Privacy policy

Last updated: 7 October 2026

Summary

Edward is a personal assistant that runs on your own computer (Windows or Mac). There is no Edward server and no Edward account: the people who make Edward never receive your data. Edward talks only to the services listed below, and only to do what you use it for.

What Edward accesses

Only after you connect a personal Google account, and only within the permissions you grant:

• Google Calendar: your calendars and events, to show your schedule, give heads-ups before events and add or change events when you ask. Edward never invites anyone.
• Gmail: message headers and content, to show and search your mail, summarise new mail, find bills and travel bookings, and write drafts. An email is sent only after you confirm it. Edward cannot delete, archive or label mail.
• Google Tasks: your lists, to show and change them.
• Your Google address, to show which account is connected and to refuse work and school accounts.

Where your data goes

• OpenAI, through Codex and your own ChatGPT account. When you ask Edward something, and for the mail summary (twice a day while Edward is open), the relevant text is sent to the AI model for that request. Card, bank and account numbers, ID numbers (such as passport, tax file and Medicare numbers) and passwords are removed first, even in part, by Edward's own code on your computer.
• OpenAI's realtime voice service, only if you add your own OpenAI API key and use voice. What you say is sent as sound, which the privacy guard can't check; the app tells you so.
• Open-Meteo, for the weather where a trip goes: only the place's name and the date.
• Google, to read and change the data above.

Your data is not sold, not used for advertising and not shared with anyone else. Data from Google is not used to develop, improve or train AI or machine-learning models.

What Edward stores, and where

• Everything stays on your computer, in %LOCALAPPDATA%\Edward on Windows or ~/Library/Application Support/Edward on a Mac: memories, reminders, bills, mail summaries, trips, settings, conversation history.
• Google sign-ins and the OpenAI API key are encrypted and never written to logs: on Windows with Windows Data Protection (DPAPI), readable only by your Windows account; on a Mac with a key kept in your login keychain.
• Edward doesn't keep a copy of your mailbox or calendar. Card, account and ID numbers and passwords are never stored, not even in part. Booking references and ticket, membership and passport numbers are not kept with trips.

Removing access and data

• Settings → Accounts → Disconnect revokes Edward's access at Google and deletes the sign-in from your computer. You can also remove it from your Google Account → Security → Third-party connections.
• Settings → Your data → Delete deletes everything Edward stored.

Google API Services User Data Policy

Edward's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Questions about this policy: open an issue at github.com/Ruihang2017/project-jarvis.