Privacy Policy

Last updated: 2026-10-12

This policy explains what Diala collects, why, who receives it, how long we keep it, and the choices you have.

Who we are

Diala is made by Salman Alzamil, an individual developer in Riyadh, Saudi Arabia. He is the controller of your personal data and the person responsible for data protection. For any privacy question or request, email support@diala.app.

What we collect

• Account: your email address, and your name if Apple or Google shares it when you sign in.
• Profile: your assistant's name, your app language and Diala's voice, and, if you choose to give them, your name, birth date, city and gender (male or female, used only for grammatical forms that differ for men and women, as in Arabic). You can tell Diala these in a chat or call so it can tailor things to you; none of them is required.
• Conversations: your messages, Diala's replies, and text transcripts of your calls. Each call is saved as its own conversation, separate from your chats.

• Saved preferences: lasting preferences, likes and dislikes you tell Diala, including things you say you don't want, such as "start our calls in Spanish", "I like spicy food" or "I don't want to connect anything". Diala saves them on its own when you say them, never one-off requests or guesses, and saves sensitive details (such as your health or religion) only when you clearly ask it to. It keeps up to 200, plus a short summary of them written by our AI provider, and shows each one in Settings › Privacy › What Diala remembers.
• Web tasks: what you ask Diala to do, each task's status and the sites it visits. Screenshots of a task are shown only when you ask to see them, and never stored.
• Connected apps: which of Calendar, Reminders, Contacts and Apple Health you turned on (kept on your iPhone), and for each app you connect (such as Gmail, Notion or Todoist) the account name or email if the app gives one, what you allowed, the dates, and the access the app gives Diala, encrypted. See "Connected apps" and "Apple Health" below.
• Plan: which plan you have and when it ends. Apple handles payment; we never see your card details.
• Starter check: when you get the free starter, a one-way hash of your network prefix (not your full IP address) and the starter's dates, used only to limit free starters per network per day. It stays linked to your account until you delete the account.
• Usage events: see "Usage analytics" below.
• Consent records: when you agreed to the Terms and to our AI providers by ticking the box at sign-in, when you turned Apple Health on or off, the notice version, your app version, and your "Help improve Diala" choice.
• Time zone: your device's time zone, sent when each chat or call starts so Diala knows your local time. We don't store it.
• Technical logs: basic records such as IP address, timing and errors, kept by our servers and providers to run and secure the service.

Your voice

During a call, your voice is streamed live so it can be turned into text and Diala's replies can be spoken. Diala does not record or store your audio anywhere. Only the text transcript is saved, as that call's own conversation. To make your voice clearer, background noise is filtered out of it on LiveKit's servers as it streams (enhanced noise cancellation), and nothing is recorded there either. Diala uses the microphone only while a call is open, and we don't use your voice to identify you.

Why we use it

• To sign you in and keep your account secure.
• To answer your messages, talk with you in calls, and do web tasks you ask for.
• To read from or add to the apps you connected, only when you ask.
• To read the Apple Health data you ask about, only to answer your health and fitness questions.
• To show your chat and call history and continue conversations.
• To look up an earlier chat or call when you ask Diala about it. Diala doesn't bring up past conversations by itself; the app searches your own history and passes on only the matching parts.
• To remember your preferences, likes and dislikes and use them in every chat or call until you delete them, so Diala gets more personal and doesn't suggest what you said no to. Their summary (or, until it is ready, your newest saved ones) is sent at the start of each chat or call, like recent chat history.
• To check your plan and keep a record of your consent.
• To fix problems, prevent abuse and keep the service running.

We rely on your consent and on providing the service you asked for. We do not use your conversations to train AI models, and we do not use your data for ads.

Usage analytics

We record simple product events, such as opening the app, signing in (and the method), finishing setup, sending a message (text or voice), starting and ending a call (with its length), starting and ending a web task (with its result), viewing plans, and changing your "Help improve Diala" choice. These events never contain what you write or say. They are linked to your account, stored in our own database, and used only to see which features work and to fix problems. We use no third-party analytics or advertising tools, and we don't use these events to track you across other apps or websites.

Help improve Diala (off unless you allow it)

After setup, Diala asks you once, in a popup, whether to "Help improve Diala". It stays off unless you choose Allow, and Diala works the same either way. If you allow it, we may read your conversations and web tasks to find Diala's mistakes and improve its replies and features. We don't share them for this purpose, and we don't use them to train AI models. You can change your choice at any time in Settings › Privacy. Turning it off takes one tap, and we stop using your conversations this way from then on.

