Privacy Policy

About This App

Bruce is a private household AI application built exclusively for personal family use by the Johnson family. It is not a commercial product and is not available to the general public. Access is strictly limited to invited household members who have been granted access by the app administrator.

Google Data We Access

Bruce integrates with Google services to provide functionality requested by household members. The following Google data is accessed:

Google Calendar

Bruce requests read and write access to Google Calendar. This access is used to read calendar events to surface relevant scheduling context in conversations, and to create, update, and delete calendar events when explicitly requested by the user. No calendar data is accessed without an explicit user request.

Gmail

Gmail — full access. Used to read, search, and summarize email when requested. Bruce can compose and send emails, reply to threads, and archive or delete messages on your behalf. Bruce always shows you a preview and asks for confirmation before sending, replying, or deleting any email. Bruce never accesses your email without an explicit request.

Google Drive

Bruce requests read and write access to Google Drive, scoped to a Bruce-specific folder that the app creates and manages on the user's behalf. This access is used to store files referenced in conversations and to read documents the user shares with Bruce within that folder. Bruce never accesses, reads, modifies, or deletes files outside the dedicated Bruce folder it creates.

Google Profile

Bruce reads the user's Google account name and email address. This information is used solely for authentication and to identify the user within the household app. No profile data is used for any other purpose.

How We Use Google User Data

Google user data accessed by Bruce is used exclusively to provide the features described above, on behalf of the authenticated user who requested them. Specifically:

• Data is never shared with third parties.
• Data is never used to train AI models, including the AI models that power Bruce.
• Data is never sold, licensed, or transferred to any other party.
• Data is never used for advertising or any commercial purpose.
• Google API data is used only to fulfill the specific user action that triggered the API call, and is not stored beyond what is necessary to complete that action.

Data Storage and Security

All application data is stored in a private Supabase database hosted in the United States. The database enforces row-level security at the database level — each user's data is isolated and inaccessible to other household members. No household member can read, access, or modify another member's private data, conversations, or files.

Google OAuth tokens (access tokens and refresh tokens) are stored securely in the database and are used only to make API calls on behalf of the authenticated user who granted the token. Tokens are never exposed to the client application and are accessible only to server-side processes running on behalf of the user.

Conversation history is stored in the database and is private to each individual user. No household member can access another member's conversations.

Data Retention and Deletion

Conversation history and associated data is stored until the user explicitly deletes it. Users can delete individual conversations at any time from within the app.

Users who wish to delete all of their data, including their account, stored conversations, and associated Google tokens, may contact the app administrator using the contact information below. Upon receiving a deletion request, the administrator will deactivate the account and initiate permanent deletion of all associated data within 30 days.

If a user's account is deactivated or an invite is revoked, their data enters a 30-day holding period before permanent deletion.

Children's Privacy

Bruce is not designed for or directed at children. Household member accounts are limited to adults and teenagers who are members of the Johnson household. Children in the household do not have accounts and do not provide any data to Bruce.

Changes to This Policy

If this privacy policy changes materially, household members will be notified by the app administrator. Continued use of Bruce after a policy update constitutes acceptance of the updated terms.

Contact

Questions about this privacy policy or requests to access, correct, or delete your data should be directed to:

Jake Johnson, Administrator
johnson89jake@gmail.com