Privacy Policy

Last updated: 2026-09-12

This policy covers the Grossmann family's private applications at grossmann.gr — Fred's Life Manual (manual.grossmann.gr) and the family AI platform (ai.grossmann.gr) — and the Google OAuth app they share. These are personal tools used only by members of the Grossmann family. They are not offered to the public, and nobody can sign up.

Who can use these apps

Access is limited to an allowlist of family members' Google accounts, maintained by hand. The only way onto the allowlist is to ask Fred in person.

Google user data we access

When you sign in, we read your Google account's email address, name and profile picture (openid, userinfo.email, userinfo.profile) and compare the email address to the allowlist.

Separately, and only if you explicitly grant it on Google's consent screen, a family member may let the family AI platform act on their behalf with the scopes below. These capabilities are being rolled out gradually, and none of them operate before the protections described in this policy are in place.

• calendar.events — read, create, update and delete events on your calendars, for example to put kindergarten schedules on the family calendar.
• gmail.readonly — read your email, for example to find a registration confirmation. We cannot send, modify or delete email.
• drive.file — access only the Drive files you pick or that the app itself creates.
• contacts.readonly — look up people named in schedules and messages.

You can decline any individual scope. We record which scopes you actually granted and never use one you did not grant. We do not access Google Photos.

How we use it

Google user data is used only to carry out tasks a family member asked for, such as syncing a calendar or answering a question about their own email. It is never sold and never used for advertising.

To carry out a task, relevant data may be passed to the AI model (Anthropic's Claude) running the family member's session.

If a family member opts in to letting other family members read their Google data, they can exclude specific calendars or email labels, and every such cross-person read is logged and visible to them. Nobody can write to another person's account. People do not read your Google data except with your consent, for security purposes, or where required by law.

Storage and security

Google OAuth tokens are stored encrypted with our cloud provider, Amazon Web Services, and are never handed to a browser or an AI session.

Data fetched for a task may remain in that session's history, which is visible to the family member who ran it. Cross-person reads also keep an audit record of the request and what it returned, visible to the person whose data was read.

Sharing

We do not share Google user data with third parties except the services needed to run the apps (Amazon Web Services and the AI model provider described above), or where required by law.

Revoking access

You can revoke access at any time at myaccount.google.com/permissions or by asking Fred. Once revoked, our access stops working on the next request. We keep a record that the grant existed and was revoked, so the access log stays understandable.

Google API Services User Data Policy

The Grossmann family apps' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Questions about this policy or your data: talk to Fred Grossmann, the family member who runs these apps.