G9 AIOS Agent · Updated 7 October 2026
G9 AIOS Agent (the "Agent") is private software. It is operated by its owner for a single household, and used by the owner and a small number of people, all of whom are known personally to the owner and fewer than 100 in total. It is not a public service and it has no sign-up.
The Agent acts only on the Google Account a user has explicitly authorised it to use, and only on that user's own data. Authorisation is granted through Google's standard OAuth consent screen and can be revoked by the user at any time, with immediate effect. The Agent accesses the following categories, and nothing else:
To perform the action the user asked for, on the user's own account. Nothing else. Google user data is not used for advertising, is not used to build profiles, and is not used to train or improve AI models.
The Agent runs on the owner's own privately operated server, on the owner's own premises. It is not hosted on a commercial multi-tenant platform. OAuth credentials are stored on that server as files readable only by the account the Agent runs under. Documents the Agent produces are stored locally, and — where the user directs — in the user's own Google Drive.
To produce its responses, the Agent calls third-party AI models. Content the Agent is working on — which may include excerpts of the Google user data described in §1 — is transmitted to those models for the sole purpose of producing the output the user requested. Those models include, but are not limited to, third-party providers and Google's own AI services (the Gemini API).
Every such model is accessed through a paid API tier, and those accounts are configured to opt out of training-data collection. Provider handling of API data is governed by each provider's own API terms. The Agent selects providers that offer that opt-out and relies on them honouring it.
The Agent includes a PII sanitizer, which is enabled at all times during normal operation. It is switched off only during maintenance work. While it is off, the Agent restricts or suspends access to Google user data, so that unsanitised content is not transmitted to any third-party model. That control is applied on a best-effort basis. Where the Agent produces a written deliverable for an outside party, sensitive identifiers are redacted before transmission.
No Google user data is sold, rented, or transferred to any other third party, and none is used to train AI models.
G9 AIOS Agent's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
No person reads Google user data as part of normal operation. Data is inspected only where the user has asked about something specific, or where it is necessary to diagnose a fault or investigate abuse — the exception Google's Limited Use requirements permit.
Data is retained only as long as needed to provide the features described above, or as the user directs. A user may request deletion of the Agent's stored copies at any time, and that request is honoured. Deleting data from the user's own Google Account remains within the user's control through Google.
Authorisation may be withdrawn at any time at myaccount.google.com/permissions. On withdrawal the Agent can no longer read or act on that account.
The Agent holds material relating to the owner's own children solely for their home education. That material is educational and homeschooling material, created within the owner's own family account. It contains nothing relating to any other child. It is not used commercially, not published, and not shared outside the family.
Any revision to this policy is published on this page, with its date.