Privacy Policy

Last updated: October 24, 2026

This Privacy Policy describes how extramii ("extramii", "we", "us" or "our") collects, uses, stores, shares and protects personal information when you visit extramii.com (the "Site"), join our waitlist, or use the extramii application (the "App"; together with the Site, the "Service"). This Privacy Policy forms part of our Terms of Service. By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

1.1 Information you provide to us

• Account information. When you sign in with Google, we receive your name and email address.
• Family information. Information you enter about your household, such as your children's names, their classes or grades, and which groups and senders relate to which child.
• Reference photos. If you choose to enable photo recognition, the photos you select of each child. These photos are converted into a numeric face signature and are not retained (see Section 5).
• Feedback and questions. Feedback you send us, and the questions you ask Ruby, the App's assistant, together with Ruby's answers.
• Waitlist information. Your email address (as entered and in a normalized form used to prevent duplicate sign-ups), the referral link through which you joined, the people who joined through your link, the dates on which you joined, opened your welcome email, were invited or unsubscribed, and any reward you earned.

1.2 Information from accounts you connect

• WhatsApp. The App connects to your WhatsApp account as a linked device and reads messages, photos, videos and attachments in the groups you select.
• Gmail. With your permission (read-only access), the App reads emails from the senders you select. To suggest senders when you first connect, the App reviews the sender, subject and preview line of emails from the previous two weeks, and retains only the senders you choose.
• Google Calendar. With your permission, the App lists the names of your calendars so you can choose one, and writes events and reminders to the calendar you choose.

1.3 Information collected automatically

• Usage information. Which screens are opened, which features are used, how often, and whether errors occurred. This information is associated with a pseudonymous identifier (on the waitlist, your referral code; in the App, a one-way hash of your email address) and never includes message content, names or group names.
• Technical information. To limit automated sign-ups, the Site counts waitlist submissions per IP address for a few minutes. This count is held in server memory only and is not stored.
• Local storage. The App stores your sign-in session and display preferences on your device.

2. How Message Content Is Handled

The Service is read-only. It cannot send, reply to, react to or post any message on your behalf, in any WhatsApp group or email account. Where the App offers a reply, it copies a suggested draft to your clipboard and opens WhatsApp; any message is sent by you.

We do not store the text of messages or emails. Message and email content, including attachments, is processed in memory for the time needed to understand it. What we retain is the result: tasks, events, dates, places, facts about your family's schedule and the name of the group or sender a result came from. The following are retained as described:

• photos in which one of your children is recognized, and group photos with many faces in which a child may be too small to recognize;
• for a video sent alongside such a photo, a single still frame and a reference to WhatsApp's copy of the video (never the video itself);
• reference files shared in your groups, such as a timetable or a contact list;
• the image of an invitation or flyer, and documents relating to a specific event, until one week after the event;
• the text of a message to which three or more members of a group reacted with laughter, for up to two weeks;
• for participants in the early-access testers' program only, the additional data described in Section 14.

3. How We Use Information

We use personal information to:

• provide the Service, including identifying tasks, events, reminders, documents and photos that are relevant to your family;
• add events and reminders to your calendar where you have connected it;
• build the family memory that you can view in the App;
• operate the waitlist and send waitlist emails;
• respond to your requests and feedback;
• maintain, secure, troubleshoot and improve the Service; and
• comply with legal obligations.

We do not sell personal information, we do not use it for advertising, and we do not use message or email content to train artificial intelligence models.

4. Google User Data

extramii's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Gmail data is used only to provide and improve the user-facing features of the App: identifying the tasks, dates and information in the emails you select and showing them to you.
• Gmail data is not used for advertising, is not sold, and is not used to develop, improve or train generalized artificial intelligence or machine learning models. Gmail data is processed only by AI providers configured not to retain or train on it.
• No person reads your Gmail data, except with your explicit consent for a specific purpose, where necessary for security purposes, or where required by law.
• Google Calendar access is used only to list your calendars and to write the App's events to the calendar you choose. We do not read your other calendar events.
• You may disconnect Google at any time in the App's Settings, which deletes the stored connection immediately, or through your Google account's security settings.

