Effective September 1, 2026
This policy describes the private Friday home-lab assistant's access to Allen Tiethoff's Google account.
Friday is a private, single-user assistant. After Allen grants permission, Friday can access Gmail messages and labels, Google Calendar events, Google Drive files, Google Docs documents, Google Sheets spreadsheets, and read-only Google Contacts data.
Contacts access remains read-only. For other enabled services, Friday can read, organize, create, update, send, or remove items when Allen asks or enables a scheduled task.
Google data is used only to provide Friday's personal-assistant features to Allen. It is not sold, used for advertising, used to build advertising profiles, or provided to data brokers.
When a request requires language-model processing, the minimum relevant content may be sent to Friday's configured AI model provider. When a result is delivered through Buzz, it passes through Allen's privately operated Buzz relay. These services are used only to complete Allen's requested or configured task.
OAuth credentials, operational state, and retained task context are stored on Allen-controlled home-lab systems with restricted local access. Protected maintenance backups may contain these files and are kept on a bounded rolling schedule.
Revoking access prevents new Google access. Allen can delete local state, while backup copies age out through the normal backup rotation.
Friday is not a multi-user service. Allen is the operator and authorized user. Google data is not shared with other people unless Allen explicitly directs Friday to communicate it. Automated service providers receive only the content needed to perform the requested function described above.
Credentials are kept out of source control, stored with restricted file permissions, and used by owner-scoped services. Access to the Raspberry Pi and management services is authenticated. No security measure is perfect, but the deployment is designed to minimize credentials, privileges, and exposed services.
Allen can stop Friday, delete its local Google credentials and retained state, or revoke access from the Google Account page under Security, then Third-party apps and services. Privacy questions can be sent to the developer contact address displayed on Friday's Google OAuth consent screen.
Friday's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.