Privacy Policy
Last updated September 17, 2026
Arsheen ("we", "us") is made by Dorost LLC, Kansas City, Missouri. This policy explains what Arsheen collects, why, and what you can do about it. Arsheen exists to read messages you already receive and organize them for you, so we take the contents of your inbox seriously.
What we collect
Account
Your name and email address from Sign in with Apple or Google, and a device token so we can send you push notifications.
Email you connect
When you connect a Gmail, Google Workspace, Outlook or Microsoft 365 account, Arsheen uses OAuth — we never see or store your email password. We read incoming mail (subject, sender, date and body text) to find things worth tracking: tasks, appointments, bills, subscriptions, receipts and travel. We request read-only access to mail, plus permission to add events to your calendar and tasks to your task list if you turn those destinations on.
Text messages
On Android, if you grant the SMS permission, Arsheen reads incoming texts on the device for the same purpose. On iPhone, Apple does not allow apps to read iMessage; an optional companion for your Mac can forward your messages to your own Arsheen account if you set it up. You control both.
What we derive
Structured items (title, dates, amounts, merchant, category, confidence, a short quote explaining why) and a daily briefing built from those items.
How we use it
- To show you your items, briefing and assistant answers inside the app.
- To create events and reminders in the calendars and task lists you connect.
- To send push notifications you can turn off per category.
- To improve accuracy using your own corrections — your data is only ever used for you.
We do not sell your data, show you ads, or share your messages with anyone except the processors below. Humans at Dorost LLC do not read your mail except when you ask for support and share something with us.
AI processing
Message text is sent to Anthropic's Claude API to extract items and to answer questions you ask the assistant. Anthropic processes it under its commercial API terms, which do not permit training on your data. Obvious noise (codes, newsletters, marketing) is filtered out before anything reaches the AI.
Google API Services — Limited Use
Arsheen's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the features above, is never used for advertising, and is never transferred to others except as necessary to provide the service, comply with law, or with your consent.
Storage and retention
- Data is stored on Cloudflare (D1) in the United States, encrypted in transit and at rest. OAuth tokens are additionally encrypted with our own key.
- Full message bodies are deleted 30 days after processing; a 300-character snippet and the extracted items remain so your history still makes sense.
- Disconnecting an account stops all reading immediately and deletes its tokens.
- Deleting your account removes your messages, items, tokens, devices and chats. Backups roll off within 30 days.
Your choices
- Connect or disconnect any account at any time in Settings.
- Choose which destinations (Apple Reminders/Calendar, Google Calendar/Tasks) receive items.
- Revoke Arsheen's access from your Google account or Microsoft account at any time.
- Delete your account from Settings, or email appleid.ardshir@gmail.com.
Children
Arsheen is not intended for anyone under 13, and we do not knowingly collect data from children.
Changes
We will post changes here and, for material changes, tell you in the app.
Contact
Dorost LLC · appleid.ardshir@gmail.com