right.
To make a request, email support@heyly.ai. We respond within the period the applicable law requires, and we may need to verify your identity first.
8. People who call you
Heyly necessarily processes information about third parties, the people on the other end of your calls. Where we do this on your behalf, you are the controller of that data and we are your processor, and it is your responsibility to have a lawful basis for it, including any recording consent. If you have called or been called by a Heyly user and want to exercise rights over that data, contact us and we will route your request to the responsible business.
9. Children
Heyly is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.
10. Security
Data is encrypted in transit and at rest, access to production systems is restricted, and telephony webhooks are cryptographically verified. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant regulators as the law requires.
11. Changes
If we change this policy materially, we will update the date above and notify you in the app or by email before the change takes effect.
Heyly is operated by Anaki. Contact: support@heyly.ai.
Stay the one they call.
Heyly keeps what every customer said, what you quoted and what they still owe, and answers the calls you can't. On a Heyly number, or on the one you already have.
First month free, no card. Or call +1 208 504 3639 first and hear it answer - that's our own line, not a recording.
We'll email you to set up your line. Every line is set up by hand, by us, which is why we take businesses on one at a time.
You're on the list.
We'll email you to set up your line. In the meantime, call the number below - that's Heyly answering, not a recording.
Call Heyly: +1 208 504 3639