Privacy policy

Last updated: October 29, 2026

This policy describes the current household deployment of Family Assistant. The application is operated for private use by its operator and invited family members. This informational website is separate from the private assistant.

Google data accessed

• Google Calendar: authorized calendar events, including identifiers, titles, start and end dates or times, and locations. The calendar API may also return additional event metadata during workflow execution. The chat integration uses a reduced set of event fields.
• Gmail: the authorized sender account and the recipients, subjects, message bodies, and delivery responses associated with agenda emails. The current briefing workflow sends mail; it does not search or summarize inbox messages. The permissions granted to the Gmail connector may be broader than this workflow's actual use, as shown on Google's consent screen.
• Authorization credentials: OAuth access and refresh tokens used by n8n to maintain the account connections.

How data is used

Calendar data is used to answer family scheduling questions and prepare daily agenda emails. Gmail access is used to deliver those emails to configured recipients. Connected Google data is not sold, used for advertising, or used by the operator to train or fine-tune AI models. The configured local model generates answers from supplied context without a training step.

Processing and disclosure

Open WebUI, n8n, and the Gemma model run on the operator's Windows computer. Calendar information can be passed to the local model when answering a chat request. The current formatted email briefing does not require an AI model.

Google receives API requests and processes email delivery. Briefing contents are disclosed to the configured email recipients and their email providers. Remote access to the private assistant uses Tailscale. The public information pages are hosted separately by Cloudflare, which may process ordinary website request data such as IP addresses and browser information to deliver and secure the site. No calendar data or OAuth credentials are intentionally included in these public pages.

Storage and access

n8n stores its workflows and encrypted connection credentials in persistent local storage. Workflow execution records may contain calendar data and email contents. Open WebUI chat histories may retain calendar results and generated answers. The operator administers the computer and services and can access their stored data. Local backups, if made, may contain copies of those records.

Briefing emails are also retained by the sending account and recipient mailboxes according to those accounts' settings. Deleting a local workflow record does not delete delivered emails.

Retention and deletion

No single automatic deletion period is specified for all records. Local records remain until removed by configured service retention settings or by the operator. Any backups remain until separately replaced or deleted. Users may ask the operator to remove local connection credentials, chat histories, or workflow records. Delivered emails must be removed separately from the relevant mailboxes.

Revoking Google access

Account holders can revoke Family Assistant's access through their Google Account third-party connections. Revocation prevents further authorized access through that connection but does not automatically erase previously stored records. The operator can also remove the corresponding n8n credential and disable affected workflows.

Google API data policy

Family Assistant's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Changes and contact

This policy will be updated before adding materially different uses, such as inbox summarization or calendar modification. Changes will be communicated to the affected family users.

For questions or data-deletion requests, contact the operator at nate15921@gmail.com.