Privacy Notice
Version 1.2 · Last updated 2 November 2026
P1. Who is responsible
Tomáš Adamec, Javorinka 116, 924 01 Galanta, Slovakia ("we", "us"), is the controller responsible for your personal data in Algernon. For anything in this notice, contact us at tomi.adamec@gmail.com. We have not appointed a data protection officer.
P2. In short
- Algernon reads the services you connect, keeps what it reads on our server in the EU, and sends it to Anthropic's Claude to do its work.
- Only you see your data in Algernon, apart from the cases in P7 (such as the people you share a project with). Whoever runs the server can technically read what is stored, and looks only in those cases.
- We don't sell your data, don't use it for advertising and don't train AI on it. Anthropic doesn't train its models on it and deletes it within 30 days, with the exceptions in P6.
- Your bank data is read-only, and the AI sees only the names and messages of payments it sorts, never amounts, balances or account numbers.
- When you sort a shop's payments into a category, that choice helps sort the same shop for everyone, once at least 3 users agree. Only the shop's name and category are shared, never who chose it. You can turn this off.
- You can download everything, delete what Algernon has read, and close your account yourself, at any time.
P3. What Algernon collects
From your Google sign-in: your Google account ID, email address, name and a link to your profile picture. We also record when you created your account and last signed in, your language, which version of these terms you accepted and when, and your sign-ins (each stored only as a fingerprint of the sign-in token, never the token itself).
Your invitation: the email address we invited, who invited you and when, and any AI credit that came with it.
From the services you connect:
| Service | What Algernon reads and keeps | When |
|---|---|---|
| Gmail | Every new email in your mailbox, received and sent: subject, sender, recipients, date, the text without the quoted earlier replies, the HTML version, and the message data Gmail provides with it (headers and labels). Attachments are never opened or downloaded. Newsletters and promotions are kept, but skipped when looking for tasks. | First the last 7 days (up to 40 emails), then every 15 minutes, and whenever the assistant needs fresh mail |
| Google Calendar | Events in your main calendar and in the other calendars you pick: title, description, time, and the guests' names, email addresses and roles | 30 days back to one year ahead, then changes every 15 minutes |
| Outlook Calendar | Events in your main calendar and the others you pick: subject, a preview of the description, time, organizer and attendees | 30 days back to one year ahead, every 15 minutes |
| Notion | The pages you let Algernon see: titles, text, to-dos and whether they are ticked, tables. A page's icon may be copied as a project logo. | First the pages edited in the last 30 days, then changes every 30 minutes |
| OneDrive | Folders you pick for finding tasks (and, if you choose, the folders linked to your projects): the name, folder, date and text of new and changed documents (Word, PDF, Excel, text, Markdown or CSV), kept like an email. Any other file, only when you or the assistant search for or open it: its text is read to answer you and not kept. When Algernon proposes a change to a file, it keeps the file's text and the proposed new text with that change. Every night, the names of your top-level folders and the folders directly inside them, to suggest which folder belongs to which project, and contact lists in spreadsheets to propose contacts. Off-limits folders are never read. | Picked folders every 30 minutes; other files when looked up; folder names and contact lists nightly |
| Plaud | Plaud's AI summary of each recording, with its action items, title and date. Never the audio or the transcript. | First the last 14 days, then every 15 minutes |
| Siri | Algernon never hears Siri. Your Shortcut adds the text to a Notion page, which Algernon reads like any other page. | Like Notion |
| Google Contacts, iCloud Contacts | Your contacts: name, email addresses, phone numbers, company, role and birthday | Every 30 minutes, both ways (P3, Contacts) |
| Banks, through Enable Banking or Fio | For the bank accounts you link to Wealth: the account's name and currency, balances, and each booked payment: date, amount, currency, the other side's name and account number (IBAN) as the bank gives them, the payment message and, for card payments, the merchant category code. Pending payments are not read. | First up to a year back (Fio: 89 days), then once a day |
| Interactive Brokers, Binance | Balances, holdings, trades, deposits, withdrawals and cash movements | Once a day |
To connect, each service gives Algernon access keys (tokens, or the app-specific password you create for iCloud, or the read-only keys you create for Fio, Interactive Brokers and Binance). We keep them encrypted (P11), together with the permissions each service granted, the name of the connected account where the service gives one (such as your Plaud email, your Notion workspace or your bank), your access levels, folder rules and the Notion page tasks go to, when you accepted the sending or file-changes disclaimer, how long your bank approval lasts, and the status of each sync.
