Privacy Policy

Last updated: September 4, 2026

Joan Personal Assistant (“Joan”) is a private personal assistant application intended only for the personal use of its owner. This policy explains how Joan may access and use Google account data when access is explicitly authorized.

Google account access

Joan accesses only Google accounts that have been explicitly authorized by the account owner or by a user with the necessary permission to grant that access.

Depending on the permissions granted, Joan may access Gmail messages and related metadata needed to provide its personal assistant features, such as reading, summarizing, organizing, searching, labeling, archiving, and preparing draft responses.

How data is used

Google user data is used only to provide Joan’s personal assistant functionality for the authorized owner, such as inbox triage, email summaries, organization, and preparation of drafts or actions explicitly requested or authorized by the owner.

OAuth tokens are used only to maintain the authorized connection to the approved Google accounts and to perform actions within the permissions granted by the user.

Advertising, sale, and sharing

Joan does not sell Google user data. Google user data is not used for advertising purposes and is not shared with advertisers.

Joan’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Technical providers

Some data may be processed by technical providers necessary for Joan to operate, such as hosting infrastructure, email/API tooling, and AI model providers. These providers are used only as needed to run the personal assistant features requested or authorized by the owner.

Joan currently relies on the following technical providers: Hostinger provides the private server/VPS infrastructure; Hermes Agent provides the software environment used to operate Joan; OpenAI may process the information needed to generate summaries, classifications, draft replies, and other requested assistant features; and Google APIs provide authorized access to connected Google accounts.

These providers are used only as needed to operate Joan’s private personal assistant features. Google user data is not sold, used for advertising, or shared with advertisers. Joan’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention and storage

Joan may process email content, metadata, OAuth tokens, configuration, logs, summaries, or drafts as needed for the assistant to function. The exact storage and retention behavior depends on the deployed system configuration.

Joan may retain OAuth tokens, configuration data, application logs, conversation history, summaries, and drafts on its private infrastructure as needed to operate the assistant. Gmail content and related metadata may also be processed temporarily to read, search, summarize, organize, or prepare responses requested or authorized by the owner.

Data is retained only for as long as necessary to operate the assistant or until it is manually deleted. OAuth access can be revoked at any time from the user’s Google Account permissions page.

Revoking access

Access can be revoked at any time from the user’s Google Account permissions page: https://myaccount.google.com/permissions.

Private use

Joan is intended for private use only and is not offered as a public or commercial service.

Contact

Contact: Olivier.beorchia@gmail.com