Privacy Policy

1. Who we are

Touchstone Family is a non-commercial service operated for invited members of the Touchstone household. It is not available for public registration. Questions or privacy requests can be sent to privacy@touchstone.family.

2. Information the assistant may access

Access depends on the Google permissions an authorized user chooses to grant and the task that user requests. The assistant may access:

• Google account identifiers needed to authenticate the connection;
• Google Calendar lists, events, attendees, and related scheduling details;
• Gmail messages, metadata, and drafts when needed for an expressly requested task;
• Google Drive files and supported Docs, Sheets, and Slides content relevant to a request; and
• limited operational information such as authorization status, timestamps, error records, and request identifiers used to prevent duplicate actions.

The assistant does not request access simply to collect data. It uses authorized data only when needed to perform a requested household task or keep the connection safe and reliable.

3. How information is used

Information is used only to:

• complete actions requested by an authorized family member;
• show or summarize information responsive to that request;
• authenticate and maintain the Google connection;
• prevent duplicate, unauthorized, or unsafe actions; and
• diagnose failures and protect the service.

We do not sell Google user data, use it for advertising, build advertising profiles, or use it to train general-purpose AI models.

4. Google API Services User Data Policy

Touchstone Family's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Sharing and disclosure

Information is not sold or shared for advertising or marketing. It may be processed by infrastructure providers only as necessary to operate and secure the assistant, or disclosed when required by law or to address a credible security or safety concern.

6. Storage and retention

Authorization credentials are retained while a user keeps the Google connection active. Limited operational records are retained only as long as reasonably needed for reliability, security, and troubleshooting. Google content is generally processed to fulfill a request rather than copied into a separate long-term data store. Items intentionally created in Google services remain in the user's Google account under Google's retention controls.

7. Security

We use encrypted connections, restricted credential access, scope minimization, health monitoring, and safeguards against duplicate or unintended actions. No system is perfectly secure, but access is limited to the people and systems needed to operate this private service.

8. Your choices and deletion

A user can review or revoke Google access at any time from their Google Account connections. To request deletion of information held by Touchstone Family, email privacy@touchstone.family. Revoking access does not automatically delete events, drafts, or files previously created in the user's Google account.

9. Children's privacy

This is a private household tool, not a public service directed to children. A parent or guardian controls any account authorization and use involving a minor family member.

10. Changes to this policy

We may update this policy as the assistant changes. The effective date at the top will be revised when material changes are published.