Privacy Policy

Last updated October 10, 2026

Who we are

HeyBiscuit (heybiscuit.app) is made by Estuary Systems LLC (“we”, “us”). Questions about privacy, or requests about your data, go to george@estuarysystems.ai.

What we collect

• Your Google account basics, if you sign in with Google: your name, email address and profile photo. We ask Google only for the openid, email and profile scopes.
• Your phone number, optional, if you sign in with a text code or turn on text alerts.
• Your email and a password, if you choose email sign-in. Passwords are stored only as a secure hash.
• Family profiles and schedules you enter: names, roles (for example spouse, kid, grandparent), ages or birthdays, allergies and food preferences, events, rides, to-dos, meal plans and grocery lists.
• Voice recordings and transcripts, when you talk to Biscuit or record a voice note.
• Photos you upload for profile pictures, and the cartoon avatars made from them.
• Suggestions you send through the Biscuit feedback button.
• Basic technical information needed to keep you signed in and secure: session cookies, the device and browser of each signed-in session, and when it was last active. We don't use advertising or analytics trackers.

How we use it

Only to run HeyBiscuit for you and your family: showing your calendar, sending the reminders, texts and emails you turn on, and keeping your account secure.

AI processing. When you use the assistant, voice transcription or AI avatars, the relevant text, audio or photo is sent to OpenAI to process the request, and the result comes back to HeyBiscuit. OpenAI processes this data on our behalf through its API and, under its API terms, doesn't use it to train its models. We don't send AI providers anything you haven't asked Biscuit to work on.

What we never do

• We don't sell your personal information.
• We don't show ads, and we don't use your data for advertising.
• We don't share your data with data brokers.

Sharing, only as you choose

• Your family. Adults and helpers you invite to your family see the calendar. Helpers see only what an adult allows.
• Friends. Friends you add can see when you're busy, never what or where, and only for the times you approve.
• Share links. If you create a share link (a friend view or a family view), anyone with the link can see what that view shows until you turn the link off.
• Service providers that run HeyBiscuit for us, only as needed: Vercel (hosting and file storage), Neon (database), OpenAI (AI features), Resend (email), Twilio (text messages) and your browser's push service (notifications).
• The law. If we're legally required to, or to protect someone's safety. We'll tell you when we're allowed to.

Google user data

HeyBiscuit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Google sign-in gives us only your name, email address and profile photo, which we use to create and show your account.
• Google Calendar import is optional, and we ask for it separately, only when you start an import. It uses read-only access (calendar.readonly). It's a one-time copy: we read the calendars you pick, add those events to your HeyBiscuit calendar for you to review, then revoke and delete the access token (an unused token expires within an hour). We never get a refresh token, don't keep ongoing access, and never change your Google Calendar.
• We use Google user data only to provide these features to you. We don't sell it, use it for ads, use it to train AI models, or let people read it except with your permission, for security, or as the law requires.

Where your data is stored

Your data is stored in a Postgres database hosted by Neon, and the app and uploaded files (photos and voice recordings) are hosted by Vercel, in the United States. Data is encrypted in transit. Photos and recordings are kept private: they're only served to signed-in members of your family, never at public links.

Keeping and deleting your data

We keep your information while your account is open, so your calendar and history keep working.

• Delete it yourself: in the app, go to Profile → Account & sign-in → Delete my account. This permanently deletes your account, recordings, suggestions and personal to-dos. If you're the only adult in your family, the whole family calendar (people, events, photos and plans) is deleted too; otherwise it stays with the other adults.
• Or ask us: email george@estuarysystems.ai and we'll delete your data within 30 days. You can also ask for a copy of your data or for corrections.
• Deleted data may remain in encrypted backups for a short time before it's overwritten.

Children

Accounts are for adults 18 and older (or the age of majority where you live), as our Terms say. We don't knowingly collect personal information from children under 13, except what a parent or guardian enters about their own kids (for example a name, age and activities), which that adult controls and can edit or delete at any time. If you think a child has created an account, email george@estuarysystems.ai and we'll delete it.

Security

We use encrypted connections, hashed passwords and codes, private file storage and per-family access checks. No service is perfectly secure, so please tell us right away at george@estuarysystems.ai if you notice anything wrong.

Changes

If we change this policy, we'll update the date at the top, and for significant changes we'll tell you in the app or by email before they take effect.

Contact

Estuary Systems LLC · george@estuarysystems.ai