Privacy Policy

Last updated: September 29, 2026 · Effective: October 13, 2026

TOLA, Inc. ("TOLAHOUSE," "we," "us," or "our") offers two products:

  • **The TOLAHOUSE app** — home to **Hey Arrow**, your personal AI agent. It runs on iPhone, Android, Mac, and the web at tola.house, and Hey Arrow can also be reached by text message.
  • **TOLAHOUSE** — the membership. TOLAHOUSE is a membership by application that opens our physical location, TOLAHOUSE in Tampa, Florida (coworking, a gym, and a lounge). Your membership lives inside the TOLAHOUSE app, in the Locations tab.

    • In this policy, "Services" means TOLAHOUSE, Hey Arrow, the TOLAHOUSE membership and location, our websites, and anything else we offer that links to this policy. One account works across all of them. This policy explains what information we collect, how we use and share it, and the choices you have.

    1. Changes to This Policy

    We may update this policy from time to time. When a change is material, we will let you know in the app or by email at least 14 days before it takes effect. The date at the top shows when it was last changed.

    2. Collection and Use of Information

    Information you provide

  • **Account details:** your name, nickname, username, mobile number or email, contact email, and profile photo. You sign in with a one-time code; if you set a password, we keep it only in hashed form.
  • **Conversations with Hey Arrow:** the messages, photos, files, and voice notes you send in the app or by text message, and the replies, cards, files, charts, and images Hey Arrow makes for you.
  • **Things you create:** goals, tasks, reminders, ideas, projects and their photos and plans, renderings and 3D models, posts, and anything you share with a team or in messages to other members.
  • **Teams:** team names and logos, who is on a team and their roles, and what members say in a team's shared chat.
  • **Membership applications:** the details you submit when you apply for a TOLAHOUSE (name, contact details, company and business details, and an optional photo).
  • **Payments:** payments are handled by our payment processor. We never see or store your full card number; for a card saved to your TOLAHOUSE Wallet we keep only a reference, the brand, and the last four digits.
  • **Support:** requests, reports, and feedback you send us.

    • Information collected through your use of the Services

    Hey Arrow works by using the information you give it and, with your permission, information from apps and services you connect. Depending on what you ask and what you allow, Hey Arrow may access your calendar, contacts, reminders, email, files, or other accounts, and websites it visits for you. Hey Arrow may come across sensitive information you choose to share with it or that appears in the accounts you connect; we handle it only to do what you ask.

  • **Memory.** Hey Arrow remembers facts and preferences from your personal chats (including corrections you give it) and the people you mention working with, and keeps a short profile of you that it refreshes weekly. It can search your own past personal chats, including by meaning. This memory is private to you. **Incognito chats** are not saved, and nothing is remembered from them.
  • **Teams.** A team's shared chat, goals, tasks, files, and team memory are visible to that team's members. Hey Arrow never brings your personal memory into a team chat and never saves personal facts from one.
  • **Approvals.** Hey Arrow asks before it acts on your behalf in ways that share your information or change something, according to Settings › Permissions.
  • **Connected apps.** You choose which apps to connect in Settings › Connectors and what Hey Arrow may do in each (Allow, or Ask first). We store the access they grant securely and use it only to do what you ask. Email access is read-only: Hey Arrow can search and read your mail to answer you and to post heads-ups about time-sensitive email in your chat; it never sends, archives, or deletes mail. Messages Hey Arrow posts to a workplace chat app for you are always approved by you first.
  • **Apps on your device** (such as Contacts, Calendar, and Reminders, and on a Mac the folders and apps you allow). These are read on your device when you ask Hey Arrow something that needs them. We never copy them to our servers; only what a given answer needs is sent for that one reply.
  • **Hey Arrow's browser.** When Hey Arrow does something on a website for you, we keep screenshots of each step so you can follow along and review what happened. **We never store your passwords on our servers.** When a site needs you to sign in, you do it yourself, or tap *Fill saved login* to use a login saved on your device; the site's cookies are kept in your own private browser profile so the next task stays signed in.
  • **Saved logins.** Logins you add in Settings › Secure credentials store are encrypted **on your device only** and never reach our servers except for the moment you tap *Fill saved login*, when that one login is typed into the page and not kept.
  • **Purchases.** Hey Arrow only goes through a checkout after you choose an option and tap Buy. You pay the merchant directly; the merchant is the seller.
  • **Texting Hey Arrow.** If you text Hey Arrow, we receive your phone number and your messages, and they appear in your chat in the app.

    • Information from Google

    If you sign in with Google or connect Google apps (such as Calendar, Gmail, Contacts, Tasks, Docs, Sheets, Slides, Forms, or Drive), Hey Arrow reads and acts only within the permissions you grant. Drive access is limited to files you open or create with TOLAHOUSE, and Gmail access is read-only.

    **TOLAHOUSE's use and transfer of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.** We use Google user data only to provide the features you use. We do not use it for advertising, do not sell it, do not use it to build general AI models, and do not let humans read it except with your consent, for security purposes, or as required by law.

