Privacy, plainly.
RightHand is an experimental Android assistant by CoHeroes. This page describes the current beta, not a promise that no provider ever retains data.
Your phone holds your records
App notes, reminders, activity and email sign-ins are held in encrypted app storage. WhatsApp session files are held in the app’s private phone storage. The public RightHand website does not contain your WhatsApp history, OpenAI key or mailbox credentials.
You choose what activates the assistant
Only new owner-written @rh / @righthand commands and replies to RightHand activate it. It requests chat history only for a window you choose. A temporary reference to your latest own media can remain in memory for ten minutes so a following command can select it; no media download happens until selected.
Recent assistant conversations continue only in the same chat for twenty minutes. Encrypted context bound to direct replies is kept locally in a bounded store and can be recovered for up to twenty-four hours. Ordinary unrelated chat text is not saved as assistant memory.
OpenAI processes the selected request
Content needed to answer you—including selected media transcripts or requested emails—leaves the phone for OpenAI, using your API key. Responses requests use store:false. OpenAI’s retention, abuse-monitoring and account controls still apply. Live search sends an extracted public lookup query, not a whole voice transcript or mailbox.
Email and location are optional
Email access is requested through the provider sign-in. Sending requires an additional provider permission and an owner instruction naming the recipient. Email briefs and retrieved attachments default to the owner’s self-chat. Location is requested only with device permission and when you ask for it; a requested result may be shared into your chosen chat.
Control and support
Pause or disconnect WhatsApp in Settings. You can remove email connections and the OpenAI key, clear activity, or restart setup. Review your provider’s account settings to revoke their grants. Feedback is shared only when you choose to send it; leave private chat contents and credentials out of reports.
This website
The public pages do not include advertising trackers or analytics scripts. The hosting and DNS providers may process ordinary connection logs. Fonts are requested from Google Fonts. Downloading the beta does not connect a mailbox or WhatsApp account. The current admin console is separate from public website content.
Updated 1 November 2026. For product assistance, use Feedback & suggestions in the app.
Planned company-paid service
The no-key service is not active in the current private beta. When launched, selected AI requests will pass through the RightHand server to OpenAI. Account, balance, purchase and support-report records are necessary for that service. Request bodies must not be stored as billing records. Server operators can process request content; this is not end-to-end encryption between your phone and OpenAI. Separate consent and an updated privacy notice are required before migrating existing testers. Provider retention remains governed by the applicable OpenAI settings and policies.