Rudeus

Privacy Policy

Effective 25 September 2026

What this policy covers

This policy covers the Rudeus WhatsApp assistant and the pages on rudeus.uk. It explains the information Rudeus receives, how it is used, which service providers process it, and how you can remove it.

Information Rudeus receives

WhatsApp information

When you message Rudeus, Meta provides your WhatsApp phone number, message identifiers, message text and any image, audio file or document you send. After sign-in, Rudeus keeps the phone-to-email link in that number’s private Cloudflare store so replies, reminders and files stay attached to the correct person.

A document you send stays temporary unless you save it. Saved files are private by default; only files you explicitly share with everyone can be searched, used in answers and cited to other Rudeus users. Storage paths and search metadata use a one-way keyed identifier derived from your email, not your phone number or email address.

Google account and Calendar information

For account linking, Rudeus receives your Google email address and requests only identity scopes. If you later connect Calendar, Rudeus also receives the permissions you granted and OAuth credentials that allow that connection to continue.

For Calendar requests, Rudeus may process event titles, dates, times, time zones and status. When you ask for event details or a change, it may also process descriptions, locations, organiser and attendee email addresses, attendance status, meeting links and the event fields you ask it to write.

Rudeus currently requests Google Calendar permissions. It does not request access to Gmail, Google Drive, Docs, Sheets, Slides or Contacts.

Website information

Rudeus’s own website responses do not set cookies, run advertising trackers or use browser analytics. Cloudflare processes ordinary request information, such as IP address, browser details and request time, to deliver and protect the site.

How the information is used

Rudeus uses WhatsApp and Google data to answer your request, maintain the current conversation, run library-based quizzes, deliver reminders, prevent duplicate actions, protect the service and investigate failures.

Relevant parts of a Calendar request and the Calendar result are processed by the Rudeus agent running on Google Cloud. This lets the agent understand requests such as “What is my first meeting about?” and prepare a useful answer. Event details and links needed for that answer can therefore be processed by the model. Google access tokens, refresh tokens and the stable identifier used to bind your Google account are kept outside the model.

Creating, changing or deleting a Calendar event requires a separate confirmation in WhatsApp. Rudeus does not use Calendar content as permission to take another action.

Google API data

Rudeus uses information received from Google APIs only to provide or improve the user-facing Calendar features that you request. It does not sell Google user data, use it for advertising, use it to determine creditworthiness, or use it to train a general-purpose or non-personalised AI model.

Rudeus transfers Google user data only when needed to provide these features through its service providers, when you direct a disclosure, for security purposes, or when required by law. A person will not read your Google Calendar data unless you ask for support and consent to that access, access is needed to investigate abuse or a security incident, or the law requires it.

Rudeus’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Service providers

Rudeus uses Meta and WhatsApp for the messaging channel, Cloudflare for request handling and durable application state, and Google Cloud and Google APIs for the agent, document processing and Calendar operations. These providers process information on Rudeus’s behalf or under your account relationship with them. Their own terms and privacy policies also apply.

Rudeus does not sell personal information. It does not share Google Calendar data with data brokers, advertising networks or unrelated third parties.

Operational measurements

Rudeus records limited measurements after a completed request, including response time, which tool or action type was used, whether sources were returned and whether an attachment or voice reply was produced. These measurements do not contain your phone number, message text, answer text, Google identity or Calendar content.

Separately, so the person who runs Rudeus can manage who has access and what it costs, Rudeus keeps usage counts for each WhatsApp number: how many messages of each type you sent, how many replies you received, the number of AI model tokens those replies used, which tools ran, whether files or voice replies were sent and how long replies took. The counts contain no message text, answers, files or Google data, and are deleted after 90 days. A short activity log of the same kind (for example that you sent a voice note, received a reply or were given access, with its time and counts) is kept for 7 days. Rudeus also keeps your access status (such as allowed, waiting or blocked), your WhatsApp profile name and when you last wrote, so that access decisions can be applied.

Storage and retention

Recent conversation text and short Calendar summaries are kept for continuity and normally expire after ten minutes without activity. Short-lived Calendar references expire after thirty minutes. Pending Calendar changes expire after fifteen minutes, and bounded records used to prevent a confirmed change from running twice can remain for up to twenty-four hours.

Your encrypted Google credentials remain in a per-user Cloudflare Durable Object until you disconnect, Google revokes the grant, or the connection becomes invalid. Rudeus downloads WhatsApp attachments to process the current request; it does not add those chat attachments to the permanent document library unless that is a separate feature you deliberately use.

Basic WhatsApp account metadata, the phone-to-email link, quiz scores, active reminders and files you deliberately save can remain longer when needed to provide those features. Operational service logs expire under the cloud provider’s retention policy and are not removed instantly by an in-chat deletion command. Rudeus may retain information when the law requires it or when it is needed to resolve fraud, abuse or security incidents.

Your controls

• Send /logout in WhatsApp to remove the local Google connection immediately and request revocation from Google.
• Remove Rudeus from your Google Account’s third-party connections page to revoke Google access directly.
• Send clear in WhatsApp to clear recent conversation context.
• Send /clean-slate in WhatsApp to review and then permanently delete your conversation state and settings, quiz scores, reminders, Google connection, phone-to-email link, chat uploads, Drive copies, the skills you taught Rudeus (including shared ones), your usage counts and activity log, and the WhatsApp name kept with your access status. Only the access decision for your number (for example allowed or blocked) is kept, because it is needed to keep applying it. Files from a folder shared with Rudeus return on the next sync unless you also unshare that folder. This does not delete WhatsApp’s copy of the chat on your phone or operational logs that expire on their own.
• Email eebehuur13@gmail.com to ask what personal information Rudeus holds, correct it or request deletion. Identity verification may be required before a request is completed.

Your legal rights depend on where you live and may include access, correction, deletion, restriction, objection and data portability.

Security and international processing

Rudeus uses HTTPS in transit, encrypts Google credentials at rest, limits credentials to the component that calls Google, and uses short-lived signed permissions between its services. No internet service can promise absolute security.

Cloudflare, Meta and Google operate internationally. Your information may therefore be processed outside the country where you live, subject to the safeguards and contractual commitments those providers apply.

Children

Rudeus is not directed to children under 13. If you believe a child has provided personal information, contact us so it can be reviewed and deleted where appropriate.

Changes and contact

This policy will be updated when Rudeus changes how it handles personal information. The effective date at the top will change when a material revision is published.

Questions and privacy requests can be sent to eebehuur13@gmail.com.