Privacy Policy
Personal Intelligence
Effective date: September 30, 2026
Personal Intelligence ("PI," "we," "us") is a private productivity and planning application operated by Giustino Natale. It organizes goals, sends personal briefings and GoalTest interviews, processes replies, and prepares suggestions using information the user authorizes. It is currently a private tool rather than an open-registration service.
This policy explains how PI handles information in the application and on its informational website. Privacy questions and requests may be sent to giustinomnatale@gmail.com.
1. Information PI processes
Google account and email information: the connected email address, relevant message bodies, subjects, sender and recipient details, timestamps, Gmail message and thread identifiers, and labels used to associate replies or check delivery. Relevant raw replies and their source references may be retained for accurate interpretation, recovery, and correction.
Information you provide: goals, tasks, interview answers, preferences, availability, constraints, project information, and notes or documents you expressly make available to PI. Optional fitness, nutrition, financial, or other personal context is processed only when you choose to provide it for those features.
Generated records: clarified goals, proposed interpretations, summaries, interview questions, opportunity assessments, meal and workout briefings, and the evidence linking these records to their sources.
Operational information: authorization tokens, job status, delivery receipts, errors, configuration, model-usage records, and other records needed to operate and troubleshoot the application.
PI does not request or store your Google password. Google handles account authentication; PI receives the authorization tokens needed for the permissions you grant.
2. Google permissions and their purpose
PI currently requests these Gmail permissions:
PermissionPurpose in PIhttps://www.googleapis.com/auth/gmail.readonlySearch and read relevant GoalTest messages and replies, associate conversations, and inspect delivery evidence. The permission itself provides broader read access to Gmail messages and settings; PI's current workflow uses targeted searches for its authorized features.https://www.googleapis.com/auth/gmail.sendSend the personal digests, interviews, and operational notices you have authorized, including eligible recovery of messages confirmed not to have been sent.
These permissions do not authorize PI to delete existing Gmail messages or change mailbox settings. The current connection does not request Google Calendar or Google Drive access. Any additional integration requires its own appropriate authorization and disclosure.
Routine PI emails are directed to the configured operator address. Connecting Gmail does not authorize unsolicited outreach or applications to employers or other third parties.
3. How the information is used
PI uses information to prepare personalized briefings and questions; turn free-form replies into structured, reviewable goals; preserve source history; connect related ideas; evaluate opportunities against authorized goals; and provide optional meal and workout planning. Operational records support scheduling, duplicate prevention, recovery, security, and explanation of the application's decisions.
The application distinguishes reported information, proposals, estimates, and verified outcomes. You can request corrections to an interpretation. A generated suggestion does not establish that an event happened or authorize an external action.
4. Storage and service providers
The primary PI records are stored on the operator-controlled computer, including the local database, workspace, Obsidian Markdown vault, and configured backups. Relevant content can also appear in generated emails stored by Google and in authorized AI-processing records.
Google processes connected-account authorization and email delivery. Anthropic's Claude, when enabled and authorized, receives selected goal context, relevant note excerpts, and GoalTest reply content to draft questions or synthesize goals. This can include personal information contained in those inputs. Cloud processing means selected content leaves the local computer. Local model processing, when used instead, runs on the operator's computer.
PI limits cloud inputs to the context needed for the requested feature. Provider processing and retention are also governed by the applicable provider terms, account settings, and privacy policies, including Google's Privacy Policy and Anthropic's Privacy Policy. A change in provider or purpose that materially changes data handling requires an updated disclosure and any necessary consent before that change takes effect.
If private remote access is enabled, Tailscale provides the connection service under its own terms. A public website host may receive ordinary request information, such as IP addresses, browser details, and access times. The public information pages do not contain the private vault or operational records. PI does not install advertising trackers in those pages.
5. Limited Use of Google user data
Personal Intelligence's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements, and the applicable Google Workspace user data and developer policy.
PI does not sell Google user data, use it for advertising, or use it to make creditworthiness or lending decisions. Google user data and information derived from it must not be used to train or improve general-purpose AI models. AI providers handling that data must be configured consistently with this restriction.
Transfers are limited to the authorized user-facing features described here and applicable security or legal needs. Human access to Google user data is limited to the account owner, access specifically authorized by the user, and other access permitted by Google's Limited Use rules. Authorizing an AI feature does not authorize unrelated human review or model-training use.
6. Retention and deletion
PI retains goals, relevant reply records, decision history, and operational records while needed for the authorized features, recovery, and continuity. The current local installation does not promise a fixed automatic deletion period. Historical revisions and backup copies may remain until they are removed through an operator-managed deletion process.
You may request deletion of imported content and derived records, including corresponding vault exports. Deletion must also account for raw-message records, model traces, and backups so that removed information is not unintentionally restored. Limited records may be retained when required by law or necessary for a specific security purpose. Any such retention will be explained when applicable.
Deleting PI's local records does not delete the original messages in Gmail or automatically delete copies retained by an external provider. Those copies are managed through the relevant provider's controls and retention practices.
7. Your controls
You may request access, export, correction, deletion, suspension of scheduled messages, or disabling of cloud AI processing by contacting giustinomnatale@gmail.com. We may need to verify that a request comes from the authorized account holder.
You can revoke Google's authorization through your Google Account connections. Revocation prevents future authorized Gmail access but does not itself erase information already stored locally. Disconnecting Gmail also prevents email-dependent features from operating until access is restored.
8. Security
PI uses local file-access restrictions, authentication for its private interface, and secure connections when communicating with Google and cloud AI services. Security also depends on the host computer, backup configuration, authorized users, and third-party services. Credentials should never be posted to the public website or included in model prompts. No system can guarantee absolute security or uninterrupted availability.
9. Children
PI is intended for authorized adults and is not directed to children. We do not knowingly collect personal information from children under 13. Contact us if you believe such information has been provided so it can be reviewed and removed.
10. Changes and contact
Material changes will be reflected in this policy with an updated effective date. Where required, PI will provide notice and obtain new consent before using information for a new purpose. A policy change does not retroactively authorize undisclosed use.
Operator: Giustino Natale
Application: Personal Intelligence
Privacy and support: giustinomnatale@gmail.com