Privacy policy

Larbin is a personal assistant operated by Yann Jaffrennou (“I”, “me”) for personal use, available as a Telegram bot. This policy explains what data Larbin handles, why, where it is stored and how to get it deleted. Contact: hello@larbin.ai.

Who uses Larbin

Larbin is not a public service. It works for its owner and for a small number of people the owner explicitly adds as contacts. Anyone else who writes to the bot only receives a short automatic reply with their Telegram ID; their message is not processed further or stored beyond technical logs.

Data Larbin handles

• Messages sent to the bot on Telegram (text, images and voice messages), and Larbin's replies. Voice messages are transcribed to text; only the text is kept, never the audio.
• Notes and records the owner asks Larbin to keep: reminders, personal notes, activity and sleep data, time tracking and places stayed, and specialists' data (the specialists the owner chose, their goals, plans and progress).
• Web browsing done on the owner's request: the pages Larbin visits and what it does there are recorded in an audit log. The browser keeps no cookies or history between sessions. When the owner takes over the browser through a private link, what they type is passed straight to the page and is neither logged nor shown to the AI model.
• Google Calendar data, only for Google accounts the owner connects: the list of calendars, event details (title, time, location, attendees, description) and free/busy information.
• Technical data: Telegram user IDs used to recognise the owner and contacts, and server logs (timestamps, errors).

How Google user data is used

Larbin requests access to Google Calendar so its owner can ask questions about their schedule, find free time, and create events. Specifically:

• Calendar data is read only when needed to answer a request from the owner (for example “what's on this week?”), or to compute free slots.
• Events are created only on the owner's request, and only in accounts the owner has connected with write access. Some accounts are connected read-only, in which case Larbin cannot change them.
• Contacts of the owner can only learn free/busy windows, never event details.
• To produce a reply, the relevant calendar information is sent to the AI model provider (Anthropic, see below) together with the owner's message.

Larbin's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is:

• used only to provide the assistant features described above to the owner;
• never sold, never used for advertising, and never used to determine creditworthiness or for lending;
• never used to develop, improve or train generalized artificial intelligence or machine learning models;
• not read by any human, except with the owner's explicit consent, when needed for security purposes or to comply with the law, or when aggregated and anonymised for internal operations.

Service providers

• Telegram carries the messages between users and the bot, under Telegram's privacy policy.
• Anthropic provides the AI model (Claude) through its API. Messages, and the data needed to answer them (including calendar information when relevant), are sent to Anthropic to generate replies. Anthropic does not train its models on data sent through its commercial API by default. See Anthropic's privacy policy.
• Google Cloud hosts the server and its storage, in the European Union (Belgium).
• Google provides the Calendar API for connected accounts.
• Mistral AI (France) transcribes voice messages: the audio is sent to its API, which returns the text. See Mistral's terms and privacy policy.
• Websites visited by Larbin's browser on the owner's request receive what any browser sends (the server's IP address, the pages requested, and what the owner asked Larbin to type, such as a search).
• PostHog (PostHog Inc.) measures visits to Larbin's three websites, www.larbin.ai, factory.larbin.ai and apps.larbin.ai, with data hosted in the European Union, only for visitors who accept analytics. It never receives anything from the assistant. See “Website” below.

No other third party receives the data, and no data is sold (the websites' analytics and the waitlist have their own sections below). Calendar data is never sent to Mistral AI.

Storage and retention

Conversation history, notes and records are stored on a private server in the European Union. Calendar events are not copied into a separate database; details can still appear in the conversation history or in notes when they were part of a request. Data is kept for as long as the assistant is in use, and deleted when no longer needed or on request.

Security

The server is only reachable through encrypted connections, access is restricted to the operator using SSH keys, and Google access tokens are stored as server secrets, outside the code repository.

Your rights and how to revoke access

• You can revoke Larbin's access to a Google account at any time from your Google Account permissions.
• You can ask for a copy of your data, its correction or its deletion by writing to hello@larbin.ai. Requests are handled within 30 days.
• If you are in the European Union, you also have the right to lodge a complaint with your data protection authority (in France, the CNIL).

