How Gray handles your data

Gray is voice-first and AI-powered. That means some data has to leave your device for the product to work. This page is the plain-English version.

What leaves your device

Data	Where it goes	Why
Voice audio	OpenAI Realtime API	Voice transcription and reply
Your text intent	Anthropic Claude (the brain)	To answer or act
Connector requests	The connected service (e.g. Gmail)	When you ask Gray to read or act on it

What does NOT leave your device

SSH keys (stored in Apple’s Secure Enclave).
Files you haven’t given the brain access to.
Anything from connectors you haven’t connected.
Your microphone when the orb isn’t tapped.

What Gray stores

Conversation history (transcripts and chats): on Gray’s backend, encrypted at rest. 30 days on free, 1 year on Lite, unlimited on Plus+.
Files you upload: encrypted at rest in your per-user volume.
Connector tokens: encrypted in a vault. The brain sees that a connection exists; it never sees the raw token.
Email: for sign-in. We don’t share it. No analytics SDKs.

What Gray does NOT store

Voice audio. Streamed to OpenAI live. Not retained.
Your data inside connected services. Gray reads on demand; it doesn’t pull and cache.

On self-host

Files, conversation history, and connector tokens live on your server. Only voice (to OpenAI) and brain prompts (to Anthropic) leave your network during a request. With an offline licence, even hub phone-home stops.