Privacy Policy

Your data stays under your control.

Last updated: 2 October 2026

This policy describes Marcus Personal AI, a private application being developed for its single owner, Marcus. The application runs locally on the owner's Windows device. This public website provides information; it is not a hosted personal-data service.

1. Information and purpose

The planned Google integration uses account identity information to verify and bind the authorised account, read-only events from calendars the owner owns, and allowed Gmail metadata such as message headers and labels. Its purpose is private daily planning, commitments and reminders.

Gmail bodies, snippets, raw MIME messages and attachments are excluded. The integration does not send, modify or delete Gmail messages or write calendar events. Only fields needed for an authorised feature may be collected.

2. Local storage and credential protection

Personal records are intended to be processed and retained locally in the owner-controlled Personal Core. When Google credentials and tokens are provisioned, the reviewed local setup protects them using Windows user-bound DPAPI custody. Credentials and tokens are not placed on this website, in public source files, in chats or in language-model prompts.

This website cannot access the local Personal Core, local credentials or the owner's Google account.

3. Sharing and AI use

No Google personal data is currently disclosed to an external language model. Future disclosure of a minimised projection requires a separately approved owner policy, accurate privacy disclosures before use, and compliance with Google's permitted-use and security requirements. Owner approval alone does not override those requirements.

Personal data is not sold, used for advertising or used to train general-purpose AI models. AI systems may propose information or actions; the owner-controlled Core and approval process determine what becomes accepted state or an external action.

Marcus Personal AI's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

4. Retention and minimisation

No real Calendar or Gmail records are currently retained. Before real collection is enabled, the owner must approve the minimum necessary fields and a retention and deletion procedure that reflects the actual local implementation. Data may be kept only for its approved purpose and necessary lifecycle; this policy does not promise an unimplemented fixed deletion deadline.

Deleting an active local record does not establish deletion of separately retained backup copies. Any such copies require their own reviewed handling. Retention practices and this policy must be updated before a change in data use.

5. Revocation and deletion

The owner can withdraw Google's grant through Google Account third-party connections. Revoking that grant stops authorised provider access, but does not itself delete previously retained local records.

To request local deletion, correction or removal of credentials, contact the address below. Requests are handled by the owner using the reviewed local procedure, with its scope and any backup limitations checked before claiming completion. Removing local credentials alone does not revoke the Google-side grant.

6. Website delivery

These two static pages contain no login, forms, JavaScript, analytics code, advertising trackers or application cookies. They do not collect Calendar or Gmail information.

Cloudflare serves the pages and may process visitor IP addresses and request metadata for delivery and security under its Privacy Policy. No claim is made that the hosting platform keeps no operational logs.

7. Privacy contact and updates

For privacy questions, correction, revocation or deletion requests, contact privacy@marcuspersonalai.com. This address is monitored by the owner.

This policy will be updated when the actual data practices change. New access or external disclosure is not authorised merely by publishing a policy update.