Our AI providers

To understand you and reply, Diala sends your data to these service providers. Each gets only what it needs for its part:

• LiveKit (USA, servers in several countries): your voice and messages, Diala's replies, recent chat history, saved preferences and their summary, parts of past chats and calls when you ask about them, web-task screenshots, what Diala reads from or adds to your connected apps, the Apple Health data you ask about, and your profile details. It runs Diala's assistant, filters background noise out of your voice in calls, and hosts some of the AI models and voices below.
• Google Gemini (USA, servers in several countries): your messages, the text of what you say in calls, recent chat history, saved preferences and their summary, parts of past chats and calls when you ask about them, your profile details, what Diala reads from or adds to your connected apps, the Apple Health data you ask about, web searches, and pages and screenshots from web tasks. It is Diala's main AI model: it writes Diala's replies, translates call transcripts into the app's language, summarises your saved preferences, plans deep research, searches the web when Perplexity can't and steers web tasks.
• Anthropic Claude (USA): the same kinds of data as Google Gemini when it steps in, and, for deep research, your question, the pages found and your city, if you set one. It writes deep-research answers, and writes Diala's replies and steers web tasks when Gemini is unavailable.
• Perplexity (USA): the search words Diala sends, which can include details from your request, and your city, if you set one; we don't send your name or account with them. It is Diala's main web search.
• Soniox (USA): your voice during calls. It turns your speech into text, in whatever language you speak.
• Fish Audio (USA): the text of Diala's replies during calls in every language except Arabic, through LiveKit. It turns them into speech.
• ElevenLabs (USA): the text of Diala's Arabic replies, and your voice during calls when Soniox is unavailable. It speaks Diala's Arabic replies and is the backup speech-to-text.
• Inworld AI (USA): the text of Diala's replies when Fish Audio or ElevenLabs is unavailable. It is the backup voice.
• Cloudflare (USA, servers in many countries): your sign-in token, IP address and profile details when a chat or call starts, the sites Diala visits and what it types there during web tasks, and the access for accounts you connect. It runs our session server, the cloud browser (Browser Run) and our connection server.
• Supabase (Germany, Frankfurt): your account, profile, consent records, chats, transcripts, plan status, usage events and the encrypted access for accounts you connect. It stores your data and handles sign-in.
• Resend (USA): your email address and sign-in code. It sends the code.

Apple or Google receive your sign-in if you use them, and Apple handles your subscription payment. Each provider must protect your data at least as well as this policy does. We do not sell your data, show ads, or track you across other apps or websites. We may disclose data if the law requires it.

Web tasks

For web tasks, Diala uses a cloud browser that is signed out and labelled as Diala's agent. Websites see the visit from Cloudflare and anything Diala types to do the task, such as search words, dates or your city. They don't get your name, email or account details from us. Diala never enters passwords or card details. Screenshots from a task are shown in your chat only when you ask to see them, while the app is open, and are never stored by Diala. Google Gemini receives them to steer the task and may keep them in its logs for a limited time (up to 55 days under its current terms), only to detect abuse. When Gemini is unavailable, Anthropic Claude steers the task instead and receives them under its own terms.

Connected apps

Diala can use your calendar, reminders and contacts on your iPhone, Apple Health, and the apps you connect, only if you turn each one on or connect it in Settings › Connections, and only for what you ask. Adding, changing or sending anything needs your yes first.

• iPhone Calendar, Reminders and Contacts (including other accounts synced to your iPhone): the app reads or adds them on your iPhone, with the iOS permission you give and can withdraw in iPhone Settings. We don't copy them to our servers. Only what Diala needs for your request leaves your iPhone, and it reaches our AI providers like the rest of the conversation.
• Apple Health: read only, with a separate consent. See "Apple Health" below.
• Gmail, Notion, Todoist, TickTick, Calendly, Granola, Evernote, Readwise, ClickUp, Airtable, Linear, Canva and Zapier: you sign in on the app's own page (OAuth) and choose what Diala may access. We never see your password. The access the app gives Diala is encrypted on our server and used only when you ask Diala to do something with that app. What Diala reads from or adds to the app reaches our AI providers like the rest of the conversation. Each app's own terms and plan limits apply.
• Disconnecting: you can disconnect any app at any time in Settings › Connections. We then delete the stored access and, where the app offers it, ask the app to cancel it (Gmail, Notion, Todoist, TickTick, Evernote, Readwise, Linear, Canva and Zapier). Calendly, Granola, ClickUp and Airtable offer no way for us to do that, so also remove Diala in that app's own settings.
• Gmail: Diala can read your email and send an email you confirm. Diala's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use your Gmail data only to do what you ask, never for ads, never sell it, and never use it to train AI models.

