Privacy policy

Secretary of Nonsense ("Secretary", "we") is a personal assistant made by Metatheory Inc. It reads the sources you connect, decides what deserves your attention, and summarizes it for you. This policy explains what it handles, why, and your choices. Last updated 2 November 2026.

1. Signing in

• Google sign-in. Google gives us your name, email address, profile picture and an account identifier. We ask for nothing else at sign-in: no mail, no calendar, no files.
• Sign in with Apple. Apple gives us an account identifier and, the first time only, your name and an email address. The email may be Apple's private relay address if you choose to hide yours. We keep what Apple sent and never ask Apple for more.
• We keep these with your account record and use them only to sign you in and to address you. When you connect the desktop or phone app, it gets its own sign-in token; we keep only a one-way hash of it.

2. The sources you connect

Secretary reads only the sources you connect yourself, each with its own permission, and only to read. It never sends, deletes or changes anything in them.

• Google Calendar (read-only): your events, so it can tell you what's coming and connect messages to meetings.
• Gmail (read-only, optional and asked for separately): your messages, so it can tell you which ones need you and summarize the rest.
• Slack and other sources you add: the messages you can read there, read-only.
• News feeds you follow.

Their sign-in tokens are kept encrypted in your own private store (section 4). You can disconnect any source at any time, and its tokens are then deleted.

3. How Google user data is used

Data from your Google account (Calendar, and Gmail if you add it) is used only to provide and improve the features you see in Secretary:

• deciding which messages and events need you;
• writing short summaries of them;
• answering questions you ask about your own mail and calendar.

To do that, the content is processed in two places:

• by your own ChatGPT account (section 5);
• by models run on Cloudflare, on our behalf (section 6).

We do not:

• use it for advertising, including targeted, retargeted or interest-based advertising;
• sell it, or transfer it to data brokers or information resellers;
• use it to determine creditworthiness or for lending;
• use it to develop, improve or train generalized or non-personalized AI or machine-learning models.

No person at Metatheory reads it, except in these cases:

• with your explicit consent for specific messages;
• when it is necessary for security, such as investigating abuse;
• to comply with the law.

Secretary of Nonsense's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. What Secretary keeps

All of this is kept in one private store that belongs to your account alone, a Cloudflare Durable Object:

• what it reads;
• what it makes of it: its decisions, summaries and notes;
• your corrections, and your conversations with it.

No other person's assistant can read it. To show a link's preview, it may fetch the page a message links to.

5. Your ChatGPT account

Secretary thinks with your own ChatGPT plan, through OpenAI's Sign in with ChatGPT.

• The resulting token is kept encrypted in your private store.
• It is used only for your own requests. Secretary sends OpenAI the text it needs to judge, summarize or answer: for example a message from one of your sources, or what you asked. OpenAI answers on your plan, under your account.
• We ask OpenAI not to store these requests (store: false). OpenAI's terms and privacy policy cover its processing.
• You can disconnect ChatGPT at any time, and the token is then deleted.

6. Who processes your data

• Cloudflare runs the service and stores your account and private store (Workers, Durable Objects, D1). Its Workers AI runs models for us that score what's relevant to you and turn your voice into text.
• OpenAI processes requests on your own ChatGPT account, as above.
• Google and Apple sign you in. Google, Slack and the other sources you connect provide your data from them.

We share your data with no one else. We don't sell it, and we don't use it for advertising.

7. Deleting your data, and revoking access

• Delete your account in the iPhone app (Settings → Delete Account), or email us. Deleting it erases your private store and your account records.
• If you signed in with Apple, we revoke Secretary's access at Apple before anything is deleted.
• Disconnecting a Google account in Secretary deletes its tokens. You can also remove Secretary's access at any time at myaccount.google.com/permissions.
• Signing out of an app removes its sign-in from that device.

8. Security

Everything travels over HTTPS. Sign-in tokens for your sources and for ChatGPT are encrypted at rest. Only your own account can reach your private store.

9. Children

Secretary is not meant for anyone under 16, and we don't knowingly collect their data.

10. Changes

Secretary is an early version, used by a small number of people. When this policy changes, we update the date above. If a change affects how Google user data is used, we ask for your consent first.

11. Contact

For questions or deletion requests: yoh@metatheory.gg, Metatheory Inc.