Privacy Policy — Family Data Protection

Last updated: September 19, 2026

1. Data Controller

The controller of your personal data is:

Eryk Panter
operating under the trade name ParentOS
Address: Przystan 19/1, Lomianki Dolne, Poland
Tax ID (NIP): 5272881218
Email: contact@parentos.ai

(hereinafter: "Controller" or "we")

2. What is ParentOS

ParentOS is an adaptive operating system for families — a SaaS application that helps families manage daily life: calendars, finances, health, meals, and other aspects of family life.

ParentOS uses artificial intelligence (AI) to assist users, including a voice assistant and intelligent suggestions.

3. Data We Collect

Data You Provide:

  • Registration data (name, email) — account creation
  • Family data (members' names, roles) — app functionality
  • Calendar data — synchronization and planning
  • Health data (medications, visits) — health module (E2EE encrypted)
  • Financial data — finance module (E2EE encrypted)
  • Meal data — meals module (E2EE encrypted)
  • Education data — education module (E2EE encrypted)

Data Collected Automatically:

  • Technical data (IP, browser type)
  • Usage data
  • Cookies

Special Categories of Data:

Health data is end-to-end encrypted (E2EE). ParentOS servers cannot access this data in decrypted form.

4. End-to-End Encryption (E2EE)

ParentOS uses zero-knowledge architecture with advanced end-to-end encryption for the most sensitive data. Our servers cannot access your decrypted data — even we cannot read it.

How it works:

  1. Encryption key is generated and stored exclusively on your device
  2. Data is encrypted locally BEFORE being sent to the server
  3. Server stores only encrypted data that it cannot read (zero-knowledge)
  4. Optional recovery phrase allows access from a new device

What is E2EE encrypted:

Health data, Financial data, Meal data, Education data

What is NOT E2EE encrypted:

Calendar (requires sync with external services), Registration data, Preferences

5. Artificial Intelligence (AI)

ParentOS uses external AI service providers for text and voice assistant functionality.

Important Information:

  • Your data is NOT used to train AI models by external providers
  • AI may generate incorrect responses — always verify important information
  • AI responses do not constitute medical, legal, or financial advice
  • You can disable AI features at any time in settings

5a. E-mail (Gmail, Outlook, forwarding)

If you connect a Gmail mailbox (scope gmail.readonly) or an Outlook / Microsoft 365 mailbox (scopes Mail.Read, offline_access, User.Read) — in beta, adult family members only — ParentOS checks the sender and subject of new messages every few minutes (every 10 by default). That metadata reaches our server so we can recognise the carriers, shops and bill providers on our list. Full content — and allowed attachments — is downloaded only for recognised messages; the rest of your mailbox never leaves Google or Microsoft. The scopes are read-only, so we never send, label or delete your e-mail.

This path is not end-to-end encrypted — unlike the modules described in § 4. The content of recognised messages (like messages forwarded to your family address in the inbox.parentos.ai domain) passes through our server and through an AI model (OpenAI, API with no model training), which finds parcels, return deadlines and bills in it. What we store — parcels, access tokens and the mailbox address — is encrypted with a server key. A parcel pickup code is never stored or sent to the AI model.

Limited Use: ParentOS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Gmail and Outlook is used only for the feature you see (parcels, returns, bills), never for advertising or for training general AI models, and is not transferred beyond the sub-processors this feature needs.

How long: a parcel leaves the list once its story ends — delivered after 3 days, once a return deadline has passed, or after 21 days with no news. The content of a message forwarded to your family address is dropped from the queue once processed; if processing fails, the message expires after 7 days and its content is deleted then.

You can disconnect a mailbox at any time (Profile → Connections → Integrations → E-mail inbox), together with the parcels that came only from it. You can also withdraw your consent to mail reading — we then disconnect all your Gmail and Outlook mailboxes (forwarding keeps working). Disconnecting Gmail revokes access at Google; for Outlook you remove the consent in your Microsoft account settings (account.live.com/consent/Manage or myapps.microsoft.com), because Microsoft offers no app-side revocation. When an account is deleted we delete its mailbox connections and revoke the tokens, and the family's parcels go with the family.

6. Your Rights (GDPR)

Under GDPR, you have the following rights:

  • Access (Art. 15) — obtain a copy of your data
  • Rectification (Art. 16) — correct inaccurate data
  • Erasure (Art. 17) — right to be forgotten
  • Restriction (Art. 18) — restrict processing
  • Portability (Art. 20) — JSON/CSV export
  • Object (Art. 21) — object to processing
  • Withdraw consent (Art. 7)
  • Lodge complaint — with supervisory authority

Contact: contact@parentos.ai

We respond within 30 days.

7. Contact and Supervisory Authority

Contact:

Email: contact@parentos.ai
Address: Przystan 19/1, Lomianki Dolne, Poland

Supervisory Authority:

President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
www.uodo.gov.pl