HeyTim

Privacy Policy

Effective September 18, 2026

This policy explains what HeyTim collects, why we use it, and the choices available to you.

Information we collect

We collect the email address used for passwordless authentication, bot configurations, conversation messages, and basic service records needed to operate and secure HeyTim.

If you turn on a bot inbox, we collect email sent to that bot’s address, including the sender and recipient addresses, subject, message text, and attachment names. We briefly store the original email, including any attachments, while processing it. Messages in the bot inbox are available for you to review and delete; the bot does not act on them automatically.

If you choose phone-number sign-in, we collect the mobile number you provide and a record of your SMS consent. Providing a phone number and consenting to SMS are optional because email sign-in remains available.

If you allow reply notifications, we store a device push token. On supported Apple devices, dictation is requested as on-device speech recognition; HeyTim does not intentionally upload or retain the audio recording.

How we use information

We use this information to authenticate you, save bots and conversations, run requested agents, deliver notifications, prevent abuse, and maintain the service. Mobile numbers are used only to send user-requested one-time passcodes and related verification messages.

We do not sell personal information. Mobile numbers and SMS opt-in or consent data are not shared with third parties or affiliates for their own marketing or promotional purposes.

Service providers and sharing

HeyTim uses service providers, including Amazon Web Services and Expo, for authentication, agent processing, data storage, app updates, and notifications. They process information only as needed to provide those services.

A bot or conversation is shared only when you intentionally create a share link. Anyone with a valid link may be able to import the shared content, so treat share links as private.

SMS choices

HeyTim sends one transactional verification code only after you request one. Message frequency varies, and message and data rates may apply. Reply STOP to opt out or HELP for help. For US toll-free messages, text START or UNSTOP to the sending number to re-enable messages after opting out. See the HeyTim SMS program and Terms of Use for details.

Retention and choices

We retain account content and consent records while needed to provide HeyTim, comply with legal obligations, resolve disputes, or protect the service. Bot inbox previews remain until you delete them or your account; original received email is stored temporarily for processing. You can turn off or replace a bot’s email address from its inbox. You can stop notifications in device settings and sign out at any time.

You can permanently delete your account and associated content from Account settings. Operational backups expire according to their limited retention schedule.

Security, children, and changes

We use administrative and technical safeguards designed to protect information, but no online service can guarantee absolute security. HeyTim is not directed to children under 13.

We may update this policy as the service changes. The effective date identifies the current version.