5. Biometric Information

If you enable photo recognition, we create a numeric face signature for each child from the reference photos you provide. A face signature is biometric information. It is used solely to recognize your own children in photos shared in your selected groups. Face detection and matching run on our own servers using open models; no photo and no face signature is sent to any AI provider or other third party. Reference photos are not retained after the signature is created. Face signatures are deleted when you use "Start over" for a child or delete your account.

6. Information About Other People

Messages in your groups are written by other parents, teachers and staff who do not have an account with us. We retain only the information you need, such as a task, a date, or a fact stated in a group (for example, a classmate's allergy ahead of a party), and not their messages. This information is available only to you. Any person whose information appears in a family's memory may contact us at team@extramii.com to request its removal.

7. Artificial Intelligence

To understand messages and emails, their text is sent to large language model providers. These providers process the text on our behalf and are configured not to retain it or use it for training. Photos of children are never sent to any AI provider.

8. How We Share Information

We share personal information only as described below:

• Service providers that process data on our behalf, each limited to what its function requires:
  • Railway (application hosting);
  • Supabase (database and private file storage for recognized photos and retained files);
  • Vercel (hosting of the Site and the App's files; no personal data is stored);
  • Resend (sending waitlist emails; holds your email address and subscription status);
  • PostHog (product analytics, as described in Section 1.3);
  • OpenRouter, Google (Gemini, paid no-training tier) and Anthropic (language model processing, as described in Section 7).
• Legal requirements. Where required by law, regulation, legal process or an enforceable governmental request, or to protect the rights, property or safety of extramii, our users or others.
• Business transfers. In connection with a merger, acquisition or sale of all or part of the Service, subject to this Privacy Policy.
• With your consent or at your direction.

9. Data Retention

• Completed and dismissed tasks are deleted one week after they are closed.
• Message bookkeeping records (identifiers of messages already processed, never their content) are deleted after 30 days.
• Informational updates that require no action are deleted after two weeks.
• Recognized photos are held on our servers for up to 60 days for your device to collect them, after which the original is deleted; the feed thumbnail is deleted 90 days later.
• Invitation images and event documents are deleted one week after the event.
• Retained reference files are kept until you remove them.
• The family memory is kept until you delete it or your account.
• Waitlist information is kept until you ask us to delete it.
• When you delete your account, your data is deleted as described in Section 10. Usage cost records may be kept without your name or email address.

10. Your Rights and Choices

• Access and export. You can view everything the App has learned in the Memory tab and export it at any time. You may also request a copy of your personal information.
• Correction. You may ask us to correct inaccurate information.
• Deletion. You can delete your account at any time in the App under Settings → Delete my account. This immediately deletes your tasks, children's details and face signatures, photos and files, family memory and conversations with Ruby, and disconnects WhatsApp and Google. You may also request deletion by email.
• Disconnecting sources. You can disconnect WhatsApp, Gmail or Google Calendar at any time. Turning off automatic calendar sync does not delete events already written; each can be removed from the App.
• Emails. Every waitlist email includes an unsubscribe link. Unsubscribing stops digest and reward emails; the email notifying you that your access is ready is part of the service and is still sent. To be removed from the waitlist entirely, contact us.
• Complaints. You may lodge a complaint with the data protection authority where you live.

To exercise these rights, write to team@extramii.com from the email address associated with your account. We respond within 30 days.

11. Data Security

We use technical and organizational measures to protect personal information, including encryption in transit, and encryption at rest of your WhatsApp link and Google connection using a key unique to your account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

The Service is intended for adults aged 18 and over. Children do not use the Service, and we do not knowingly collect personal information from children. Information about a child is provided by the child's parent or legal guardian, who controls it and may delete it at any time.

13. International Data Transfers

Our service providers may process personal information in countries other than the one in which you live, including the United States. Where we transfer personal information, we take steps to ensure it remains protected in accordance with this Privacy Policy.

14. Early-Access Testers

Participants in our early-access testers' program receive the full App free of charge and help us identify errors. For a tester's account only, and only after the tester's written consent, we also retain the original text of the messages and emails the App processed into results, together with the instructions sent to the AI model and its responses, so that errors can be traced and corrected. This data is encrypted at rest, is not shared, is not used to train any model, and is deleted 90 days after the tester leaves the program.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last revised. If we make material changes to what we collect or with whom we share it, we will notify you by email or through the App before the changes take effect.

16. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at team@extramii.com.