Privacy.
Last updated 2026-11-09
What Kagodo is
Kagodo is a personal assistant. You write to it; it remembers what matters; it helps you manage email, calendar, documents, expenses and the running list of things you mean to do. This page explains what we do with the information you give it.
Kagodo is operated from Singapore and is currently offered by invitation. Your personal data is handled under Singapore’s Personal Data Protection Act 2012 (PDPA).
What we collect
- Account information. Your email address and name, from signing in with Google, Apple, or email and password.
- What you tell your assistant. Messages you send in the mobile or web app, plus photos and files you attach.
- Email sent to your assistant’s @thisismyassistant.com address, including anything you forward or CC to it, and drafts it prepares for your approval.
- Calendar, if you connect a calendar. Google Calendar, iCloud Calendar and the Apple Calendar on your iPhone are all supported, in any combination and more than one at a time, and Kagodo keeps a calendar of its own alongside them. Kagodo reads events so it can help you with your schedule, and creates or updates them when you ask.
- Documents and files you upload, forward or share in — the file itself, text extracted from it, and a searchable representation of that text.
- Expenses — amounts, merchants, dates and categories taken from receipts and emails you give it.
- Tasks, reminders and collections it is tracking for you.
- Rules and preferences you teach it, so you do not have to say the same thing twice.
- Your current location, only if you allow it. Used in the moment to answer questions that depend on where you are — somewhere to eat nearby, how long you’ll take to get somewhere. We do not keep a history of where you have been and we do not track you in the background.
- Telegram messages, only when you call on it. If you link Telegram, your assistant replies only when you @mention it or reply to it directly. It does not read or act on anything else.
- Push notification tokens from your device, so the assistant can notify you.
- Operational logs and telemetry — technical records such as timings and error reports. These do not include message bodies, email content, calendar content, document text or file contents.
Google Calendar data
If you connect Google Calendar, Kagodo uses calendar data only to provide assistant features you request: understanding your schedule, answering questions about upcoming events, and creating or updating calendar events when you ask it to manage your day.
Kagodo does not sell Google user data, does not use Google user data for advertising, and does not use Google user data to train AI models. Google Calendar access stays off until you choose to connect it, and you can disconnect it at any time in Settings.
Kagodo’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Kagodo does not use, transfer or sell Google user data — raw, aggregated or derived — to create, train or improve any foundational or generalised artificial intelligence or machine learning model. We build no models and run no training pipeline. Google Calendar data is sent to our AI providers only to generate the response you asked for, under terms that exclude training on customer content.
Calendars you connect
You can connect more than one calendar at a time, and Kagodo’s own calendar sits alongside whatever you connect rather than replacing it. Disconnect any of them in Settings and we delete that calendar, its credential and the events we copied from it.
iCloud Calendar. Apple provides no sign-in button for apps outside its own, so the only way to connect iCloud is an app-specific password — a code you generate in your Apple Account for a single app. This is Apple’s own mechanism, not something Kagodo asks for instead of signing in properly. It is not your Apple Account password, we never see that, and it cannot be used to sign in to your Apple Account or change its settings. We use it only to read the calendars you chose, we store it encrypted, and you can revoke it in your Apple Account whenever you like.
The Apple Calendar on your iPhone. No password at all. You give the Kagodo app permission on the device, and only the calendar you select is shared with us.
Telegram groups
If you add the Kagodo bot to a Telegram group you own, it saves the messages, photos and documents shared in that group (no voice notes or videos). All of it is deleted automatically after 30 days — or immediately when you tap Stop tracking or delete your account.
Only the Kagodo account that added the bot can read anything from the group. No other Kagodo user can access it, and Kagodo never uses group content for AI training or advertising. A notice is posted in the group when tracking starts, so other members know the bot is there.
Group members who appear in photos or send documents to the group have not consented to Kagodo directly. The person who adds the bot is responsible for making sure this is appropriate before they do so.
What we do not collect
- Advertising identifiers.
- Location history, or any background location tracking.
- Passwords, payment credentials, account-access 2FA/OTP codes, or security-question answers — the assistant will refuse these if you try to share them. The one thing we do store is an Apple app-specific password, if you choose to connect iCloud Calendar — a single-app code that is not your Apple Account password and cannot be used to sign in to it. See “Calendars you connect” above.
Identity and travel documents
Kagodo may process identity, travel or account details you choose to provide when they are needed for an assistant task, such as recording a passport number, preparing travel paperwork, or helping with an account form. These details are used only for the task you asked for and are not part of the always-on assistant context.
How we use information
We use your information to operate Kagodo for you: answer your questions, remember information you ask it to remember, organise files and notes, prepare drafts, manage calendar events, track tasks and reminders, send notifications, fix bugs and keep the service secure.
We also record operational logs and telemetry, set out in the next section.
How we know when it isn't working
We record operational logs and telemetry so we can debug failures, verify deployments, measure cost, detect outages and keep the service secure. These records contain no message content, are not used for advertising, and are not used to train AI models.
