Data practices · Updated October 28, 2026

Privacy policy

Bernard is a private personal AI assistant operated by the owner of miskoski@gmail.com. This policy explains how Bernard handles connected Google account information and assistant interactions.

Information accessed

Depending on the permissions granted and the feature in use, Bernard may access Google account identity, Gmail messages and metadata, calendar events, Drive files, documents, spreadsheets, contacts, and Google Chat messages and spaces. Permissions can also include creating or updating content, sending messages, and supported Gmail settings operations. The consent screen identifies the requested permissions; a permission does not mean every account item is routinely downloaded.

Bernard also processes instructions, conversations, task context, generated summaries and audio, and operational records. OAuth credentials and tokens allow continued access without repeatedly entering a Google password.

How information is used

Information is used for requested personal assistant functions, including planning, email and document workflows, reminders, summaries, and private briefings. Recurring tasks may access relevant data automatically according to the owner's configured schedule.

AI processing and service providers

Relevant instructions and account content may be sent to configured AI providers, including OpenAI for assistant processing and Google Gemini for text or speech generation. Provider selection can change as the operator updates the assistant. Processing is subject to each provider's applicable service terms and account data controls.

Generated private audio and related artifacts may be stored using Cloudflare R2 and delivered through the owner's private feed. Assistant interfaces and connected services may receive responses when the owner requests delivery there. Private feed links should be treated as access credentials.

Bernard does not sell Google user data, use it for advertising, or use it to develop, improve, or train generalized AI or machine learning models. Google data is used for the specific personal assistant features described here. This describes Bernard's use of data; provider retention and processing are governed by the applicable provider agreement and settings.

Storage, retention, and security

OAuth credentials are stored in an isolated keyring on the agent host. Assistant conversations, working context, operational logs, generated files, and personal memory may be retained on the operator's systems. Selected generated outputs may also be stored with the hosting and delivery services described above.

There is no automatic, fixed deletion period across all of Bernard's storage. Data may remain until the operator deletes it or the relevant service's retention period ends. Access restrictions and credential isolation help protect data, but no system can guarantee absolute security.

Control, revocation, and deletion

The account owner can revoke Bernard's access at Google Account connections. Revocation prevents further authorized Google access but does not automatically erase previously stored conversations or generated outputs.

To request deletion of stored assistant data, generated artifacts, or credentials, contact miskoski@gmail.com. The operator can remove retained data from systems under their control. Provider-held records and backups may remain subject to the relevant service's retention rules.

Website visitors

This informational website has no sign-in form, advertising, or analytics scripts added by Bernard. The hosting provider may process standard request information, such as IP addresses and browser metadata, to deliver and secure the site.

Google API user data

Bernard's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Updates and questions

Material changes to Bernard's data practices will be reflected on this page. Contact miskoski@gmail.com with questions or requests.