Why you can trust me

Big Sister OS is made by Aloyse Design LLC, founded by Aloyse Brown. It's a small company with a simple idea: you're carrying too much, and software should carry some of it — without asking you to hand over control to get the help.

There's no big data operation behind this. There's no plan where your information is the product. The business works the ordinary way: you pay for the help, and that's the whole transaction.

Questions, worries, or just want to know who you're talking to? Write to aloyse@big-sister-os.com. A real person answers. The longer story of why this exists is on the About page.

When you share something with me — a worry, a plan, a fact about your life or your business — it's saved in your own account in our database. That's it. It isn't pooled with other people's data, sold, or used to build profiles.

One more thing, because this page doesn't do fine print: Lovable, the platform this app runs on, counts page visits — how many people came, and to which pages. That's traffic, not content, and the counting doesn't know who you are: no name, no account, no email — each visit is just a random tag that erases itself after half an hour. Nothing you tell me is in it.

You, and only you — unless you invite someone.

Every record in the database is locked to your account at the database level. That's not a policy we promise to follow; it's a rule the database itself enforces on every single request. Even a bug in the app can't hand your rows to another user, because the database refuses.

If you create a Shared Circle — for your family or your team — the things you deliberately place in that circle are visible to the people you invited, and nothing else is. Sharing is always an action you take, never something that happens to you.

I think out loud with the help of AI models. Here's exactly what that means, because you deserve the specifics:

What leaves the app: when you send me a message, that message — plus the context I need to answer well, like your approved memories and the task we're discussing — is sent to an AI model to generate my reply.

Where it goes: to Google's Gemini models. Usually straight to Google; sometimes through Lovable's AI gateway (the platform this app is built on), which passes it to the same Google models. If you've connected your own AI account (Claude, ChatGPT, or Gemini), yours is used first.

What doesn't leave: your account as a whole. Each request carries only what's needed for that reply — never your full history, and never memories you haven't approved.

Web search: if I offer to look something up and you say yes, that search question goes to a search service. I never search on my own initiative.

What the providers do with it: we use Google's paid API, whose terms state that your prompts and my replies are not used to train or improve their models — they're kept only briefly, to detect abuse. When the Lovable gateway carries a request instead, Lovable passes it through without storing it. Their policies, if you want to read them yourself: Google's Gemini API terms · Lovable's privacy policy.

This is the deepest rule I have, and it's built into the code, not just the copy:

Anything I draft, plan, or recommend lands as a proposal you can approve, change, or toss. I never send anything to the outside world on my own.

When I notice a fact about your life in conversation — "her daughter's name is Maya" — I don't just quietly file it. It waits as pending until you approve it. Until you do, I don't use it, and it doesn't appear anywhere.

You're never managing me. You're deciding, and I'm doing.

Your calendar feed is one-way. I publish a feed you can subscribe to from your own calendar app, at a private link only you have. Reading is all that link can do — nothing can write to your calendar through it, and you can get a fresh link any time, which shuts off the old one instantly.

Your own AI key, if you add one, is stored encrypted (AES-256, the standard serious systems use) and is never shown back to you or anyone — not even in your own settings. You'll only ever see whether it's working.

Any single memory, task, or plan can be deleted any time, right where it lives.

And if you want to leave entirely: Delete my account, in your settings, removes everything — memories, tasks, plans, conversations, calendar events, contacts, circles you own, connections, and the account itself. Not hidden, not archived. Gone.

Your card details go to Stripe, the payment company, and only to Stripe. They never pass through or rest in this app. I can see that you have a subscription; I can't see your card.

This page is written and maintained by us — Big Sister OS. It's a promise, kept in code, not an independent audit or certification. You won't find compliance badges here, and we won't say "bank-grade" anything. What we'll do instead is tell you plainly what the software does, keep this page current when that changes, and answer when you write.

One address for both: aloyse@big-sister-os.com.

If you've found a security problem, tell us there first — you'll get a reply from a person, and a fix, not a form letter.