← macpherson.ai

Privacy Policy

Last updated: 29 May 2026

Who we are

MacMind is a personal, family-use AI assistant operated by Stephen Macpherson ("we", "us"). MacMind is not a commercial product. It is used by Stephen Macpherson and members of the Macpherson household to coordinate calendars, news briefings, energy management, and home automation.

You can contact us at [email protected].

Who this policy covers

This policy describes how MacMind handles personal data for users who connect their Google account to MacMind via the MacMind Google OAuth application (client ID 938121701027-…, hosted at macmind.macpherson.ai).

In practice, the only users are members of the Macpherson household.

What data we access

When you connect your Google account to MacMind, we request the following scopes:

• auth/calendar.readonly — read-only access to the calendars in your Google account. We use this to fetch upcoming events so MacMind can include them in your morning briefing, surface schedule conflicts, and inform automation (e.g. "leave for the airport in 30 minutes").
• auth/userinfo.email — your email address, used to associate the calendar with your MacMind user record.
• auth/userinfo.profile — your name and profile picture, used for personalising MacMind's responses ("Good morning, Stephen").
• openid — authenticate that the OAuth flow originated from a Google account you control.

We do not request write access to your calendar, your email, your contacts, your files, or any other Google service. MacMind cannot create, modify, or delete calendar events.

How we store your data

• Calendar events are stored in a PostgreSQL database running on a private home server. The database is not exposed to the public internet.
• OAuth refresh tokens are encrypted using a Fernet symmetric key before being written to the database. The encryption key is held only on the MacMind server.
• Logs of calendar sync activity are kept on the same private server in rotating log files for diagnostic purposes.

We do not store your Google account password. We only store OAuth tokens that allow us to read calendar data on your behalf.

How we use your data

Calendar event data is used exclusively for the following purposes within the MacMind system:

• Generating personal daily briefings (MacTimes newspaper, morning briefing, evening summary) for household members
• Detecting schedule conflicts and suggesting resolutions
• Triggering home automation cues (e.g. switching off appliances before travel, pre-cooling rooms before meetings)
• Surfacing upcoming events through internal Discord and web dashboards visible only to household members

We do not sell, share, transfer, or otherwise disclose your calendar data to any third party. We do not use your data for advertising, model training, or any purpose other than the household-facing features above.

How we share your data

We share your data with:

• Anthropic — limited summaries of your daily schedule are sent to Anthropic's Claude API for the purpose of composing personalised briefing text. Anthropic's data handling practices apply; see anthropic.com/legal/privacy. We do not send raw refresh tokens or authentication credentials to Anthropic.
• No other third parties.

How long we keep your data

• Calendar events are retained indefinitely while you remain a connected user, to support historical context (e.g. "you had a flight on this date last year").
• OAuth tokens are kept until you revoke access or we rotate them.
• Logs are rotated and deleted after 30 days.

You can request immediate deletion of all your calendar event data and revocation of all your OAuth tokens at any time by emailing [email protected]. We will delete on request within seven days.

You can also revoke MacMind's access to your Google account at any time without contacting us, via myaccount.google.com/permissions.

Google API Services User Data Policy

MacMind's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Security

• The MacMind server is behind a Cloudflare tunnel; the underlying server is not directly exposed to the public internet.
• OAuth refresh tokens are encrypted at rest with Fernet symmetric encryption.
• Access to the server requires SSH key authentication.
• We do not promise that these controls are sufficient against every possible attack. MacMind is a personal-use system; it is not subject to commercial-grade security audits.

If you become aware of a security issue, please email [email protected].

Children's privacy

MacMind is not directed at children under 13 and we do not knowingly collect data from children under 13. Members of the Macpherson family under 13 who appear in shared calendars are referenced only by first name and the calendar event's existing fields; no additional information is collected about them.

Changes to this policy

We may update this policy. The "Last updated" date at the top of this document indicates when changes were made. Material changes affecting how data is shared or stored will be communicated to connected users by email.

Contact

For questions about this policy, or to request deletion of your data, email [email protected].