Privacy policy
pi-hermes is a private household assistant used only by the members of one household. This policy explains what data it uses and how.
Who can use it
Only the household that runs it. pi-hermes is not offered to the public and has no other users.
Google data it accesses
pi-hermes is authorised on a single, dedicated Google account that belongs to the household. Through Google's APIs it:
- reads messages in that account that household members have forwarded to it, and applies labels to them so it can keep track of what it has processed;
- reads events in that account's calendars and creates or updates events on that account's own household calendar.
It does not access any other Google account, contacts, Drive files or documents.
How the data is used
The data is used only to provide the assistant's features to the household: summarising dates, payments and to-dos; answering household members' questions; and keeping the household calendar and task list up to date. It is not used for advertising, it is not sold, and it is not used to build profiles for anyone outside the household.
Where it is processed and stored
- Storage: on a private server owned and operated by the household, in the United Kingdom. Encrypted backups are kept in a private cloud storage bucket in the UK (London) region.
- AI processing: to understand messages and answer questions, relevant text is sent to an AI model through a model-routing service. It is configured to use only providers that do not retain the data or use it for training.
- Task list: to-dos and reminders are kept in the household's own task-management account.
No other parties receive the data, and no person outside the household can read it.
Google API Services User Data Policy
pi-hermes's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Retention and deletion
Data is kept only as long as it is useful to the household. It can be deleted on request, and access can be revoked at any time from the Google account's security settings. Encrypted backups expire automatically within twelve months.