Contacts. Besides your address books, Algernon proposes people named in two or more separate notes, and new details about a contact (phone, email, company, role, birthday) once two notes agree, with the passages they came from. It keeps your own notes on a contact, and when you last emailed or met them.
Fitness and food: the workouts, supplements and daily habits you log or tick, and what you ate in your own words, with its estimated calories and protein, and any targets you set.
Goals: your ratings of your life areas, your goals, what a good result looks like and why it matters to you, the actions under each goal, and your check-ins.
Wealth: what you enter or import (a workbook you upload, with the cells that don't fit kept as they were), such as your accounts, property, investments, salary, cash flows, plan and goals, your birth date and country, and the categories and choices you make about payments. Market prices and exchange rates come from public sources and contain nothing about you.
Shared projects: which projects you share and with whom, invitations (also to email addresses that have no account yet) and whether they were accepted, and who each task is assigned to.
What you type or share: tasks, decisions, notes, chat messages, instructions you write for a workspace, contacts and notes on them, workouts, food and supplements you log, text you share to Algernon from other apps, and your edits. Chat and assistant conversations aren't saved: they're sent to Anthropic to get an answer, and they're gone when you close or reload the page. The one exception is the chat of a review batch, which is kept with the batch so you can come back to it. What the assistant creates or changes for you is saved like everything else.
What Algernon creates: tasks, decisions, promises (what others owe you, and whether it looks kept), projects and their health, review batches, the daily plan, the weekly Mirror and weekly cleanup, email drafts, suggestions, goal suggestions, calorie estimates, payment categories, regular payments and spending alerts. Each task, decision and promise links to the passage it came from.
Usage records: for each AI request, which feature made it, which model it used, how many tokens it took and what it cost (not its content); and error and background-job messages in the server's logs, in which email addresses are masked. Algernon has no analytics, advertising or tracking tools. It doesn't record which pages you visit or store your IP address, and the web server keeps no log of visits.
P4. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Running Algernon for you: your account, the connections you set up and reading them, finding tasks, decisions and promises, the daily plan, the assistant, the Mirror and weekly cleanup, contacts, goals, Wealth and the spending review, shared projects, your data download, and the drafts, notes, events and contact changes you ask for | Contract, Art. 6(1)(b) |
| Fitness, food and other health data | Your explicit consent, Art. 9(2)(a); see P5 |
| Other people's information in your content, so that Algernon can work for you | Legitimate interests, Art. 6(1)(f); see P8 |
| Keeping Algernon secure and working: preventing misuse, fixing errors, backups, tracking AI cost and credit | Legitimate interests, Art. 6(1)(f): a secure, working and affordable service |
| Recording which terms you accepted, and meeting legal obligations, such as answering lawful requests from authorities | Legal obligation, Art. 6(1)(c), and legitimate interests, Art. 6(1)(f) |
| Sorting shops for everyone: counting the categories users choose for shops paid by card and well-known brands, so that a shop most of them sort the same way is sorted for all users | Legitimate interests, Art. 6(1)(f): payments that sort themselves for everyone, with fewer AI calls. You can object at any time with the switch in Wealth settings → Spending. |
We use your data for nothing else than what this table lists: no advertising, no marketing profiles, no selling, no AI training.
P5. Health and fitness data
The workouts you log, what you eat with its calories and protein, and the supplements and daily habits you tick are health data, which the law specially protects. We process them only with your explicit consent. Algernon asks for it separately from these terms, the first time you open Fitness or the calorie tracker: a short statement of what is kept, what goes to the AI and how to withdraw, with a box to tick. Until you agree, these features stay off. We record when you agreed.
This data is used for the Fitness page and the calorie tracker, for the assistant when you ask about your fitness or food, for goal suggestions, and for the weekly Mirror in each workspace where Fitness is on (by default only Personal). Like everything else Algernon works with, it is sent to Anthropic for these features (P6). What you type about food is sent to Anthropic to estimate its calories and protein.
You can withdraw your consent at any time in Settings → Features: Fitness and the calorie tracker stop, and your workouts, food and supplements are deleted at once. If you only turn Fitness off there, your consent and your entries stay, and come back when you turn it on again. You can also delete single entries on the Fitness page. Withdrawing doesn't make the earlier processing unlawful.
Your emails, notes, recordings, goals and bank payments can also hold sensitive information about you or others, such as health, beliefs, union membership or finances (a payment to a pharmacy, a church or a party, for example). Algernon doesn't look for it, but processes it as part of the text. If you'd rather it didn't, keep that content away from Algernon, for example by not sharing those Notion pages, marking OneDrive folders off limits or not linking that bank account.
