Spoek
Privacy Policy
Last updated: 9 May 2026
This Privacy Policy describes how Simple Semantics processes personal data in connection with Spoek, a personal AI assistant that operates inside Telegram and WhatsApp chats. It applies to anyone who interacts with a Spoek, whether they set it up themselves or are a participant in a chat where a Spoek has been added.
1. Who we are
The data controller is Simple Semantics, registered in the Netherlands (KvK 42012668). For any privacy-related question or request, contact:
2. What data we collect
We only collect what is necessary to provide the assistant service.
2.1 Account identifiers
- Your Telegram user ID and display name (if you use Spoek via Telegram), or
- Your WhatsApp phone number and display name (if you use Spoek via WhatsApp).
- Optionally, an email address you provide.
2.2 Conversation content
Messages exchanged between you and your Spoek inside the chat are logged on our servers. This includes messages from other participants in a group chat where a Spoek is active. We use these logs to deliver the assistant's response, to give the assistant ongoing context, and to debug and improve the service.
2.3 Assistant memory
When you ask your Spoek to remember something (preferences, facts, recurring tasks), we store that information so the assistant can recall it in later conversations.
2.4 Connected services (optional)
If you choose to connect a calendar, we receive an OAuth access token that allows the assistant to read and write calendar events on your behalf:
- Google Calendar — scope
https://www.googleapis.com/auth/calendar. - Microsoft Outlook Calendar — scopes
Calendars.ReadWrite,offline_access,User.Read.
Tokens are stored on our servers in a per-Spoek file used only by that Spoek. You can revoke access at any time from your Google or Microsoft account settings.
2.5 Operational metadata
We log timestamps, message identifiers, and AI token-usage counts for billing, rate-limiting, and reliability.
3. Why we process this data (lawful bases)
- Performance of a contract — to provide the assistant service you have requested.
- Legitimate interests — to keep the service secure, debug failures, and improve quality.
- Consent — for connecting third-party services such as Google or Microsoft Calendar. You can withdraw consent at any time.
4. Who we share data with
We share data only with the processors required to operate the service:
- Anthropic, PBC — the Claude language model. The contents of your messages are sent to Anthropic to generate responses.
- Meta Platforms (WhatsApp Business Platform) — only if you use Spoek via WhatsApp. Messages travel through Meta's infrastructure.
- Telegram FZ-LLC — only if you use Spoek via Telegram.
- Google LLC or Microsoft Corporation — only if you connect a calendar.
- Supabase, Inc. — our database and storage provider.
We do not sell your data, and we do not share it for advertising.
5. International transfers
Some of the processors above are based outside the European Economic Area (notably Anthropic, Supabase, Google, and Microsoft). Transfers rely on Standard Contractual Clauses or equivalent safeguards as offered by each provider.
6. How long we keep data
- Active Spoeks: data is kept while the Spoek is in use.
- Inactive or removed Spoeks: if you remove the bot from your chat, the assistant process is stopped and data is retained for up to 12 months unless you request earlier deletion.
- On deletion request: we delete personal data within 30 days, except where retention is required by law.
7. Your rights
Under the GDPR you have the right to access your data, correct it, request deletion, restrict or object to processing, and request portability. You can exercise these rights by emailing kjell.van.straaten@simplesemantics.nl. See also our Data Deletion Instructions. You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
8. Security
We use TLS in transit, encrypted storage at rest provided by Supabase, and strict access controls. No system is perfectly secure; if we ever discover a breach affecting your data, we will notify you and the relevant authorities as required by law.
9. Children
Spoek is not intended for children under 16. If you believe a child has used the service, please contact us so we can delete the data.
10. Changes to this policy
We may update this policy as the product changes. The "Last updated" date at the top of the page reflects the latest version.
11. Contact
Simple Semantics
KvK 42012668, Netherlands
kjell.van.straaten@simplesemantics.nl