Privacy Policy
Last updated: September 21, 2026
Personal OS is a private personal productivity assistant intended for use by its owner only. This policy describes what data it handles and why.
Data accessed
- Google Calendar. With the owner’s authorization, Personal OS searches calendar events and creates, updates and deletes events on the owner’s calendar to carry out the owner’s requests.
- Gmail (read-only). Personal OS uses the read-only Gmail scope to inspect incoming email for potential task or calendar-event candidates. It does not send, reply to, forward, archive, label or delete any email, and it does not download attachments or follow links in messages.
- Todoist. Todoist is used as the task source of truth. Personal OS searches, creates, updates, completes and deletes the owner’s tasks.
- Messages to the assistant. The owner’s commands sent through the private chat interface.
How data is used and processed
- Data is used only to provide the assistant’s features to its owner: understanding requests, spotting task/event candidates in email, and creating or changing calendar events and tasks.
- To classify and reason about requests and emails, relevant text and metadata (for example an email’s sender, subject and truncated body, or calendar and task details needed to answer a request) is sent to Anthropic’s API. It is not used to train generalized AI models by Personal OS.
- Access is limited to the functionality the assistant needs. Actions derived from email are never executed without the owner’s explicit approval.
Storage
Personal OS runs on Cloudflare Workers and uses a Cloudflare D1 database to store runtime state: a record of each processed request (including, for email, the message identifier, sender, subject and a truncated copy of the text), the actions proposed and their outcomes. Credentials are kept as encrypted Worker secrets and are never exposed to the language model. Records are kept until the owner deletes them.
Sharing
Personal OS does not sell data and does not share it with third parties except the service providers needed to operate it: Google (Calendar, Gmail), Todoist, Anthropic (processing), Cloudflare (hosting and storage) and Telegram (the chat interface).
Google API Services User Data Policy
Personal OS’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing features described above, is not used for advertising, and is not sold.
Your choices
The owner can revoke Google access at any time at myaccount.google.com/permissions, and can request deletion of stored records by contacting inonrotem@gmail.com.