Your information

Privacy policy

Last updated October 6, 2026

Emma is privately maintained for its individual owner's personal use on owned devices. This policy covers Emma's personal-assistant build and its information pages at emmasec.com. Google access requires the owner's explicit consent in the Mac app.

Data Emma accesses and why

• Google Calendar: calendar names, identifiers, colors and time zones, and selected event titles, times, recurrence and status. These support the daily view, reminders and appointment debriefs. With confirmation, Emma creates a designated secondary calendar and adds or removes its own entries there; it does not write to the owner's other calendars.
• Google Tasks: selected list names and task titles, due dates and completion status, to display outstanding work. Access is read-only.
• Gmail metadata: message and thread identifiers, labels, timestamps and selected headers: From, To, Subject, Date, Message-ID, In-Reply-To and References. These support tentative follow-up suggestions over a chosen time window. To determine message dates without Gmail search access, scans may inspect headers of older messages too; the chosen window limits retained suggestions. Emma does not request email bodies, attachments, sending or deletion access. Metadata permission is account-wide; selecting labels limits Emma's requests rather than Google's underlying permission.
• Phone calendars and answers: Android reads selected locally synchronized calendars for reminders, and accepts text the owner explicitly submits. It uses a verified Mac public key to encrypt submitted answers. This version stores them pending future delivery and cannot reopen or transfer them.
• Project and routine information: selected project scoreboards, reminder preferences, submitted check-ins and limited operating state support the owner's dashboard and routines.

Storage and transfers

The personal Mac build keeps its working data encrypted locally. Authorization credentials use protected macOS credential storage; Google requests use HTTPS. Owner-exported backups are encrypted and require a separate recovery secret. Those backups do not include Google sign-in tokens.

Answers are encrypted on the phone so only the owner's Mac can open them.

Emma does not operate a central account-data server. Google receives the API requests needed for enabled features, including confirmed entries in Emma's calendar. No Google account content is sent to this website, advertising services, data brokers or AI/model services. Google data is not sold, used for advertising, or used to train generalized AI models.

Emma follows the Google API Services User Data Policy, including its Limited Use requirements. New data uses or transfers require updated disclosures and consent before they begin.

Retention, revocation and deletion

Working snapshots are refreshed or cleared when account/source settings change. Local answers, routine history, pending calendar drafts, calendar-write receipts and owner-created encrypted backups may remain until deliberately removed. Calendar drafts and receipts can include event titles, times and calendar/event identifiers. Sealed phone answers have no seven-day expiry: the queue refuses new saves at its capacity limit instead of deleting existing entries.

The owner can stop Emma, disconnect Google in Connections, or revoke access through Google Account connections. Revoking permission stops future access; it does not erase previously saved local data or backups. Disconnecting Google clears Emma's current Google working snapshot, mail-scan progress, and Google access and refresh tokens. Desktop client configuration and selected source identifiers remain. Retained answers, calendar drafts and write receipts, and prior backups need separate removal.

Deletion of the private store or phone app data and separately retained backups must be deliberate. Uninstalling the phone app or clearing its storage loses undelivered answers; this build has no answer export. Normal file deletion does not guarantee forensic erasure of device or backup copies.

Limits and outside tools

Encryption does not protect information already visible on a compromised unlocked device. The chosen keyboard, dictation tool, operating system and Google services have their own data practices. Emma cannot guarantee reminder delivery, complete scans or security against every vulnerability. Development tests are not an independent certification.

These pages and contact

These static pages include no analytics, advertisements, forms or cookies. Cloudflare Pages hosts these static files. Its hosting and security services process requests and may retain technical data, including IP address, requested page and time, under their own settings and policies. This policy does not describe unrelated pages elsewhere on the domain.

For privacy questions, use the developer support address displayed on Emma's Google consent screen. Because Emma is privately operated for its owner, there is no public user account or customer support service.