Privacy Policy

Personal AI OS (“the app”) is a private system built and operated by Carmine Cioffi. It has exactly one user, who is also its owner and developer. It is not offered to the public, there is no sign-up, and no account other than the owner's can connect to it.

What data the app accesses

With the owner's explicit authorization through Google's standard consent screen, the app requests two read-only permissions on the owner's own Google accounts:

• Gmail (read-only) — message headers and bodies, used to identify commitments, requests and deadlines.
• Google Calendar (read-only) — event times, titles and attendees, used to build the day's schedule.

The app holds no permission to send, delete or modify anything. It cannot send mail on the owner's behalf and cannot create, move or cancel calendar events.

How the data is used

Solely to generate a personal daily brief for the owner: what is scheduled, what has been promised, what is unanswered, and what is at risk of being missed. The data is not used for advertising, analytics, profiling, model training, or any purpose beyond producing that brief for the one person it belongs to.

What is stored, and for how long

Message content is processed to extract structured facts, such as “a reply is outstanding on this thread since this date.” Those facts are stored in a private database controlled by the owner. Credentials issued by Google are stored encrypted and are never written into source control.

Nothing is retained longer than it is useful to the owner, and the entire stored dataset can be deleted at any time without affecting the underlying Google accounts.

Sharing

No data is shared, sold, or transferred to anyone. There are no third-party recipients, no advertising partners, no data brokers, and no analytics services receiving Google user data. The only parties that ever touch it are the infrastructure providers that host the app and its database, acting purely as processors under their own security obligations.

Limited Use disclosure

Personal AI OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used to develop, improve or train generalized artificial intelligence models.

Revoking access

Access can be withdrawn at any time from the Google Account permissions page. Revoking immediately and permanently ends the app's ability to read anything, with no further action required.

Security

Access tokens and client credentials are stored outside the application repository with restricted file permissions. The component that reads message content holds no credentials and has no ability to send data anywhere, which limits the damage any single failure can cause.

Children

The app is not directed at children and has no users other than its owner.

Changes

If this policy changes, the revised version will be posted on this page with an updated date.

Contact

Questions about this policy can be sent to ccioffi98@gmail.com.