Privacy Policy

Last updated: 12 November 2026

Async is a task manager. You say or type a task, finish it, and Ink, Async's assistant, tells whoever is next. This policy explains what we collect to do that, who sees it, where it goes, and the choices you have.

1. Who we are

Async is operated by Adtivity Enterprise, a business name registered with Nigeria's Corporate Affairs Commission (BN 8814086), whose principal place of business is 7 Ibiyinka Olorunbe, Victoria Island, Lagos State, Nigeria ("we", "us"). We are the controller of the personal data described here, except where section 5 says a company you work with is responsible for its own workspace.

2. What we collect

We collect what you give us and what Async needs to run. We do not buy data about you, and we do not read your email.

WhatExamplesWhere it comes from
AccountEmail address, display name, nicknames, time zoneYou, when you sign in with an emailed code or link
Your workTasks (title, details, due date, status), who asked and who owns them, project briefs, asks, answers, updates, decisions, calls you set (time, people, a meeting link you paste)You and your teammates
Companies and rolesThe companies and projects you belong to, your role (owner, manager, member, guest), who you report to, invites you sendYou and the people who invite you
HistoryA record of changes to each task (who, what, when) and a security log of sign-ins and admin actions, including IP addressCreated as you use Async
Devices and sessionsDevice type and name, sign-in sessions, IP address, browser or app version, notification settingsYour devices
AI tools you connectWhich AI tool you connected, what it may do, the work it reported backYou, when you press Allow
Early access listEmail, the platform you want, and the first task you typed on our websiteYou, when you join the waitlist

We do not store your voice recordings, transcripts, calendar, contacts, emails, files or payment details on our servers. Async has no paid plans today, so we hold no card details. The text of your tasks is stored as you write it, so please do not paste bank or card details into a task.

3. How we use it

We use your data to run Async for you and your teammates, and for nothing else.

PurposeLegal basis (GDPR and Nigeria's NDPA)
Sign you in, keep your tasks, and show them on your devicesPerforming our contract with you
Tell the next person when you finish, and send you notifications you have not mutedPerforming our contract
Understand spoken or typed commands (section 4)Performing our contract
Keep Async secure: rate limits, a security log, stopping abuseOur legitimate interest in a safe service
Email you sign-in codes, invites and essential service noticesPerforming our contract
Tell you when early access opens, if you joined the waitlistYour consent, which you can withdraw any time
Meet legal obligationsLegal obligation

We do not sell your data. We do not use it for advertising. We do not use your tasks to train AI models.

4. Voice, Ink's AI model, and AI tools you connect

Voice. When you hold the keys (Mac, Windows) or the mic button (web, phone), your microphone audio streams directly from your device to our speech provider, Deepgram, which turns it into text. Audio is sent only while you hold. Our servers never receive or store your audio. To recognise names better, we also send Deepgram the first names of people in your workspace, and on Mac your project names and open task titles. On a Mac you can choose fully on-device recognition instead. If you turn cloud voice off on the web, your browser's own speech service is used, under your browser maker's terms.

Ink's AI model. Ink first tries to understand a command on your device. Only when it cannot does it send the command to an AI model run by Groq, with the context it needs: your words (up to 500 characters), your name and time zone, the names and roles of people in your company, your project names, and up to 50 of your open tasks (title, status, due date, owner). It never sends task details, history, briefs, or finished or deleted tasks. The model only suggests: Async shows you what it will do and asks you first. We log that a request happened, never its words. A company owner can switch this off for the whole company.

AI tools you connect. You can let an AI tool such as Claude, Cursor or ChatGPT work with your tasks by pressing Allow. It sees what you see, under the same walls as you. It can read your tasks, log progress, post asks and answers as you, and propose changes for you to approve. It cannot mark work done, delete, hand over or message anyone. You can disconnect it any time in Settings, and access ends at once. What that tool's own company does with the data is covered by its own terms.

Call notes on Mac. If you use call notes, Async asks before recording. Recordings stay on your Mac. You are responsible for telling the other people on the call and getting their consent where the law requires it.

5. Who can see your work inside Async

Every company you belong to is a separate, walled workspace. Nothing in one company is visible from another, even when you belong to both. The walls are enforced in our database, not just in the app.