Operational logs and telemetry are kept for up to 30 days. Usage and cost records are kept for 90 days.
Consent, and taking it back
We use your information for the purposes described on this page and no others. Some things need a separate yes — connecting a calendar, linking Telegram, granting location or notification permission. Those stay off until you turn them on.
You can withdraw consent at any time by disconnecting the integration in Settings, changing the permission on your device, or deleting your account. If withdrawing consent means part of the service can no longer work for you, we will tell you rather than let it fail quietly.
Who we share it with
Kagodo runs on a small number of third-party services. Your data reaches them only to operate the product. We do not sell your data, and we never share it for advertising.
- AI model providers — to generate your assistant’s replies and to read what you send it. United States, and possibly the European Union.
- Hosting and storage — United Kingdom and Germany.
- Email delivery — United States.
- Web search and page reading — United States.
- Operational monitoring — receives technical records such as timings and error reports, never the content of your messages, email, calendar, documents or files.
- App delivery and push notifications — United States, and Apple and Google globally.
- Google and Apple — sign-in, and calendar access if you connect a Google or iCloud calendar.
- Telegram, if you link it.
AI, and whether you are training it
Your messages — and whatever your assistant needs to read to answer them, which can include your email, calendar and documents — are sent to AI providers to generate its replies.
We do not use your data to train AI models. We build no models and run no training pipeline. We use an AI provider only where its published API or customer-content terms say customer prompts, inputs and outputs are not used to train its models by default, or not without explicit opt-in.
Which provider handles a given request changes as we balance quality, speed and cost. Every one of them processes your content in the United States or the European Union, under terms that exclude training on it.
Your assistant can be wrong. It works from incomplete information and it makes mistakes, confidently. Check anything that matters.
Where your data goes
Where your data rests is not the same as where it is processed, so both are set out here.
At rest: your data is stored in the United Kingdom and Germany.
In processing: generating your assistant’s replies sends your content to the United States, and may involve the European Union. Web search, and reading a page when a website blocks our own reader, go to the United States.
Operational monitoring: technical records are processed by a monitoring service. They are limited to operational metadata and do not intentionally include message, email, calendar, document or file content.
Looking things up on the web
When you ask your assistant to look something up, it can search and read web pages, and what it finds is processed by the services described above in order to answer you.
When it fills in a form for you, it puts the form to you for approval before anything is submitted, and it never enters a password or login credential, card details, a code used to get into an account, or a security-question answer. Kagodo is never in the money flow: where something needs paying, it hands off to you.
Other people's information
When someone emails you and you forward it to your assistant, or they write to its address directly, their message and address are stored so your assistant can act on it. They have not agreed to anything — you chose to route their mail here. Worth a thought before forwarding something sent to you in confidence.
How long we keep it
We keep your account and its data for as long as your account is active. Files are kept until you delete them — age alone never deletes a file, though files attached to a Collection you archive are removed 90 days after archiving. Operational logs and telemetry are kept for up to 30 days, and usage and cost records are kept for 90 days.
If you sign up and never finish setting up an assistant, we delete the account and everything held with it 90 days after you signed up.
When you delete your account from Settings, your assistant is stopped, its workspace removed, connected credentials revoked, and everything we hold about you deleted immediately, including uploaded files. Copies of emails held by our email delivery service are removed within 30 days. We keep one record of the deletion itself, containing a one-way hash of your user ID — not your name or email.
Your rights
You can ask what personal data we hold about you and how it has been used, and ask us to correct anything wrong. Email us and we will respond within 30 days. You can delete your account yourself at any time from Settings, and if you want a copy of your data, ask and we will put it together for you.
If you are in the UK or the EEA, data protection law there may give you further rights, including erasure, portability and objection. Ask and we will honour them.
If you are unhappy with how we have handled your data, you can complain to Singapore’s Personal Data Protection Commission at pdpc.gov.sg.
Security
Your assistant runs separately from everyone else’s, can reach only your data, and never holds administrative keys. Accounts are isolated from one another, so no account can read another’s. Connected credentials are encrypted at rest, and traffic is encrypted in transit.
Kagodo is run by one person, who has administrative access to the systems it runs on and can therefore reach stored data when operating or fixing the service. There are no employees and no other operators, and there is no routine access to the content of your messages — but it would be wrong to tell you it is technically impossible. It is early-stage software, built carefully, without an external security audit. Weigh that when deciding what to give it.
Children
Kagodo is not intended for anyone under 18. If you believe someone under 18 has signed up, email admin@thisismyassistant.com and we will remove the account.
Changes to this policy
If we change how we handle your data, we will update this page and the date at the top. Material changes will also be sent to you by email or in-app.
Contact
Kagodo is operated by Tan Li-wen Melanie, Singapore. For any privacy question, email admin@thisismyassistant.com.
See also our Terms of Service.