Privacy Policy

Account information. Your email address and name when you sign up. If you sign in with Google or Apple, we receive your name, email, and profile identifier from them — sign-in only. We do not request access to your Gmail, Google Drive, Google Calendar, or any other content in those accounts.

What you tell Big Sister. This is the heart of the product, so we're specific: the memories, facts, tasks, plans, calendar events, business details, and conversations you share. This can include sensitive things — family details, children's schedules, health notes — and information about other people, such as contacts' names and details. All of it is stored in your own account, visible only to you (see Section 3).

Documents you link. If you paste a link to a document (for example, a Google Doc), we fetch that document's contents to do the work you asked for. We only ever fetch links you provide.

Payment information. Handled entirely by Stripe. Your card number never passes through or rests in our systems; we see only your subscription status.

Your own AI key, if you connect one. Stored encrypted (AES-256) and never displayed back to anyone, including you.

Site analytics. Lovable, the platform this app runs on, counts page visits — how many people came, to which pages. It's traffic, not content: no name, no email, no account identity; each visit carries a random tag that erases itself after half an hour.

We do not collect precise location, advertising identifiers, or biometric data, and we place no advertising trackers.

• To do the work you ask for — remembering, planning, drafting, organizing.
• To generate Big Sister's replies with AI (details in Section 4).
• To process your subscription through Stripe.
• To keep the service secure — verifying sign-ins, validating requests, preventing abuse.
• To answer you when you contact support.

We do not use your information for advertising, we do not sell it, and we do not use it to train AI models.

You, and only you — unless you deliberately share it. Every record is locked to your account at the database level, enforced on every request by the database itself, not just by app code.

If you create a Shared Circle, the items you deliberately place in that circle are visible to the people you invited, and nothing else is. Sharing is always an action you take.

Information about other people. You may store details about family members, clients, or contacts. That information gets the same protection as everything else: locked to your account, never sold, never used to contact those people. Please only share others' information as you'd want yours shared.

When you send a message, that message — plus the minimum context needed to answer well, such as your approved memories and the task being discussed — is sent to an AI model to generate the reply. Each request carries only what's needed for that reply, never your full history.

Where it goes: Google's Gemini models, via Google's paid API — whose terms state that prompts and replies are not used to train or improve their models and are retained only briefly to detect abuse. Some requests travel through Lovable's AI gateway to the same Google models; Lovable passes them through without storing them. If you've connected your own AI account (Claude, ChatGPT, or Gemini), yours is used first, under that provider's terms.

Web search: if Big Sister offers to look something up and you say yes, the search query goes to a search service (Firecrawl, via Lovable). She never searches on her own initiative.

She never acts alone. Anything Big Sister drafts or plans lands as a proposal for your approval. Nothing is sent to the outside world without your yes. Facts she notices in conversation wait as pending until you approve them — until then they aren't used and don't appear anywhere.

We share data only with the companies that make the service run, only for that purpose:

Their own policies, if you want to read them: Google's Gemini API terms · Lovable's privacy policy · Stripe.

Beyond these: we disclose data only if the law genuinely requires it, and if the company is ever sold or merged, this policy's promises travel with your data — whoever takes over is bound by them or must get your consent to change them.

Until you delete it. Delete any single memory, task, or plan right where it lives — or delete your whole account in settings, which removes everything: content, connections, circles you own, your encrypted AI key, and the account itself. Immediately, completely, no archive, no undo.

One thing persists outside our systems for legal reasons: Stripe keeps transaction records as financial regulations require.

• See everything: all your data is visible in the app — there is no hidden copy.
• Fix anything: edit or remove any item directly.
• Delete everything: self-serve, in settings, described above.
• Sharing is optional: leave a circle, or delete one you own, any time.

Depending on where you live, you may have additional rights under your state or country's privacy laws. Email aloyse@big-sister-os.com and we'll honor what applies — you won't need to cite the statute.

Big Sister is for adults and is not directed to anyone under 18. We don't knowingly collect information from children. Parents naturally store information about their children — schedules, school notes — as part of their own account; it's protected like everything else and used only to help that parent.

Every record is access-locked to your account at the database level. Data is encrypted in transit. Connected AI keys are encrypted with AES-256. Payment details never touch our systems. Webhooks and public endpoints authenticate their callers. No system is perfect, and we won't pretend otherwise — if a breach ever affects your data, we will tell you plainly and quickly.

Found a security problem? aloyse@big-sister-os.com — you'll get a person and a fix, not a form letter.

When this policy changes, we'll update the date at the top and note what changed. For meaningful changes — anything that expands what we collect or who touches it — we'll tell you directly in the app or by email before it takes effect. We will never retroactively weaken a promise about data you've already shared.

Aloyse Design LLC · aloyse@big-sister-os.com