Information processed
The service processes the configured owner’s phone number, message content, and attached photos to provide replies. Food photos are retrieved transiently for analysis and are not retained by Harness; the derived meal estimate and optional description are stored encrypted at rest. When the owner explicitly writes SAVE PHOTO, Harness transfers the attached original to the owner’s Google Photos library and does not keep a separate copy. It may access Google Calendar, Gmail, Drive, and append new Google Photos items only after the owner connects Google and only when needed for a requested feature. The private investment desk also stores the owner’s watchlist and evidence-linked research reports built from public SEC filings and an optional licensed market-data provider; it does not connect to a brokerage account or place trades. It stores provider credentials in encrypted form, explicit durable memories, action approvals, provider message identifiers for duplicate protection, and redacted audit events.
How information is used
Information is used only to operate and secure the owner’s personal-agent application; automatically process owner commands and configured triggers; generate opted-in transactional notifications; and record security-relevant activity. Raw email, document, photo, and SMS content is not bulk-copied into the local knowledge graph.
Service providers
Google Cloud hosts the service. Twilio carries SMS and MMS, including attached media under Twilio’s retention practices. Google provides connected Calendar, Gmail, Drive, and owner-directed Google Photos uploads. OpenAI may process the minimum request context and food photo needed for natural-language or nutrition-estimation assistance. Photos explicitly routed to Google Photos are not sent to OpenAI for food analysis. These providers process data under their own terms and policies. Personal information is not sold or shared for advertising.
Mobile messaging privacy
Mobile phone numbers, SMS opt-in records, and messaging consent are not sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Message frequency varies based on owner requests and configured alerts; recurring proactive messages may include one personal briefing and one investment-research summary per enabled day, plus triggered task and alert notices. Message and data rates may apply. Reply STOP at any time to unsubscribe.
Retention and control
The owner can inspect memories with MY DATA, delete them with FORGET or FORGET ALL, disconnect Google in the private control center, and stop proactive SMS by replying STOP. Operational records are retained only as needed for security, reliability, and the owner’s configured features.
Security and questions
Credentials are encrypted at rest, sensitive memory categories are blocked by default, and external email or calendar writes require confirmation. For questions or account requests, use the owner-only private control center linked from the home page.