P6. How AI is used
Algernon uses Anthropic's Claude models through Anthropic's commercial API. This is what Anthropic receives:
- Finding tasks, decisions, promises and people: each new email (its first 12,000 characters; newsletters and promotions are skipped), calendar event, Notion page, OneDrive document from your picked folders and Plaud summary, with its participants, your name and email address, your workspace's projects, and the open promises others made you.
- Daily plan (every morning at 6:00, and when you refresh it): your open and proposed tasks, your goals and which tasks serve them, and the titles and times of your events in the next two days.
- Assistant and chat: your messages, and whatever it looks up to answer you: emails, events, notes, recording summaries, OneDrive files, tasks, decisions, promises, projects, contacts, goals, and your fitness and food where those features are on. Preparing you for a meeting also reads the documents the invitation links to.
- Review batches: what you write in a batch's chat, with the batch's tasks.
- Projects (nightly): your projects, tasks and pending decisions, with the titles of the emails and pages they came from and short excerpts, the titles of your Notion pages, and your OneDrive folder names if OneDrive is connected.
- Weekly Mirror and weekly cleanup (Sunday evening): the mail you sent and the Notion pages edited that week, the week's record of your tasks, decisions, promises, projects and goals and, where Fitness is on, workouts and supplements; for the cleanup, your open tasks, decisions and promises and the later sources that may show them done.
- Goals: in the goal setup and when you add a goal, your goals so far with your projects, habits, finished tasks and workouts, to draft suggestions.
- Calorie tracker: what you ate, in your words.
- Spending: for payees no rule recognizes, the payee's name, up to three of its payment messages and its card category code, once per payee. Never amounts, balances, account numbers or anything else from Wealth. Nothing else in Wealth is sent to AI.
- Drafts and follow-ups: the decision or promise concerned and the text it came from.
- The instructions you write for a workspace are added to these requests.
Anthropic, PBC (USA) processes this as our service provider. Under its commercial terms, Anthropic doesn't use it to train its models, and deletes it within 30 days, except content that its automated systems flag as breaking its Usage Policy (kept for up to 2 years) or where the law requires longer.
Automated assessment. The daily plan, the Mirror, the weekly cleanup and the spending review assess your work, habits and spending automatically. Nothing Algernon does has legal or similarly significant effects on you, and no decision about you is made automatically. You can switch the Mirror, Weekly cleanup, Decisions, Waiting on, Projects, Goals, Contacts and Fitness off in Settings → Features.
P7. Who can see your data
- You. Each account sees only its own workspaces.
- People you share a project with, once they accept: the project's name and description, its tasks with their notes, dates and assignees, and your name, email address and profile picture. Before they accept, they see only the project's name, description and number of open tasks. They see nothing else of your account. In a project someone shares with you, the same applies the other way.
- The admin, only your account details. The admin (Tomáš Adamec) sees, for every account, its name and email address, when it joined and last signed in, how much AI credit it has and has used, and what its AI use cost per day and per feature. The app gives the admin no way to open your account or see your workspaces, mail, notes, finances or anything else Algernon keeps for you.
- Us, as operators of the server. Whoever runs the server holds the keys. Your content is stored encrypted (P11), but the running server must decrypt it to work for you, so whoever runs the server can still reach it. We look at it only when you ask us to, to investigate a security problem, or when the law requires it.
- Our service providers, who may use your data only to provide their service to us:
- OVHcloud SAS (France), which hosts our server;
- Anthropic, PBC (USA), which runs the AI (P6);
- Microsoft (OneDrive), where we keep monthly backups of the server;
- GitHub, Inc. (USA), where we build and run the server's maintenance tasks; its records of those tasks can contain short extracts of the server's error messages, with email addresses masked;
- Resend, Inc. (USA), which sends Algernon's own emails, such as invitations.
- Other users, only shared shop categories. If at least 3 users put a shop paid by card into the same category, other users' payments at that shop get that category. They see the category, never who chose it or how many people did. Payments to people, account numbers, messages and amounts are never part of this.
- Enable Banking Oy (Finland), a licensed account-information service provider supervised by the Finnish Financial Supervisory Authority, which connects your banks. You approve its access at your bank, and its own terms and privacy notice apply to that.
- The services you connect receive what Algernon writes to them for you: drafts, events, notes, contact changes, file changes and the emails you confirm. When you edit an event with guests in the form, Google or Microsoft emails the guests. The services' own privacy terms apply.
