Privacy policy

Riki · last updated 11 September 2026

Riki is a private assistant with exactly one user: Shahar Roje ([email protected]), who also owns and operates it. It has no customers and collects nothing from anyone else.

What Google data Riki accesses

Scope	What it is used for
`https://www.googleapis.com/auth/calendar`	Reading the owner's calendar to detect conflicts, and creating, updating and deleting events and reminders on his instruction. Invitations are sent only to people he names in the request.
`https://www.googleapis.com/auth/gmail.send`	Sending meeting summaries and briefings to the owner. Send-only: this scope does not permit reading, searching or deleting mail, and Riki does not do so.

Where the data goes

Riki runs on a single private server rented by the owner, located in Israel.
Calendar data is read when a request needs it and used to answer that request. It is not copied into a separate database.
Message text from the owner's own chats is stored locally on that server so the assistant has conversational context. It is never sent anywhere except to the language-model provider needed to produce a reply.
The Google refresh token is stored on that server in a file readable only by the system account that runs Riki.

Who else sees it

Nobody. Data is not sold, rented, shared, published, or used for advertising, and there is no analytics or tracking of any kind. The only third party involved is Anthropic, whose language models generate Riki's replies; content sent to them is governed by their commercial terms and is not used to train their models.

Riki's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How long it is kept

Calendar responses are held only for the length of the request. Chat history is kept on the owner's server for as long as he finds it useful and is deleted when he deletes it. Media older than sixty days is removed automatically.

Revoking access

The owner can revoke Riki's access at any time at myaccount.google.com/permissions. Revocation is immediate and stops all calendar and mail activity.

Contact

[email protected]