Staying safe

Nothing sends, spends, or changes without you.

This page tells you what we aim for. It is not a promise of results. We will rewrite it to match what is live and tested when the service opens.

Trust

Four things we build around.

You say yes to the big steps

Sending, buying, and changing things stop and wait for you. How yes works

Your own Drive

You can turn on a daily copy of your information in your own Google Drive. Your information

A record of what happened

Everything it did is kept in a record you can open. Connected accounts and Drive

Costs you can see

You see what is set aside first, then what was used. Credits

How we think about it

  • We plan for things to go wrong. Files, web pages, and AI answers can not be fully trusted. A helper can be fooled by words it reads. So anything that can act needs your yes first.
  • Each job gets only what it needs. A helper gets the access a job needs and nothing more.
  • It asks before it acts. Riskier things, like sending or buying, stop and wait for you.
  • Your private words stay out of our records. Our own records are built to hold none of what you write.
  • The apps stay simple. The apps on your device keep no secrets. The protected work happens on our computers.

What we do not promise

No outside group has checked or approved our work, and we do not say they have. We do not say we meet any specific law or standard. Our legal pages are drafts, and a lawyer has not finished reading them.

Nothing is released yet. Some of what is built is still being tested, and we say so when it matters.

Your information, in short

  • Where it lives. Your account information is stored on our servers, kept apart for each person and each profile.
  • Daily Google Drive export. This is your choice, and it is Off until you turn it on. When it is on, a copy goes to your own Drive every day. You can also download or delete everything.
  • Every choice starts Off. Every optional switch starts Off. That includes the Drive copy, usage counting, crash reports, notifications, personal touches, and Google linking. You choose the first time you open the app, and you can change it in Settings.
  • Children. People under 18 cannot create their own account. A parent can add a child profile with strict rules. It has no screen-watching memory, no usage counting, no personal touches, no connected accounts, no sharing outside the family, and no open chat. See child safety.
  • Screen-watching memory. Opt-in, for adults only, and never on a child profile. Screens can show other people, so the app explains this first.
  • Password Manager. Your passwords are locked on your own device. We cannot read them.
  • Deleting your information. Every place your information is kept has a way to delete it, and one account deletion runs them all.

Read the details

Your information

What is kept, what is your choice, and what you can take with you.

Report a safety problem

Email docmoates@gmail.com. A separate address for this and set reply times are not ready yet.