Privacy Policy
ARVIS
ARVIS is an AI workspace that helps people organize work, communicate, and connect services such as Google Gmail and Google Calendar. This section explains what information ARVIS processes and why.
Information we collect
We process account information such as your email address, display name, profile image, authentication identifiers, settings, and content you create in ARVIS. We also collect limited technical and usage information needed to operate, secure, and improve the service.
Google user data
If you choose “Continue with Google,” ARVIS receives basic profile information needed to authenticate you, including your name, email address, profile image, and Google account identifier.
If you separately connect the Google integration, ARVIS requests permission to read Gmail messages, send email at your direction, and read or create Google Calendar events. ARVIS processes this data only to provide features that you request, such as showing relevant messages or events and carrying out an email or calendar action.
ARVIS’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
How we use and share information
We use information to provide and secure ARVIS, perform actions you request, maintain your account, troubleshoot problems, and communicate with you. We do not sell Google user data, use it for advertising, or use it to train generalized or non-personalized AI models.
When an ARVIS feature needs an AI model to complete your request, only the information relevant to that request may be sent to the model provider selected for that feature. Service providers may process data only to deliver their contracted services. We may also disclose information when required by law, to address a security threat, or with your explicit consent.
Storage and security
ARVIS stores authorization tokens so connected features continue to work until you disconnect them. We apply access controls, encryption in transit, and encryption for stored Google refresh tokens. No internet service can guarantee absolute security.
Retention, deletion, and revocation
We keep information only while needed to provide the service, meet legal obligations, resolve disputes, or protect the service. You can disconnect Google in ARVIS Settings, which removes the stored Google authorization token. You can also revoke ARVIS from your Google Account connections.
To request account or data deletion, email hi@arvis.space from the address associated with your account. We will verify and process valid requests within the period required by applicable law.
Your choices
You do not have to connect Gmail or Calendar to use basic ARVIS features. You may withdraw Google access at any time. Depending on where you live, you may also have rights to access, correct, export, restrict, object to, or delete personal information.
Flow Garden (Aura / Android XR)
Overview
Flow Garden is an Android XR app. This section explains what we collect when you use the headset app and related companion services on arvis.space (including /pair and the Flow Garden cloud bridge).
This section supplements the general ARVIS Privacy Policy above. Where this Flow Garden section and the general policy differ, this section applies to Flow Garden.
Information we process
Voice and audio
If you use Arvis / push-to-talk, microphone audio is captured to transcribe speech and generate spoken or text replies. Audio may be sent to our cloud bridge and to speech providers (currently ElevenLabs) for transcription and text-to-speech.
Chat, prompts, and AI replies
Transcripts and text you send may be processed to answer questions, spawn content, look things up, or generate images. Depending on the feature and configuration, that may involve:
- Google Gemini (chat / search-style answers and related features)
- ElevenLabs (voice, conversational agent features, and image generation flows where enabled)
- Cursor (coding / agent-style replies when enabled)
- Our own servers for routing, fallbacks, and session handling
Only content needed for the request is sent to those providers so they can perform that request.
Generated media
Images or other artifacts you request may be stored temporarily on our servers so they can appear in XR, then removed under our retention practices.
Google account (optional)
If you connect Google via pairing (for example arvis.space/pair), we receive basic profile information (such as email and name) and, with your consent, read-only access needed for Workspace boards (for example Gmail, Calendar, Drive/Docs/Slides, Tasks). Use of Google user data complies with the Google API Services User Data Policy, including Limited Use. We do not sell Google user data or use it for advertising.
On-device XR sensors
Hand tracking, scene understanding, and related XR sensors are used on the device so you can interact with the garden. We do not upload raw hand-tracking or depth streams to our servers for advertising or model training.
Technical data
We process limited technical logs (connection status, errors, timestamps) to operate and secure the service.
Legal bases (EEA/UK, where applicable)
We process personal data to perform the service you request (contract), for legitimate interests in operating and securing the product, and - where required - based on consent (for example microphone, optional Google connection). You may withdraw consent or revoke Google access at any time.
How we use information
- Provide voice chat, AI replies, image generation, pairing, and Workspace boards
- Keep the bridge and app reliable and secure
- Respond to support requests
- Meet legal obligations
We do not sell your personal data. We do not use microphone, chat, or Google user data for third-party ads. We do not use Google user data to train generalized AI models.
Sharing
We share data only with:
- Service providers listed above (and hosting providers for arvis.space), solely to run Flow Garden features
- Authorities when legally required
Retention
Voice, transcripts, generated assets, and pairing/session data are kept only as long as needed to provide the feature, secure the service, or meet legal requirements, then deleted or anonymized. Disconnecting Google removes stored Google authorization tokens for that connection.
Your choices and rights
- Deny microphone permission (voice features will not work)
- Skip or disconnect Google pairing
- Stop using the app at any time
- Request access, correction, or deletion: email hi@arvis.space from the address tied to your use of the service
You can also revoke ARVIS / Flow Garden under your Google Account permissions.
Children
Flow Garden is not directed at children under 13 (or the higher minimum age in your country).
Security
We use HTTPS and reasonable access controls. No method of transmission is perfectly secure.
International transfers
Data may be processed in the EU, United States, or other countries where we or our providers operate. Where required, we use appropriate safeguards.
Changes
We may update this policy. The effective date above will change when we do. Continued use after an update means you accept the revised policy.
Contact
Pinch Labs / ARVIS - Flow Garden privacy
hi@arvis.space
https://arvis.space