Website

Larbin has three websites: this one (www.larbin.ai), the Larbin Factory (factory.larbin.ai) and the Larbin apps gallery (apps.larbin.ai). All three measure their visits with PostHog (PostHog Inc.), with data hosted in the European Union, and only if you accept analytics in the cookie banner. The legal basis is your consent. One choice covers all three sites: accepting or refusing on one applies on the others. Your browser never contacts PostHog directly: it sends everything to poucave.larbin.ai, a relay I run on Vercel, which passes the requests on to PostHog's servers in the European Union as they are, and stores nothing.

• Your choice: it is kept in a cookie (larbin_consent) on larbin.ai, which all three sites read. It is set only when you click “Accept” or “Refuse”, holds nothing but your answer, and lasts 6 months; after that, the banner asks again.
• Before you choose, or if you refuse: PostHog is not started. Nothing is sent to it or to the relay, and it stores nothing in your browser; anything it left there earlier is deleted.
• If you accept: PostHog receives the pages you view and when you leave them, your clicks (the text of the link or button, never what you type in a field), your browser, system and device type, the site you came from, the campaign parameters of the link you followed (utm_source and the like), and your IP address, which may reach it through the relay and from which it derives an approximate location. A referral code in the page address is masked in the page views and events sent. PostHog keeps a random identifier in a cookie (ph_…_posthog, 1 year) shared by the three sites, so going from one to another counts as one visit, and in each site's local storage. No name, email address or phone number is sent.
• Joining the waitlist: on the Larbin Factory, if you have accepted, a successful signup also sends PostHog one event, waitlist_joined, with the language of the page and the usual page details above. Never your phone number or the referral code. If you refused, nothing is sent.
• Copying an app: on the Larbin apps gallery, if you have accepted, a click on “Copy” also sends PostHog one event, app_copied, with the app's template and the language of the page, and the usual page details above. Never the text you copied. If you refused, nothing is sent.
• Recordings: once you have accepted, your visit to any of the three sites may be recorded (what the page shows, your scrolling and clicks) to see how the sites are used. Everything you type is masked and never recorded. Nothing is recorded before you accept, or if you refuse.
• Changing your mind: the “Cookie settings” link at the bottom of every page, on any of the three sites, reopens the banner, and your new choice applies to all three. Refusing stops the measurement at once and deletes the cookie and storage PostHog left in your browser; the other sites do the same the next time you open them or go back to their tab.

The web server keeps standard access logs (IP address, page, time) for security, for a limited time. The live view page, used only by the owner, keeps its temporary access link in the browser tab's session storage, which is cleared when the tab closes.

Waitlist

The Larbin Factory (factory.larbin.ai) offers a waitlist for Larbin. The waitlist is separate from the assistant: what you give through the form is not passed to the bot.

• What is collected: your mobile phone number, the language of the page, the page you signed up on and, if the link you followed carries them, where it came from (its utm_source, utm_medium and utm_campaign parameters) and a referral code. Nothing else goes through the form. The site's measurement, only if you accepted it, is described under “Website” above: it learns that a signup happened, never your phone number. Until 20 October 2026 the form asked for an email address instead of a phone number; those entries are kept under the same rules.
• Why: to contact you on this number (by text message or phone call) when a spot opens for you, and to know which channels (a post, a community, a recommendation) bring signups. No newsletter, no advertising, and the list is never sold.
• Legal basis: your consent, given by sending the form. You can withdraw it at any time.
• Who processes it: the form is sent by Larbin's API (api.larbin.ai), hosted by Vercel, to Attio (Attio Ltd), the contact management software where the list is kept. Attio acts as a processor under its data processing addendum. Attio hosts its platform on Google Cloud and uses its own sub-processors, some of them in the United States; those transfers are covered by the European Commission's standard contractual clauses. Text messages will be sent through an SMS provider, named here before the first message goes out. Only the operator reads the list.
• How long: until you leave the list, and at most 3 years after you signed up or last wrote to me. If you ask to leave, your entry is deleted within 30 days.
• Your rights: access, correction, deletion and withdrawing consent, by writing to hello@larbin.ai, as described under “Your rights and how to revoke access” above.

Children

Larbin is not intended for anyone under 16.

Changes

This policy may be updated; the date at the top shows the latest version. Significant changes affecting Google user data will be reflected here before they apply. The French version is a translation; this English version prevails.