Privacy Policy

Personal AI OS (“the app”) is a private system built and operated by Carmine Cioffi. It has exactly one user, who is also its owner and developer. It is not offered to the public, there is no sign-up, and no account other than the owner's can connect to it.

What the app reads

With the owner's authorization through Google's consent screen, the app holds two read-only permissions on the owner's own Google accounts. It cannot send, delete or change any mail or calendar event.

• Gmail (read-only). The sender, recipients, subject and dates of recent threads, to work out who is waiting on a reply. For threads where the owner is waiting, the text of the latest message is read so that a reply actually owed can be told apart from a thank-you.
• Google Calendar (read-only). Event titles and times for the coming week, to build the day's schedule. Event locations and attendee addresses are not kept.

The app also reads the owner's own workout history from Hevy, and the voice notes he sends it from his phone. Neither is Google data.

Who processes email content

The text of those latest messages is sent to Anthropic's Claude, under the owner's own Claude account, to decide whether a reply is owed and to write it up in one line. The message text itself is not stored anywhere by the app. Only the resulting facts are kept. The owner's voice notes are sorted by Claude the same way.

What is stored, and where

• Facts only. For an open thread: the subject line, the name of who owes the reply, a one-line summary, how long it has been, and a link back to Gmail. Street addresses, phone numbers and dollar amounts are filtered out. For the work mailbox, no message content is kept at all beyond these facts.
• On the owner's own computers. The working files the app builds each morning, including the thread details above. For the personal mailbox only, this includes Gmail's short preview line.
• Vercel Blob, a private file store readable only by the app, holds just what the app's pages show: the schedule, the open replies, and notes from the owner's own files. Each morning's run replaces the previous copy.
• Neon, a private database, holds the owner's voice notes and his Hevy workouts.

The pages that show any of this are behind a password. Everything stored can be deleted at any time without affecting the Google accounts.

Sharing

No data is sold, and none is used for advertising. The only outside parties that handle it are the services the app runs on, each doing one job for the owner: Google (the source), Anthropic (reading email text as described above), Vercel (hosting and file storage) and Neon (the database).

Limited Use disclosure

Personal AI OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to produce the owner's own daily view, and the app does not use it to develop, improve or train generalized artificial intelligence models.

How credentials are protected

The Google access tokens are kept as files on the owner's own computers, outside the app's code, in a folder only his user account can open. They are protected by those file permissions, not by encryption. The other keys the app uses are kept in environment settings on those computers and in Vercel, never in the code. The part of the app that reads email text holds no credentials and has no tools, so it cannot send data anywhere.

Revoking access

Access can be withdrawn at any time from the Google Account permissions page. Revoking immediately ends the app's ability to read anything. The saved token files and stored data can then be deleted by the owner.

Children

The app is not directed at children and has no users other than its owner.

Changes

If this policy changes, the revised version will be posted on this page with an updated date.

Contact

Questions about this policy can be sent to ccioffi98@gmail.com.