AhmoAhmo Privacy Policy
Last updated: 2026-11-06
Ahmo has no account, no sign-in, no in-app purchases, no ads and no tracking. The sound recorded on your watch and iPhone, and the voiceprints Ahmo learns from it, stay on your own devices, stored encrypted. They are never sent to us or to anyone else. Three things can use the network: the "write the points" and "ask Ahmo" features that you turn on yourself (sent to the one service you pick), diagnostic numbers that you can switch off, and folder sync that you turn on by hand. Each is described below.
Ahmo is operated by Gatheon.
1. Data flows
| Item | Details |
|---|---|
| Audio and voiceprints | Only on your Apple Watch and iPhone, stored encrypted. Sound from the watch goes to your own iPhone; turning it into text and sorting it into cards both happen on that iPhone. Audio and voiceprints never leave your devices. We run no server that holds them, and we cannot see or obtain them. |
| Accounts and purchases | No account, no sign-in, no in-app purchases, no ads, no tracking. |
| Write the points, ask Ahmo (optional, off by default) | Off by default. Under "写要点" (write the points) in Settings you choose one AI service from the list (the list holds providers in China; a custom address is also possible), paste your own key, and confirm. Only then is it turned on. The key is kept only in this iPhone's Keychain. Once on, what goes to that service is: the text of a conversation (speakers written as "speaker"); and when you ask Ahmo a question, a few passages related to the question, the names in them, state numbers such as speaking rate, and related things Ahmo remembers. Your own name is replaced with "me" before sending. The service you chose handles this data under its own privacy policy. We do not receive it and do not forward it. You can turn it off in Settings at any time, and it stops using the network right away. |
| Diagnostic numbers (can be switched off) | Numbers only: app version, a randomly generated install ID, date, event name and value, sent to our own statistics service at t.gatheon.com. No text, names, places, calendar or audio. Switch it off under "把诊断数字发给开发" (send diagnostic numbers to the developer) in Settings; once off, nothing more is sent. |
| Sync to my folder (optional, off by default) | You turn it on yourself under "同步到我的文件夹" (sync to my folder) in Settings and pick a folder with the system file picker (for example a folder in iCloud Drive). Content is written to the folder you chose and stays in your hands; where the folder lives and which provider stores it is covered by that provider's own privacy policy. We have no server and do not handle this content. |
| Calendar, Health, location, motion (optional) | All optional and used on the phone only, never uploaded. Calendar tells Ahmo who you are seeing today; Health is read-only for heart rate, sleep, steps and environmental sound level; location and motion mark where a sound happened and whether you were walking or sitting. Without a permission the matching feature is unavailable and the rest works as usual. |
| Notifications | Local notifications on this iPhone only. They do not pass through any server. |
| Website analytics | See section 6. |
| Contact email | ahmo@gatheon.com |
2. What we do not collect
We do not collect your audio, voiceprints, conversation text, names, places, calendar or health data. We do not collect accounts, phone numbers or email addresses (unless you write to us). We do not track you across apps, show ads or sell any data. Diagnostic numbers contain only the items listed above.
3. Permissions
Ahmo asks for these permissions as features need them, and you can withdraw each one in system Settings at any time: microphone (recording), calendar (reading events), Health (read-only heart rate, sleep, steps and environmental sound level), location, motion and fitness, and notifications. Even when granted, the data is used on the phone only and is not uploaded.
4. Third parties
- Apple: transfer between Apple Watch and iPhone, Keychain, iCloud Drive (only if you put the sync folder there), and App Store distribution.
- The AI service you choose: connected only after you turn on "write the points" in Settings. What it receives is listed above, and how it handles it is set by its own privacy policy.
- Cloudflare: hosts this website and the statistics service that receives diagnostic numbers.
5. Recording other people
Before you record someone else's voice, get their consent and follow the law where you are. While the watch is recording, an amber recording dot is shown on its screen so the people around you can see it.
6. Website analytics
This website uses Google Analytics (served through Gatheon's own domain, with IP anonymization on), PostHog and Cloudflare Web Analytics to measure visits, sources and clicks, without personal identity information and not for advertising. PostHog does not collect when your browser sends Do Not Track. These statistics cover the website only and have nothing to do with data in the app.
7. Your choices and deletion
If you do not turn on "write the points", no text is sent to any AI service; if you did, turn it off in Settings. Diagnostic numbers can be switched off in Settings. In the app you can delete today's recordings and text, or delete all recordings and text (this removes only what is on the iPhone; anything on the watch that has not finished transferring is deleted from "More" on the watch). Uninstalling Ahmo deletes its data on that device. Files synced to your own folder are yours to keep or delete.
8. Children
Ahmo is not directed at children under 13 and does not knowingly collect their personal information.
9. Changes to this policy
Material changes are shown by updating the date at the top of this page.
10. Contact
Write to ahmo@gatheon.com.