← Agatha

Privacy & Your Data

Plain and honest: exactly what Agatha can see, where it goes, and what she can't do. Last updated July 6, 2026.

What Agatha accesses — only with your permission

When you connect Agatha, you grant access through Google's own permission screen to: your Gmail (read-only), your Google Calendar (to add events), and your Google Tasks (for your lists). We never see or store your password — Google gives us a revocable access token instead. You can revoke Agatha's access at any time from your Google account settings, and her access ends immediately.

Text messages (SMS) — your mobile data

If you give us your mobile number, we use it only to send you the Agatha service: your daily briefs, reminders, and replies to your requests. Standard message & data rates may apply, and message frequency varies. Reply STOP at any time to cancel, or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of data sharing exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

What we keep — almost nothing

Agatha reads an email only to pull out the event (a date, a title) and writes that to your calendar. We do not store your inbox. What little we keep — your calendar events, a short profile of your preferences, your recent conversation with Agatha (so she remembers context), your lists, and your encrypted access token — is stored encrypted at rest with a key unique to you, on a dedicated server.

Who processes your data (our sub-processors)

We never sell your data, never use it for advertising, and never use it to train AI.

What Agatha cannot do

Your rights

You can ask us to show you, export, or delete everything we hold about you, and we'll do it within 30 days. You can disconnect Agatha at any time from your Google account, which cuts off all access.

Children's data

Agatha is for parents. Any information about children comes from you, the parent, providing your own family's schedule — children don't interact with the service. We hold that information under the same encryption and never-trained-on, never-sold terms as everything else.

Security

Your data is encrypted at rest with a key unique to you, each client's data is isolated from every other client's, and the system is designed so one family's information can never reach another's.

Contact

Questions about your data? Email support@getagatha.com.

How AI is used

Agatha uses AI services (xAI Grok and Anthropic Claude) to read the emails you have authorized and turn them into calendar events, and to answer your texts. Your data is sent to those services only to do that work for you — it is never used to train AI models, never used for advertising, and never sold. This complies with the Google API Services User Data Policy, including its Limited Use requirements.

Backups

Your data is backed up nightly so a server failure can never lose your family's information. Backups are encrypted before they leave the server, and the key to read them never travels with them.