WhoWhat they can see
YouEverything in your Personal space, and every company and project you belong to
Your Personal spaceOnly you. No employer, owner or manager can open it. Guests see only a project you invite them to
Teammates in a projectThat project's tasks, history, brief and calls
Company owners and managersEvery project in their own company, read only, and work counts and hours for the people they lead (never task titles). They never see your Personal space, other companies, or what your AI tool did
Guests (for example a client)Only the projects they are invited to. They see the names of the other people there, but not their email addresses
The project leadEdits the project brief. Others can suggest; only the lead and the author see a suggestion
Your AI tool's activityOnly you. Teammates see the result under your name. A manager may see how many AI suggestions are waiting for you and clear them, without reading them, and you are told
Company ownersThe company's security log

Work you do inside a company belongs to that company's workspace. If you leave, it stays there.

We (Async staff) access workspace content only when you ask for support, to keep the service secure, or when the law requires it.

6. Service providers we use

These companies process data for us under contract, only to run Async.

ProviderWhat forData it handles
VercelHosting the website, app and servers (Frankfurt, Germany)All service traffic
SupabaseDatabase and live updates (Europe)Everything in section 2
DeepgramSpeech to textAudio while you hold to talk, plus name hints
GroqInk's AI model, when on-device understanding failsThe command and context in section 4
MailtrapSending sign-in codes and invitesYour email address and the message
Your browser's push service (Google, Apple, Mozilla or Microsoft)Delivering notificationsNotification title and text
Google Fonts and Google TranslateFonts in the web app, and translation if you pick a language other than EnglishYour IP address; page text when translating
Apple and MicrosoftApp distributionStore data under their terms

We will update this list before adding a provider that handles your personal data.

7. How long we keep it, and how to take it or delete it

Export and delete. You can get a copy of everything that is yours or about you, or delete your account, at any time. Both are self-service in Settings (open You, then Download my data or Delete my account) and happen at once. If you cannot use Settings, email heyink.async@gmail.com from your account's email address and we will do it within 30 days. When you delete your account:

Retention.

DataKept for
Your account and workUntil you delete it, or the company deletes it
Deleted tasksRemoved for good after 30 days
Unanswered suggestionsExpire after 14 days
Security log and sign-in recordsWhile your account exists, to protect it
Early access listUntil early access opens or you ask us to remove you
BackupsData you delete leaves our provider's backups as they expire

On a Mac, call recordings and the local voice log stay on your computer until you delete them. You can turn the voice log off in Settings.

8. Your rights and the rest

Your rights. You can ask to see, correct, export or delete your data, object to or restrict how we use it, and withdraw consent. Email heyink.async@gmail.com. If you are unhappy with our answer, you can complain to the Nigeria Data Protection Commission, or to the data protection authority where you live.

Data inside a company's workspace. If your request concerns work in a company's workspace, we may need to involve that company, because the work belongs to its workspace.

International transfers. We are based in Nigeria and our servers are in Europe. Some providers in section 6 process data in other countries, including the United States. Where the law requires it, we use approved safeguards such as standard contractual clauses.

Children. Async is for people aged 16 and over. We do not knowingly collect data from younger children. If you think a child has signed up, email us and we will delete the account.

Cookies and storage. Our website sets no cookies and loads no third-party trackers. It keeps the task you type on the home page in your browser so it can follow you to the download page. The web app stores your sign-in and a copy of your workspace in your browser so it works offline, and sets three small cookies: your language, Google Translate's setting (only if you use it), and when it last asked about notifications. We use no advertising or analytics cookies.

Security. Connections are encrypted. Sign-in codes and refresh tokens are stored only in hashed form, sessions can be ended from any device, and on Mac and Windows your sign-in is kept in the system's secure storage. To report a security problem, email heyink.async@gmail.com (also listed at async.adtivity.xyz/.well-known/security.txt). Please tell us before you tell anyone else and give us a reasonable time to fix it, and we will not take action against anyone who reports in good faith. No system is perfect: if a breach affects you, we will tell you and the regulator as the law requires.

Changes. If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect.