Privacy notice
How Pember handles your data
Last updated 3 September 2026
About this proof of concept
Pember is a private proof of concept for an AI household personal assistant, operated by Co. It is currently available only to named test users using dedicated, synthetic demonstration Gmail accounts.
Google data Pember accesses
When a test user chooses to connect Gmail, Pember requests read-only access to email messages and mailbox metadata. This can include message bodies, sender and recipient details, subject lines, labels, thread relationships and message timestamps. Pember cannot send, edit or delete Gmail messages.
How that data is used
Gmail data is used only to retrieve the synthetic demonstration mailbox, preserve source evidence, and build household briefings and insights in the Pember proof of concept. It is not used for advertising and is not sold or shared with data brokers.
Storage and security
OAuth access and refresh tokens are encrypted at rest. Retrieved source messages are stored separately from facts derived from them, so a displayed conclusion can be traced to its supporting evidence. Access is limited to the private development environment used for this proof of concept.
Retention and deletion
A test user can disconnect Gmail from Pember, which removes locally stored access credentials and requests revocation from Google. Previously retrieved synthetic source evidence may remain in the local demonstration database until that environment is reset. A test user can request deletion of demonstration data by contacting us.
Your choices
Connecting Gmail is optional. Test users can disconnect in Pember or revoke access at any time from their Google Account’s third-party connections settings.
Contact
Questions, access requests and deletion requests can be sent to paul@codot.dev.