Golgi Household Assistant — Privacy Policy

Effective July 5, 2026

What this service is

The Golgi Household Assistant is a private, self-hosted household system operated by its sole owner on hardware he controls. Its SMS program has exactly one participant: the owner.

What data is collected

SMS messages sent to the service by the owner, and the replies it generates, are processed to answer the owner's requests and are logged on the owner's own private server. The only phone number stored is the owner's own.

What is shared

Nothing is sold, rented, or shared with third parties for marketing. Mobile opt-in data and consent are never shared with third parties. Message delivery necessarily passes through the telecommunications provider (Twilio) and mobile carriers.

Data retention and control

All stored data lives on the owner's private server, under his exclusive control, and can be deleted by him at any time.

The web app and cookies

Beyond SMS, the owner reaches this system through a private web app at building.golgiai.com, served from the same Mac Mini over a Cloudflare tunnel. Signing in is required for every page except this policy, the SMS terms, and the public landing page.

The app sets exactly two cookies. Both are strictly necessary, both are first-party, and there are no analytics, advertising, tracking, or third-party cookies of any kind.

CookiePurposeLifetime
jarvis_session Keeps the owner signed in. Holds a signed token, not personal data. 30 days on a browser, 90 on a linked device
jarvis_oauthstate A one-time value that proves a Google sign-in came back from the same browser that started it. Protects against sign-in forgery. 10 minutes

Both are marked HttpOnly, Secure and SameSite=Lax, so scripts cannot read them and other sites cannot send them. Because both are strictly necessary to sign in and stay signed in, no consent banner is shown — there is nothing optional to consent to. Clearing them simply signs the owner out.

Sign-in is handled by Google, which will see that a sign-in happened and to which application. The only account permitted is the owner's own; any other Google account is refused.

What this system is not

It is a single-household system with one user. There is no analytics package, no advertising network, no data broker, no customer database, and no third-party embed on any signed-in page. Reasoning is performed by Anthropic's API, speech by ElevenLabs, imagery by Google's Gemini API, and messaging by Twilio and Telegram — each receives only the specific content needed for the task the owner asked for, and none of them receive a copy of the household's stored data.

Contact

[email protected]


See also the SMS Terms & Conditions.