Privacy Policy - Briefly Daily AI

Effective date: 01 April 2026

Last updated: 03 June 2026

Briefly Daily AI (“Briefly Daily”, “we”, “us”, or “our”) is operated by Jarrod Blaine Ward, a sole trader (ABN 13 205 484 161) based in Paddington, Queensland, Australia, trading as Briefly Daily AI. We provide a personalised daily briefing delivered by email, generated from your Google Gmail and Google Calendar data.

This Privacy Policy explains what personal information we collect, how we use and share it, how we protect it, and the choices and rights you have. It applies to our website, app, and services (together, the “Services”). We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and, where applicable, other data protection laws.

If you do not agree with this policy, please do not use the Services.

1. Information we collect

1.1 Account and identity information.

When you sign up or sign in with Google, we receive your name, email address, and Google profile identifier (via the `openid`, `email`, and `profile` scopes).

Google account data (read-only). With your explicit consent through Google’s OAuth screen, we access:

Gmail (read-only, `gmail.readonly`). We read your inbox to identify and summarise your important recent emails inside your daily briefing. We do not send, compose, modify, label, or delete anything in your Gmail.

Google Calendar (read-only, `calendar.readonly`). We read your calendar events to include your schedule context in your briefing. We do not create, modify, or delete events.

Google OAuth tokens. To generate your briefing on a schedule, we securely store the access and refresh tokens Google issues, so the service can retrieve your data at your chosen delivery time. You can revoke this access at any time (see Your choices and rights).

Preferences. Your delivery time, briefing days, and the country and postcode you provide. We convert your postcode to approximate coordinates to include local weather in your briefing. We do not collect precise GPS location.

Payment information. If you subscribe, payments are processed by Stripe. We receive subscription status and limited billing metadata. We do not collect or store your full card details; Stripe handles those.

Technical and usage data. Standard logs such as delivery status of your briefings, timestamps, error events, and basic device or browser information needed to operate and secure the Services.

2. How we use your information

We use your information only to:

generate and deliver your personalised daily briefing;
operate, maintain, secure, and improve the Services;
provide customer support and respond to your requests;
process subscriptions and billing; and
send you service-related messages (for example, sign-up confirmation, password reset, and notices that your Google connection needs reconnecting).

We do not use your Gmail or Calendar data for advertising, and we do not sell your personal information.

3. Google API Services: Limited Use

Briefly Daily AI’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements found at https://developers.google.com/terms/api-services-user-data-policy.

Specifically:

We use Google Gmail and Calendar data only to provide and improve the user-facing daily briefing feature that you have asked us to deliver.

We do not transfer this data to others except as necessary to provide or improve that feature, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
We do not use this data for serving advertisements.
We do not allow humans to read this data unless: you give specific consent; it is necessary for security purposes (such as investigating abuse) or to comply with applicable law; or the data has been aggregated and anonymised for internal operations.
We do not use your Gmail or Calendar data to develop, improve, or train generalised or non-personalised artificial intelligence or machine-learning models.

4. How your briefing is generated (AI processing)

Your briefing is generated by an AI language model provided by Anthropic (the Claude API). To create each briefing, the relevant content from your Gmail and Calendar is sent to Anthropic’s API, processed to produce your briefing, and returned to you.

We send this content solely to produce your own briefing. It is not used to train or improve any AI model. We rely on Anthropic’s commercial API terms, under which inputs and outputs are not used to train Anthropic’s models.

5. How we share information

We share personal information only with service providers (“sub-processors”) who help us run the Services, and only as needed for them to perform their function:

Google: source of your Gmail and Calendar data (read-only), and the service used to deliver your briefing email.
Anthropic: AI generation of your briefing (see section 4).
Supabase: authentication and database, hosted in the Australia (Sydney) region.
n8n Cloud: workflow orchestration that assembles and sends your briefing.
Resend: transactional emails such as sign-up, password reset, and reconnect reminders.
Stripe: subscription payments and billing related information. If your account is deleted this information is kept to resolve billing issues.
Tomorrow.io and Zippopotam.us: weather and postcode-to-coordinates lookup for the weather section of your briefing.
Twilio: operational alerts to our team if the system detects a delivery problem (these alerts may include an affected email address).
Vercel: hosting of the application.

We do not sell your personal information. We may disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the Services.

6. Data retention

We keep personal information only for as long as needed for the purposes in this policy.

Gmail and Calendar content is processed to generate each briefing and is not retained by us after the briefing is produced. We do not keep a stored copy of your email or calendar contents.
Google OAuth tokens are retained while your account is active and your Google connection is in place. They are deleted when you disconnect Google or delete your account.
Account, preference, and billing records are retained while your account is active and for a reasonable period afterwards to meet legal, tax, and accounting obligations.
Operational logs (delivery status, error events) are retained for a limited period for reliability and security.

7. Security

We use technical and organisational measures to protect your information, including encryption in transit, access controls, and storing data with reputable providers. Our database is hosted in the Australia (Sydney) region. No method of transmission or storage is completely secure, but we work to protect your information and to limit what we collect to what the briefing genuinely needs.

8. International data transfers

We are based in Australia and store core data in the Australia (Sydney) region. Some of our service providers, including Anthropic, may process data outside Australia, including in the United States. Where personal information is transferred overseas, we take reasonable steps to ensure it is handled consistently with this policy and applicable law.

9. Your choices and rights

You can:

Disconnect Google at any time, from your dashboard or at myaccount.google.com/permissions. This stops all further access to your Gmail and Calendar.
Access or correct the personal information we hold about you.
Delete your account and associated personal information.
Manage your delivery preferences, or unsubscribe from briefings using the link in any briefing email.

To exercise any of these rights, contact us at privacy@brieflydaily.ai. Under the Australian Privacy Principles you may also ask how we handle your information and make a complaint (see Contact). Depending on where you live, you may have additional rights under laws such as the GDPR (EU/UK) or the CCPA (California), including rights to portability, restriction, or objection; we will honour these where they apply.

10. Children

The Services are intended for adults and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it: privacy@brieflydaily.ai

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date. If changes are material, we will take reasonable steps to notify affected users.

12. Contact us

Questions, requests, or privacy complaints: privacy@brieflydaily.ai

If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) found at: oaic.gov.au https://www.oaic.gov.au.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Briefly Daily AI, Attn: Jarrod Ward (trading as Briefly Daily AI)
Email: privacy@brieflydaily.ai