What happens to a forwarded email

Where the message goes

Postmark receives the forwarded email so it can deliver it to LifeAdmin. The application stores the message, the records extracted from it, and the original attachment in your household. The app runs on Cloudflare Workers. Records are stored in a private Cloudflare D1 database. Attachments are stored in a private Cloudflare R2 bucket that is not published on the web.

The text of a forwarded email is sent to Google's Gemini API so LifeAdmin can extract bills, dates, and tasks. The request tells the model to treat the email as untrusted data and to ignore instructions inside it. LifeAdmin does not ask Gemini to open links or browse the web. Use a paid Gemini API project. On the paid tier, Google's Gemini API terms say prompts and responses are not used to improve Google products. Optional Gemini request logging is disabled. Each extraction request sets store to false, which opts that request out of Google AI Studio request storage. Google may still retain prompts and responses for a limited time to detect abuse. This beta does not use Gemini features that keep a separate copy for web search. Vertex AI zero-retention processing is not configured.

Magic-link sign-in emails and morning briefings are sent through Postmark to the verified address on the account. A briefing is built from stored records. It is not a new guess from the model, and it does not claim to cover mail you did not forward.

What this notice does not claim

This notice describes the services this beta uses. It is not a certification, an audit, or a promise that a provider's controls meet a particular standard.

Removing an account

Account deletion is done by the operator during the beta. Ask for the account to be removed. The operator deletes the user, which removes the household records, and deletes the private attachment objects stored for that household. The steps are in the project README.