Apple Health

If you turn on Apple Health in Settings › Connections, Diala can read these types of data, read only: steps, walking and running distance, active energy, exercise minutes, workouts, sleep, heart rate, resting heart rate, heart rate variability, weight and mindful minutes. Diala never writes to Apple Health.

• When: only when you ask, for the dates you ask about. Your iPhone works out daily, weekly or monthly totals and averages, or lists your workouts, and only those leave your iPhone, never your whole history.
• Who receives it: those figures go with your question to our AI providers (see "Our AI providers" above), only to answer you, and they handle them only on our behalf.
• Never: it is never used for ads, marketing or data mining, never sold, never shared with anyone else, and never stored in iCloud.
• What we keep: no copy. Diala's reply is part of the conversation, which you can delete. Diala doesn't save health details to its memory unless you ask it to remember something.
• Your consent: each time you turn Apple Health on, Diala asks for your separate consent before iOS asks which data it may read, and records it. Turning it off in Settings › Connections withdraws that consent. To remove iOS access too: iPhone Settings › Privacy & Security › Health › Diala.
• Not medical advice: Diala gives general wellness information. For symptoms or medical decisions, talk to a doctor.

How long we keep it

• Messages and call transcripts (each call is its own conversation): until you delete your account, or ask us to delete specific chats or calls.
• Saved preferences and their summary: until you delete them in Settings › Privacy › What Diala remembers, ask Diala to forget them, or delete your account. Deleting one also deletes the summary, which Diala then writes again without it.
• Connected-account access: until you disconnect that account or delete your account.
• Screenshots: not stored by Diala. They stay in the app's memory while it is open, then they're gone.
• Profile, plan status, usage events and consent records: while your account exists.
• Provider technical logs: a limited time under each provider's terms, then deleted.

Deleting your account in Settings › Delete account removes your account and everything above from our database straight away. The only exception is a one-way hash of your network prefix and the starter's dates, kept to stop abuse of the free starter; it is not linked to your account and is deleted within 2 days. Apple keeps its own purchase records under Apple's privacy policy.

Transfers outside Saudi Arabia

Our providers process your data outside Saudi Arabia, mainly in the United States and Germany, and some run servers in more than one country. Under the Saudi Personal Data Protection Law, we protect these transfers with the standard contractual clauses issued by the Saudi Data & AI Authority (SDAIA), signed with each provider, and a written transfer risk assessment. Authorities in those countries may be able to request access to data under their laws.

Your choices and rights

• See your data: your chats are in the app. Email us for a copy of all your data.
• Correct it: edit your profile in Settings › Profile.
• Delete it: delete your account in Settings › Delete account, or email us to delete specific chats or calls.
• Saved preferences: see and delete each one in Settings › Privacy › What Diala remembers, or ask Diala to forget one.
• Stop sending your data to our AI providers: Diala can't work without them, so there is no setting for this. Stop using Diala and delete your account in Settings › Delete account; we then delete your data as described above.
• Stop "Help improve Diala": turn it off in Settings › Privacy, in one tap.
• Manage your plan: in iPhone Settings › your name › Subscriptions.

We reply within 30 days. You can also complain to the Saudi Data & AI Authority (SDAIA).

Children and sensitive data

Diala doesn't ask your age. If you're under 18, use Diala with a parent's or guardian's permission. Diala is not made for young children. If you think a child is using Diala without that permission, email us and we will delete the account.

Health data is sensitive personal data. Diala reads Apple Health only with the separate consent described above, and saves health details to its memory only when you clearly ask.

Security

Data is encrypted in transit. Our database lets each account reach only its own data, and your sign-in is kept in your iPhone's secure storage. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

Changes

If we change this policy, we will update the date and tell you in the app. If we add a provider, or send one a new kind of data, we will update this policy and the providers page and tell you in the app before that happens. If you keep using Diala, the change applies. If you don't agree, you can delete your account.

Contact

Salman Alzamil, Riyadh, Saudi Arabia. Email: support@diala.app