Privacy policy
DevFlow and Riley Voice are private apps. Airframe Media Ltd ("Airframe Media", "we") makes them for its own staff and invited testers. They are not for the general public. This page explains what each app does with your information.
Who is responsible
Airframe Media Ltd is responsible for these apps. Contact: liam@airframemedia.co.uk.
What the apps are
- DevFlow (
uk.co.airframemedia.devflow) is a window onto Airframe Media's own DevFlow work system. It shows reminders and lets signed-in staff use the system from a phone. - Riley Voice (
uk.co.airframemedia.rileyvoice) is a voice assistant. You speak to it and it speaks back.
Both apps load pages from Airframe Media's own servers. Most of what you see and enter is handled there, not on your phone.
What we collect and why
- Sign-in details. You sign in on Airframe Media's own pages. The app keeps the sign-in cookie in the app so you stay signed in. We use it only to check that you are allowed in.
- Microphone audio (Riley Voice only). The app uses the microphone when you talk to Riley. The sound goes to Airframe Media's own voice server and is turned into text there. If the server's own speech engine is down, a fallback speech-to-text service (Deepgram) may be used for that moment. The text is then used to prepare Riley's answer. We do not use your voice for advertising.
- Notifications. Both apps can show notifications. DevFlow uses Google's Firebase Cloud Messaging to deliver reminders. To do this, your phone gets a random device token from Google, and the app sends that token to Airframe Media's server. We use the token only to send you DevFlow reminders. You can turn notifications off in the app or in Android settings, and the token is then removed.
- What you say and type. Requests you make through the apps, and the answers, are processed on Airframe Media's systems. Some requests are passed to AI model services that Airframe Media uses to prepare answers. These are business tools we choose and pay for. They are not advertising services.
- Technical logs. Our servers keep ordinary logs, such as time, error messages and which part of the system was used, so we can keep the service working and fix faults.
Microphone and foreground service
Riley Voice asks for permission to use the microphone. While it is listening, Android shows a notification that cannot be swiped away. This is the "foreground service" that lets the microphone keep working when the screen is off, for example when you use Riley with earbuds or in the car. The notification stays visible for as long as the microphone is in use. In the always-on mode, the wake word "Riley" is detected on the phone itself. While a conversation is open, the app sends the microphone audio to our server. You can stop it at any time from the notification, from the app, or by removing the microphone permission in Android settings.
What we do not do
- We do not show advertising.
- We do not use third-party analytics or tracking tools in the apps.
- We do not sell your information and we do not share it for marketing.
- We do not build advertising profiles.
Who else handles data
We keep this to the minimum needed to run the apps:
- Google (Firebase Cloud Messaging) delivers DevFlow notifications and Google Play delivers the apps.
- Cloudflare and Tailscale carry traffic between the apps and Airframe Media's servers, and Cloudflare Access can check who is signing in.
- AI model and speech services that Airframe Media uses for its own work, as described above.
Where your information is kept and for how long
Information is kept on Airframe Media's own computers and servers in the United Kingdom, with the service providers above passing some data on the way. We keep work records for as long as the business needs them. The app does not store voice audio. Our voice server can keep short voice recordings, for example to learn to recognise the account owner's voice and to find and fix faults. Those recordings stay on Airframe Media's own servers. Device tokens are kept until you turn notifications off, uninstall the app, or Google replaces the token.
Security
The apps talk to our servers over encrypted connections (HTTPS). Access needs a sign-in. The apps are for named people only.
Your choices and rights
You can ask us to show you, correct or delete the information we hold about you. You can also uninstall the apps at any time. To make a request, or to ask a question about this policy, email liam@airframemedia.co.uk. We will answer within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
Children
The apps are for adult staff. They are not for children.
Changes
If we change what the apps do with your information, we will update this page and its date.