Privacy Policy

1. Who we are

Nico is a personal AI assistant web application operated by Brett Fulmer ("we", "us"). Contact: brettfulmer@gmail.com. Service URL: https://www.mymatenico.com.

Nico is designed primarily as a single-user (or tightly allowlisted) personal operator assistant—not a public multi-tenant consumer social network.

2. What this policy covers

This policy describes how Nico collects, uses, stores, and protects information when you use the app, including when you connect third-party services such as Google (Gmail, Google Calendar, Drive, Contacts).

3. Information we collect

Account information: email address and authentication identifiers used to sign in (via our auth provider).
Content you provide: chat messages, tasks, notes, contacts, preferences, voice settings, and other data you enter or import.
Connected services (with your consent): when you connect Google, we receive OAuth tokens and may access data you authorize—such as Gmail messages/metadata, Calendar events, Drive files, and Contacts—only to provide the features you request (read, summarize, draft, send with confirmation, sync, search, etc.).
Technical data: basic logs (e.g. request timing, error diagnostics) needed to run and secure the service.

4. How we use information

We use information only to:

Provide and improve Nico's assistant features for you
Sync and display communications, calendar, and related context you connect
Generate drafts, summaries, and recommendations (often via AI model providers you configure or that we operate on your behalf)
Authenticate you, prevent abuse, and maintain security
Comply with law when required

We do not sell your personal data. We do not use Gmail or Google user data for advertising, credit decisions, or unrelated product marketing.

5. Google user data

If you authorize Google access, Nico's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google data is used only to provide user-facing features you request inside Nico (e.g. email inbox, replies you approve, calendar awareness).
We do not transfer Google user data to third parties except as needed to operate the service you asked for (for example, sending a model prompt that includes content you asked Nico to process), to comply with law, or with your direction.
Human review of Google user data is not used for developing general AI models. Access is limited to operating and securing your instance.
You can revoke Google access at any time in your Google Account permissions and/or by disconnecting the account inside Nico.

6. Storage and security

Data is stored in our application database and encrypted credential store (vault) hosted with our infrastructure providers (e.g. Railway application hosting and Supabase database/auth). OAuth tokens and API keys are stored encrypted at rest where the vault is used. We apply access controls (including sign-in and allowlisting) to limit who can use the instance.

No method of transmission or storage is 100% secure. We take reasonable measures appropriate to a personal operator tool, and we work to fix issues promptly when identified.

7. AI processing

To answer questions and run tools, Nico may send relevant content (including snippets of email, calendar, or chat context you surface) to AI model providers (for example Anthropic, OpenAI, Google, xAI, or OpenRouter), depending on configuration and the task. Those providers process data under their own terms and privacy policies. Prefer not to put highly sensitive secrets in free-form chat when avoidable; use the vault for credentials.

8. Retention and deletion

We retain data for as long as needed to provide the service and for reasonable backups, security, and legal requirements. You may request deletion of your account data by emailing brettfulmer@gmail.com. Revoking Google access stops future Google API access; residual copies already synced into Nico may remain until deleted from the app or via a deletion request.

9. Sharing

We share data with subprocessors only as needed to host and operate Nico (hosting, database, auth, AI, email/SMS providers you enable). We do not sell personal information. We may disclose information if required by law or to protect rights, safety, and security.

10. Children

Nico is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.

11. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use after changes means you accept the updated policy.

12. Contact

Questions about privacy: brettfulmer@gmail.com.