Privacy Policy

Version of 29 October 2026.

Kodah Labs makes Galos and is responsible for your data (the "data controller"). Contact: [email protected].

The short version

• Galos keeps what you give it so it can help you.
• Your messages are processed by AI service providers so Galos can answer you.
• When Galos searches the web for you, the search words go to a web search provider.
• Galos asks before it sends, pays or publishes anything for you, unless you've told it to go ahead.
• You can see, correct, download or delete your data.

What Galos keeps

• Your chats with Galos, including photos, voice notes and files you send.
• What Galos remembers about you: notes from your chats, what you've told it about yourself, and your preferences. You can see and change it in the app.
• Household records you add, such as documents, staff and pay, bills, spending, and money lent or borrowed.
• Payments from your bank's alert emails, if you connect your email and agree. Galos suggests payments it finds in those alerts and adds nothing until you tap Add. It keeps only basic details of the payments it suggests, not the emails themselves. You can turn this off at any time.
• Settings and history: your preferences, reminders and automations, and a record of what Galos did and what you approved.
• Feedback: your ratings of replies and any comments you choose to send.
• Payments, if you pay for Galos: the email you paid with, the amount, the date and the payment's reference, so your credits reach your Galos. Your card or bank details go to our payment provider, never to Galos.
• Sign-in details: how you sign in, your devices, and that you confirmed you're 18 or older.
• Access details for services you connect, such as your email. They're kept encrypted, used only to reach that service for you, and not shown to the AI. Disconnecting a service removes them.

Galos doesn't ask for bank account numbers, national ID numbers or passwords in your chats, notes or records, and isn't meant to keep them there.

Why

To give you the service you asked for: answering you, remembering what matters, reminding you on time, and doing tasks with your OK. We don't sell your data. Galos doesn't make decisions about you that have legal or similarly serious effects on its own. Before we use your data for any other purpose, we update this policy and tell you first, and ask for your agreement where the law requires it (see "Changes").

Where it's kept

On servers run by or for Kodah Labs. Your data is kept separate from other people's. Only you can reach it, and authorised Kodah Labs staff when they need to keep the service running or act on your request.

Keeping it safe

We use reasonable technical and organisational measures to protect your data, including encryption of backups and of the access details for services you connect. No system is completely secure, so if you think someone has got into your account, tell us at once at [email protected].

Records we keep to run Galos

To run Galos, keep it safe and fix problems, we also keep:

• Usage statistics, such as how often features are used and what the service costs to run. These are counts, not the content of your chats, files or records.
• Security records about activity Galos blocked or that looked unsafe. They describe what kind of thing happened, not your messages.
• Feedback comments you send, and your requests about your account, such as a request to delete it.

These records are linked to your account, and only authorised Kodah Labs staff can see them. We keep them for up to 12 months, then delete them. A record that an account was deleted may be kept longer where the law requires it.

Who else processes it

When Galos does something for you, it sends what's needed to the services involved and can bring back what it finds there. Services you connect handle what they receive under their own privacy policies.

• AI service providers, which turn your messages into answers. They process your messages to answer them.
• Web search providers, when Galos searches the web for you. They get the search words, not your chats or records, and Galos is designed to keep personal details out of them.
• Hosting and security providers, which run our servers, store backups, protect connections to Galos and help with sign-in.
• Messaging apps you connect, for messages you send and receive there.
• Your email provider, if you connect your email, for the mail Galos reads and the emails it sends with your OK.
• Your calendar app, if you turn on the calendar feed. Your calendar reads a private link to show your dates, such as reminders, renewals, bills and pay days. Anyone who has the link can see these dates, so keep it to yourself. You can replace the link or turn it off at any time.
• Payment providers, when you pay for Galos, under their own terms.
• Authorities, where the law requires us to share data.

Ask [email protected] for the current list of providers, where each one is, and the terms that apply.

International transfers

Your data may be processed outside the country where you live, including where our service providers are. When it is, we use safeguards the law recognises, such as data processing agreements and standard contractual clauses, and we keep a record of these transfers.

How long

We keep your data only as long as we need it for the reasons in this policy, or longer where the law requires it. In practice:

• Your data is kept as long as you use Galos.
• When you delete a chat, it goes to the Bin for 30 days, then it's gone.
• Access details for a service you connect are kept until you disconnect it.
• Records we keep to run Galos are kept as that section says.
• Payment records are kept as long as the law requires for accounts and tax.
• When you ask for your account to be deleted, we send you a copy of your data first, then delete your data, including backups, within 30 days.

The waitlist

If you join the waitlist on galos.ai, we keep your email address, any answers you choose to give (such as what you'd use Galos for and where you live), how you found us (such as a friend's link), your device's time zone and the date. We use them to invite you and to plan our launch. Only authorised Kodah Labs staff can see them. Ask [email protected] and we'll remove you from the list.

Data about other people

You may record details about your staff, family and contacts, and your bank alerts may name the people you pay. Please tell them what you keep and why. Galos is designed to keep only what's needed, and anyone can ask [email protected] to have their data removed.

Your rights

You can:

• see what Galos keeps (in the app, or by asking us);
• correct anything that's wrong;
• download your data, from Settings → Your data;
• delete your account and data, from Settings → Your data;
• limit or object to how your data is used, or withdraw your consent, by writing to [email protected].

Using these rights won't count against you. We answer within 30 days. If you're not satisfied, you can complain to the data protection authority where you live.

Children

Galos is for adults. We don't knowingly keep data about anyone under 18 as a user. If we learn that we have, we delete it. If you think a child is using Galos, write to [email protected].

Changes

If this policy changes, Galos shows you what changed the next time you open it, and asks you to agree again if the change matters.

Contact

Kodah Labs · [email protected]