Privacy policy — Diana AI for AndroidXR

The short version

Diana has no account, no analytics, no advertising, and no crash reporting. We do not operate a server that stores your data. What you say to Diana is sent to Google's Gemini service so she can answer; a few specific questions reach a handful of named public APIs. Everything she remembers is written to the glasses and stays there.

The one thing worth understanding. Diana is a voice assistant, so while a session is running your speech is streamed to Google to be understood and answered. If you do not want that, use Silent mode to type instead, or shut her down from the menu.

What leaves the glasses

Data	When	Where it goes
Your voice (audio)	While a conversation session is active and the microphone is not muted.	Google Gemini Live API `generativelanguage.googleapis.com`
Your typed messages	When you type in Silent mode.	Google Gemini Live API
Camera images	Only when you ask a question that needs sight ("what do you see?"), or when you take a shot.	Google Gemini Live API
Text on your screen	Only if you switch on the optional accessibility service, and only when you ask her to read it.	Google Gemini Live API
Approximate or precise location	Only for questions that need it — weather, "where am I", "find coffee near me".	Open-Meteo (weather & geocoding), BigDataCloud (reverse geocoding), and `ipapi.co` / `ipwho.is` as an IP-based fallback when satellite location is unavailable.
Your search or drink query	When you ask for a web search or a cocktail recipe.	Google Search (opened in a browser), TheCocktailDB
Nothing identifying you	When you play radio.	SomaFM audio streams

Each of these third parties handles the data it receives under its own privacy policy. Google's handling of Gemini API data is governed by the Gemini API terms; we do not control their retention.

What stays on the glasses

These are written to Diana's private app storage on the device. They are not uploaded, backed up to us, or shared. Uninstalling the app deletes them.

File	Contents
`notes.jsonl`	Notes you dictated.
`reminders.jsonl`	Reminders you set.
`conversations.jsonl`	Recent conversation history, so she has context.
`health.jsonl`	Local diagnostic counters — session state, temperature, connection health.

You can read your notes inside the app (menu → View notes) without signing into anything. To erase everything Diana remembers, clear the app's storage in Android settings, or uninstall it.

What we do not do

We do not have user accounts, and we never ask you to create one.
We do not include any analytics, telemetry, attribution or advertising SDK.
We do not sell or share personal information with data brokers.
We do not record your conversations to a server we operate — we do not operate one.
We do not listen continuously in the background. Diana hears you while a session is running, which is shown by a persistent notification you can dismiss by shutting her down.

Permissions, and why each exists

Permission	Why Diana asks
`RECORD_AUDIO`	To hear you. This is the core of a voice companion.
`CAMERA`	To answer questions about what is in front of you, when you ask one.
`ACCESS_FINE_LOCATION` `ACCESS_COARSE_LOCATION`	Weather, "where am I", and nearby search. Optional — decline and those skills say they cannot help.
`INTERNET`, `ACCESS_NETWORK_STATE`, `ACCESS_WIFI_STATE`	To reach Gemini and to tell you honestly when the link is down.
`POST_NOTIFICATIONS`	The status notification, and reminders when they fire.
`FOREGROUND_SERVICE` and its microphone, camera, media-playback and media-projection types	So Diana keeps working while you use another app — on glasses the notification is the only channel she has left.
`USE_EXACT_ALARM`, `SET_ALARM`, `RECEIVE_BOOT_COMPLETED`	Reminders more than a day out must ring at the exact time, and must survive a reboot.
`USE_FULL_SCREEN_INTENT`	So a reminder can reach you in an immersive app.
`HAND_TRACKING`	Hand signs — opening the menu or muting her without speaking. Hand data is processed on the device.
`WAKE_LOCK`	To finish answering without the device sleeping mid-sentence.
`KILL_BACKGROUND_PROCESSES`	To close an app when you ask her to.
Accessibility service (optional, off by default)	Reading text on screen aloud, and pressing buttons by name. She reads only when asked, never continuously. You switch this on by hand in Android settings and can switch it off there at any time.

Children

Diana is not directed to children and we do not knowingly collect personal information from anyone under 13 (or the equivalent minimum age in your country).

Your choices

Mute the microphone from the hand menu — she stops hearing you.
Silent mode — type instead of speaking, and she answers on screen.
Decline any permission — the skills that need it will say they cannot help, and everything else keeps working.
Shut her down from the notification or the menu — the session ends and nothing further is sent.
Delete everything by clearing app storage or uninstalling.

Changes

If this policy changes materially, the updated date above changes with it and the new version replaces this page.

Contact

Questions about this policy, or a request about your data: support@iotj.cc
株式会社IoTone Japan (IoTone, Inc.)