- AI apps you connect yourself, such as Claude or ChatGPT (Settings → Use Algernon in AI apps): what they ask for while you use them, from the features you have on, including payments and balances. You choose each app, sign it in and can disconnect it any time; what it receives is handled under that app's own terms and privacy notice, not ours. Algernon never connects one on its own.
- Market-data providers (EODHD, Binance's public prices, the European Central Bank, Eurostat) receive only the names or codes of instruments and currencies, never anything about you.
- Authorities, only when the law requires us to hand over data.
Nobody else. We never sell or rent your data.
P8. Other people in your data
Your emails, calendars, notes, recordings, contacts and bank payments contain information about other people: senders and recipients, guests, people who are mentioned or recorded, your contacts and their birthdays, and the people and businesses you pay or who pay you. Algernon processes it only to work for you, for example to know who promised what, to keep track of what others owe you, to prepare you for a meeting, to remind you of a birthday or to sort your spending. Algernon never contacts them on its own: an email goes out only when you confirm it, and a calendar guest is emailed only when you edit their event in the form. We don't use their information for anything else.
- If you use Algernon for your private life, this is part of your own personal use.
- If you use it for work, your organization may be responsible for the information about the people you work with. Make sure it allows you to connect your work accounts. If it needs a data processing agreement with us, contact us.
- If you share a project, the people you share it with see its tasks, which may name other people.
If you are not an Algernon user and you have emailed, met, paid or been recorded by someone who is, or you are in their contacts, information about you may be kept in their account as described above. You can exercise your rights (P12) by contacting us at tomi.adamec@gmail.com. We may need the user's help to find the data, and we'll weigh your request against their rights.
P9. Where your data is stored
Your data is stored on our server at OVHcloud in the EU, with daily copies on the same server and a monthly backup of the whole server in our Microsoft OneDrive.
Anthropic processes the data it receives in the USA, and GitHub, Microsoft and Resend may process data in the USA too. These transfers are protected by the EU Standard Contractual Clauses in their data processing terms and, where the provider is certified, by the EU–U.S. Data Privacy Framework.
Enable Banking processes bank data in the EU. The services you connect store your data under their own terms, which may include countries outside the EU.
P10. How long we keep it
| Data | Kept |
|---|---|
| Your account details, and which terms you accepted | Until your account is closed |
| What Algernon read from your services, and what it found in it | Until you delete it in Sources → What has been read, or close your account. Edited notes, documents and changed events are kept as versions. Deleting a source deletes all its versions and the tasks, decisions and promises found in it. Text Algernon wrote about it elsewhere, such as a Mirror review or a project summary, stays until you ask us or close your account. |
| Contacts | Until you delete them or close your account. A contact that is in your Google or iCloud address book is deleted there, and then disappears from Algernon at the next sync; closing your account leaves your address books as they are. |
| Workouts, food and supplements | Until you delete them, withdraw your consent (P5) or close your account |
| Goals and check-ins | Until you delete them or close your account |
| Wealth: figures, imports, bank payments, holdings and payment categories | Until you choose Wealth → Delete all Wealth data, or close your account |
| Shared shop categories | The list holds only shop names, categories and how many choices back each one, with older choices counting less. It never says who chose. Your choice stops counting as soon as you change it, turn sharing off, delete your Wealth data or close your account. |
| Shared projects | Until the owner deletes the project. If its owner closes their account, the project stays with its members (Terms 10.1). |
| Review batches, with their chat | Until your account is closed |
| Emails and file changes on Waiting for your OK, whether sent, made or discarded | Until your account is closed |
| Sign-ins | You stay signed in for 30 days. Expired sign-ins are deleted every night, and all of them when your account is closed. |
| AI usage records | Until your account is closed |
| Invitations | Until they are used or withdrawn. An invitation you sent stays valid after you leave, without your name on it. |
| Daily database copies | 14 days |
| Monthly server backups (in our OneDrive) | 3 months |
| Server logs | Overwritten automatically once they reach about 50 MB, usually within a few weeks |
| GitHub's records of maintenance tasks | 90 days |
| At Anthropic | Up to 30 days, or up to 2 years if flagged (P6) |
When you close your account, everything in it is deleted at once, except shared projects that stay with their members (Terms 10.1). Before that, Algernon withdraws its access at Google, Notion, Plaud (where Plaud allows it) and Enable Banking. Deleted data drops out of the daily copies within 14 days, and out of the monthly backups within 3 months. Until then it stays in them, but is never restored: we keep a list of deleted accounts (only their internal ids) outside the database, and if we ever have to restore a backup, Algernon deletes those accounts again before it starts. For Microsoft, iCloud, Fio, Interactive Brokers, Binance and a Notion key you pasted in, Algernon deletes its copy of the key, but the access stays active at the service until you remove it there; the deletion screen lists which.
