FamilyOS privacy policy

Last updated: 23 October 2026

FamilyOS is a private tool used only by the family that operates it. These terms describe how it handles Google user data.

What it accesses

Only the gmail.readonly scope, and only messages in Gmail labels the account owner has chosen. It cannot send, delete, label or modify email.

How the data is used

• Messages are processed on the family's own computer to create reminders and household records for that family.
• Before any message text leaves that computer, highly sensitive content is detected and withheld, and links, email addresses, phone numbers and long account-like numbers are removed. The shortened text is sent to an AI model (Anthropic Claude, under the family's own subscription) only to classify the message.
• Results are stored on the family's own computer and in the family's encrypted backups.

What it does not do

• No selling, sharing or transfer of Google user data to anyone else.
• No advertising, profiling, or use of the data to train general AI models.
• No access by anyone outside the family.

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and deletion

The access token is kept in the operating system's credential store on the family's computer. Access can be removed at any time at myaccount.google.com/permissions; derived records can be deleted by the family at any time.