fam-docs-app

Privacy Policy

Effective November 8, 2026

fam-docs-app is a personal family document organizer operated by Julian Mulla. This policy explains how it handles scanned documents and Google user data.

Information accessed and collected

The application processes scanned PDFs, configured family names and aliases, recipient email addresses, AI-generated transcripts and summaries, labels, action details, and processing history.

With the operator’s authorization, it uses Gmail read and send permissions. These permissions technically allow reading the authorized mailbox and sending mail. The application uses them to verify the mailbox identity, send notifications and acknowledgements, locate related conversations, and read candidate replies. Candidate messages are checked for linkage to an archived notification; unrelated mail is not retained in the document archive.

For linked conversations, it stores message identifiers, headers, sender and recipient information, timestamps, raw email content, reply text, attachments, and action updates. OAuth credentials are kept separately from the document archive and are not published.

Purpose and sharing

Information is used to identify recipients, organize letters, communicate required actions, preserve replies, record reported completion, and recover the archive after data loss. Intended recipients receive their scan, labels, and summary by email. The operator receives copies of notifications and acknowledgements and can access the archive, including reply details.

Google Gmail processes outgoing and incoming messages. Backblaze B2 stores private archive copies of documents, metadata, emails, and attachments. OpenAI receives scanned PDFs and configured family names and aliases to generate document analysis. The current reply-processing implementation does not send Gmail reply bodies or reply attachments to OpenAI. These providers process information under their applicable service terms and privacy policies.

Google user data is not sold, used for advertising, or used by this application to train generalized AI models. Access and sharing are limited to providing the described household document workflow. fam-docs-app’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Storage and protection

Records are stored locally on the operator’s Mac and in a private, encrypted Backblaze B2 bucket. Service connections use HTTPS. Local application files use restricted permissions, and credentials are maintained separately using Doppler and local credential storage. These measures reduce risk but do not guarantee absolute security.

Retention, deletion, and choices

The archive currently has no automatic deletion schedule. Records, attachments, and historical versions are retained until the operator deliberately removes them. To request access, correction, or deletion, email jmulla@gmail.com. Requests are handled manually after confirming the requester’s identity and authority; deletion must cover local files and B2 versions.

The Gmail account owner can revoke access through Google Account connections. Revocation stops future authorized access after existing access tokens cease to work, but does not itself delete archived copies. Copies already delivered to recipients remain in their mailboxes unless those recipients remove them.

This website and updates

These information pages do not provide document upload or mailbox access and contain no application analytics or advertising scripts. The hosting provider may process ordinary connection metadata needed to serve the pages. Material changes to data handling will be reflected in this policy and communicated to affected users before new uses where consent is required.

Contact

Julian Mulla · jmulla@gmail.com