P11. Security
- Algernon can only be reached over HTTPS, through a web proxy. The server accepts only web traffic and key-based admin logins, and installs security updates every night.
- Sign-ins are stored only as fingerprints (hashes), so a copy of the database can't be used to sign in.
- The access keys for your connected services, banks and brokers are stored encrypted (AES-256), with the key kept outside the database and its daily copies, so a copy of the database opens nobody's mail, files or accounts on its own.
- Your content is also stored encrypted (AES-256), field by field, with a second key. That covers what Algernon read (titles, text, participants), the tasks, recurring tasks, decisions, promises, projects, goals, plans, Mirror reviews, weekly cleanups and review chats it keeps, your contacts and proposed contact details, the names of workouts, foods and supplements, emails and file changes waiting for your OK, your workspace instructions, and everything in Wealth, every amount, payee, account number and payment message included. The keys are kept on the server outside the database and its daily copies, so a copy of the database reveals none of your content on its own. This protects copies of the data. It isn't end-to-end encryption: the running server decrypts your content to work for you (P7), and AI requests carry it as P6 describes.
- Each account's data is kept separate, and every request is checked against the signed-in account. Wealth is visible only to its own account.
- For Gmail and OneDrive, Algernon asks only for the permissions your chosen access level needs. Google has no drafts-only permission, so at Read and write drafts Algernon holds a permission that could also send mail. The code refuses to send with it unless you have switched sending on and confirmed that one email.
- Sending an email or changing a OneDrive file is blocked in the code unless you have confirmed that one item.
- Bank, broker and Binance connections are read-only; a Binance key that can trade, withdraw or transfer is refused.
- Error messages in the server's logs keep only what's needed to find a fault, with email addresses masked.
- No system is completely secure. If a breach puts your data at risk, we'll tell you and the data protection authority as the law requires.
P12. Your rights
You have the right to:
- see the data we hold about you and get a copy of it;
- have it corrected;
- have it deleted;
- have its use restricted;
- get it in a machine-readable format, to take it elsewhere;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, for example for health data (P5);
- complain to a data protection authority: in Slovakia the Úrad na ochranu osobných údajov Slovenskej republiky (dataprotection.gov.sk), in Croatia the Agencija za zaštitu osobnih podataka (azop.hr), or the authority where you live or work.
You can do most of this yourself:
- Settings → Your data → Download my data gives you everything in your account as readable files (JSON), in one ZIP. It never contains your access keys, and from a project someone shared with you, only the tasks assigned to you.
- Settings → Your data → Delete account deletes your account (Terms 10.1).
- Delete what was read in Sources → What has been read, workouts and food on the Fitness page, contacts that are only in Algernon on the Contacts page (the others in Google or iCloud), and all your Wealth data on the Wealth page.
- Disconnect services in Sources, and switch features off in Settings → Features.
For anything else, email tomi.adamec@gmail.com. We'll answer within one month, or within three for complex requests, in which case we'll tell you. It's free. We may ask you to confirm your identity.
P13. Cookies
Algernon uses only the cookies it needs to work. There are no analytics, advertising or third-party tracking cookies.
| Cookie | What for | How long |
|---|---|---|
session | Keeps you signed in | 30 days |
workspace | Remembers which workspace you have open | 1 year |
login_nonce | Protects the Google sign-in | 10 minutes |
notion_oauth, onedrive_pkce | Protect connecting Notion and OneDrive | 10 minutes |
Your Google profile picture is loaded from Google's servers.
P14. Google user data
Algernon's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Gmail, Calendar and Contacts data is used only to provide the Algernon features you see and use;
- it is transferred only to Anthropic, to provide those features, and otherwise only where needed for security or required by law;
- it is never used for advertising;
- no one reads it unless you have agreed to that for specific data, or it is needed for security or to comply with the law;
- it is never used to train general AI or machine-learning models.
P15. Children
Algernon is only for adults (18 and over). If you think a child has an account, tell us and we'll close it.
P16. Changes to this notice
We'll update this notice when Algernon or the law changes, and tell you about important changes before they apply, in Algernon or by email. The date and version at the top show the current version.
P17. Contact
Tomáš Adamec · Javorinka 116, 924 01 Galanta, Slovakia · tomi.adamec@gmail.com