Your information

Privacy Policy

Last updated August 8, 2026

This draft explains how the invite-only Fiamus beta handles information. It is written for founder review and has not been reviewed by an attorney.

What Fiamus collects

Fiamus stores account identifiers supplied by the sign-in provider, including a provider subject, email, and display name; household membership; invitations; onboarding answers; goals; actions; check-ins; perspectives; weekly reviews; evidence; memories; schedules; consent choices; support requests; and uploaded media.

Why it is used

The information is used to authenticate members, keep households separate, provide shared planning features, preserve each person’s privacy choices, generate exports, support deletion, and operate the beta. Operational analytics may record events such as invitation acceptance, onboarding completion, action completion, weekly resets, exports, and deletion requests. Those events do not contain user-entered goals, notes, evidence, reflections, stress, memories, or media.

Who processes it

The beta runs on OpenAI Sites and Cloudflare services, including D1 database storage and private R2 media storage. ChatGPT provides the current sign-in identity. Future providers will be added only with updated disclosures.

Sharing and visibility

Records may be private to their owner, shared with a connected partner, or summary-only. Summary-only source text remains private unless its owner explicitly approves a summary. Shared-learning requires opt-in from both partners. Turning it off stops future household pattern analysis.

Advertising, AI, and tracking

Fiamus does not use private family content for advertising. The current beta has no advertising network and does not send private-content analytics. Fiamus does not currently send private household content to a third-party AI model for analysis.

Retention, export, and deletion

Information is retained while the account or household remains active and for the operational periods described in the data-retention documentation. Members can request a complete ZIP export. Account deletion has a 14-day recovery window before eligible data is purged. Shared records may remain with a connected household after the creator leaves, without preserving the departed member’s identity.

Security limits

Fiamus uses authenticated server identity, household authorization, hashed invitation tokens, private media storage, and server-side privacy filtering. No system can guarantee absolute security. The beta should not be used for emergencies, medical records, passwords, financial account credentials, or other highly sensitive secrets.

Contact

Use the support form for access, privacy, export, or deletion questions.