Privacy Policy

Effective March 31, 2026

Who We Are

Robot Goose is operated by DeMartini Studios LLC. Robot Goose is an AI-powered family assistant that lives in your Telegram group chat, helping you manage shopping lists, tasks, and calendar events through natural conversation.

What Data We Collect

  • Google account information: your name and email address, collected via Google OAuth sign-in.
  • Google Calendar data:events and calendar metadata, accessed via the Google Calendar API. To deliver timely reminders, we store a minimal cache of non-all-day events you've linked to your Google Calendar: event title, location, time window, timezone, and recurrence rule. This cache is retained for up to 7 days and then automatically deleted. Event descriptions, attendees, attachments, and video links stay on Google — we do not copy or persist them.
  • Task and shopping list data: tasks and shopping list items you create through Robot Goose, stored and managed directly by Robot Goose.
  • Telegram messages and interactions: messages sent in your Telegram group where Robot Goose is active, including message text, sender name, and username.
  • Workspace configuration and preferences: your settings, such as timezone and digest schedule.
  • Approximate workspace location (latitude and longitude): provided by the user via Telegram's location sharing; used to show weather on the Today page and in the Daily Digest. This is a single location per household, not a live-location feed — it does not update automatically and requires an explicit confirmation to change.
  • Billing information: your email address is provided to our payment processor, Stripe, during checkout. We do not collect or store credit card numbers, billing addresses, or other payment details directly.

How We Use Your Data

  • Google Calendar data is used to provide scheduling and daily digest features.
  • Task and shopping list data is used to provide task management and shopping list features.
  • Telegram messages are processed by AI to generate assistant responses.
  • Workspace configuration is used to personalize your experience.
  • Billing information is used to manage your subscription and process payments.

AI Processing Disclosure

Your messages are processed by OpenAI's language models to generate assistant responses. Each request may include your message text, recent chat history from your group, and titles of recent calendar events, tasks, and shopping list items to provide context-aware assistance. Image and PDF attachments sent to the assistant are also transmitted to OpenAI for processing.

We configure our API integration so that OpenAI does not store your data after processing each request and does not use it for model training. For details, see OpenAI's enterprise privacy commitments. We may use additional AI service providers in the future, and this page will be updated accordingly.

How We Store Your Data

  • Google is the system of record for calendar events. We do not store copies of your Google Calendar data.
  • Task and shopping list data is stored directly in our database and retained until you delete individual items or your account. Account deletion cascades to all associated task and shopping list data.
  • We store an encrypted OAuth refresh token to maintain access on your behalf.
  • Workspace configuration and recent message history are stored in our database. We retain only the most recent messages per chat for assistant context and automatically delete older messages.
  • All data is transmitted over HTTPS/TLS and stored on infrastructure that encrypts data at rest.

How We Share Your Data

We do not sell, rent, or share your personal data with third parties for their own purposes. Data is shared only with service providers as needed to operate Robot Goose:

  • OpenAI: message text, chat history, and calendar context for AI processing, as described above. Task and shopping list content is not shared with third parties.
  • Stripe: email address and subscription metadata for payment processing.
  • Supabase: database and authentication infrastructure.
  • Sentry: error reports for monitoring and debugging. Error reports may include request metadata but are configured to exclude authentication credentials and cookies.
  • Vercel: application hosting.
  • WeatherAPI.com: when weather is enabled for your workspace, your saved location (latitude/longitude) is sent with each forecast request so they can return the forecast for that area. See WeatherAPI.com's privacy policy.

Cookies and Tracking Technologies

Robot Goose uses a small number of cookies to operate the service. We do not use cookies for advertising, analytics, or cross-site tracking.

  • Authentication cookies: managed by our authentication provider (Supabase) to maintain your logged-in session.
  • Sign-in flow cookies: short-lived cookies (up to 5 minutes) used during the Google OAuth sign-in process to manage authentication state and return navigation.
  • Promotional code cookie: if you arrive via a promotional link, a cookie stores the code for up to 7 days so it can be applied at checkout.

We do not respond to Do Not Track browser signals. No third parties collect personally identifiable information through our site for their own tracking purposes.

Google API Services User Data Policy Compliance

Robot Goose's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google data for advertising, do not sell or transfer it to third parties (except as needed to provide the service), and do not use it to train generalized AI/ML models.

Data Retention and Deletion

You can delete your account and all associated data from within the app at any time. When you delete your account, we revoke your Google OAuth token, cancel any active subscription and delete your Stripe customer record, delete your workspace data, message history, channel bindings, and authentication record. A minimal deletion audit record (containing only internal identifiers, no personal content) is retained for compliance.

Transient server logs are subject to our hosting provider's retention policies and are not retained indefinitely.

Your Rights

You may request access to, correction of, or export of your personal data by contacting us at support@robotgoose.com. You can delete your account and all associated data at any time from within the app.

How to Revoke Access

Visit Google Account permissions to revoke Robot Goose's access to your Google data. You can also delete your account from within the app, which revokes access automatically.

Children's Privacy

Robot Goose is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Data Breach Notification

In the event of a data breach affecting your personal information, we will promptly notify affected users as required by applicable law.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through a notice within the app before the changes take effect. Continued use of Robot Goose after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy, contact us at support@robotgoose.com.