    Information collected automatically

  • **Device and usage:** device type, operating system, app version, features used, timestamps, crash and error logs, and IP address.
  • **Push notifications:** a device token so we can send you notifications, if you allow them.
  • **Location:** only with your permission, to show places on the map and power check-ins at the TOLAHOUSE location.

    • Information from other sources

    We may receive information from services you connect, from teams you join (for example, when a teammate invites you), and from public sources used to answer your questions.

    How we use information

  • To run your account, Hey Arrow, your teams, and your TOLAHOUSE membership
  • To do what you ask, with the apps you connect and within your permissions
  • To process payments, subscriptions, and membership charges
  • To operate the TOLAHOUSE location, including check-ins
  • To send notifications you allow — Hey Arrow never sends a notification it started itself between 9 PM and 8 AM your time, and limits how many it sends
  • To keep the Services safe, secure, and reliable, and to prevent fraud and abuse
  • To comply with the law

    • **Improving Hey Arrow for everyone.** We count anonymous signals — for example, how often an approval card is allowed or denied, or which kinds of ideas get started — to improve Hey Arrow for all members. These counts contain no names, account identifiers, or message content. We run automated quality tests on a test account, never on yours.

    Deidentified information

    We may create information that no longer identifies you, such as the anonymous counts above. We keep it in that form and do not try to re-identify it.

    3. Cookies and Similar Technologies

    We use cookies, local storage, and similar technologies to keep you signed in, remember your settings (such as theme and dismissed notices), and keep the Services secure and working. We do not use them for third-party advertising. You can clear or block them in your browser, but some features may stop working.

    4. Disclosure of Your Information

    We do not sell your personal information and do not use it for third-party advertising. We share it only as follows:

  • **Vendors and service providers** who help us run the Services — for example hosting and storage, payments, sign-in codes and messaging, push notifications, maps, web search, the cloud browser Hey Arrow uses, security, and analytics — under confidentiality obligations and only for the work they do for us.
  • **AI model providers.** To answer you, Hey Arrow sends your message and the context it needs (for example, relevant memory, or data from an app you connected) to third-party AI model providers. Which one handles a message depends on the task. We send only what a task needs and use their business services. Please don't share information in chat that you would not want processed by an AI service.
  • **Third parties Hey Arrow interacts with for you.** When you ask Hey Arrow to act — on a website, in a connected app, or with a merchant — it shares what that task needs with that party.
  • **People and parties you choose.** What you share with a team, send to another member, post publicly, or ask us to share.
  • **Public content.** Posts, property pages, and your public member page are public. A photo you add to a membership application may be shown with other recent applicants on our public pages, as shown when you upload it; ask us any time to remove it.
  • **The TOLAHOUSE location team.** When you check in, the team that runs the location sees your name, photo, and check-in.
  • **Business transfers.** In a merger, acquisition, financing, or sale of assets, with notice to you.
  • **Professional advisors,** such as lawyers and accountants, under confidentiality.
  • **Legal and safety.** When required by law, or to protect the safety and rights of people and the Services.

    • 5. Third-Party Websites and Links

    The Services link to, and Hey Arrow can visit, websites and services we do not run. Their own privacy policies apply, and we are not responsible for how they handle your information.

    6. Your Choices and Controls

  • **See and correct** your profile in Settings › Account, and what Hey Arrow knows about you in the profile sheet (Memory) and Settings, where you can edit, delete, or erase it all at once.
  • **Use Incognito chat** when you don't want a conversation saved or remembered.
  • **Disconnect** any app in Settings › Connectors, and change what Hey Arrow may do in Settings › Permissions.
  • **Notifications:** turn them off in Settings › Notifications (this removes that device's token) or in your device's settings. Location and other device permissions can be withdrawn in your device's settings.
  • **Export** your private data from Settings › Data controls, or request a full copy there.
  • **Delete** your private chats and memory in Settings › Data controls, and your whole account in Settings › Account › Delete or recover account.
  • **Texting:** reply STOP to stop messages from Hey Arrow.

    • 7. Data Retention

    We keep your information while your account is active or as needed to provide the Services. You can delete chats, memory, and your account at any time. Payment and transaction records are kept for at least 3 years for legal and accounting purposes. Backups roll off on their own schedule.

    8. Children's Privacy

    The Services are for people 18 and older. We do not knowingly collect information from anyone under 18 and will delete such accounts when we learn of them.

    9. Data Security

    We use encryption in transit, encrypted storage, access controls, and least-privilege access to your data. No system is perfectly secure; tell us right away if you suspect unauthorized access to your account.

    An agent that acts for you carries its own risks. Hey Arrow may misunderstand a request and take an action you didn't intend, produce incorrect output, or be misled by instructions hidden in a website, email, or document it reads. We design Hey Arrow to treat such content as information rather than instructions and to ask before important actions, but you should review what Hey Arrow proposes before you approve it and only connect the accounts you are comfortable with it using.

    10. Your Privacy Rights

    Depending on where you live, you may have rights over your personal information, such as to access, correct, delete, or get a copy of it, or to object to certain uses. Many of these are available directly in Settings (Section 6). To exercise any others, contact us; we will not discriminate against you for doing so.

    11. How to Contact Us

    TOLA, Inc. · Tampa, Florida

    Questions or requests: tola.house/support or team@tolacard.com