Privacy
Goldfish vs Kitty is run by Weddings Unlimited LLC, Houston, Texas. Last updated 14 September 2026.
You send a thought. Only then does the app search the accounts you have connected, to work out what you meant. It reads; it never writes. It does not run in the background, does not sync your mailbox, and cannot create anything from a message you did not ask about.
Your data is never sold, never used for advertising, and never used to train any AI model.
Name, email address and, if you gave one, your mobile number. From Microsoft or Google sign-in we keep your name, email and account identifier, nothing else from your profile.
The exact words of every thought you type or text, and the postcard made from it: the summary, the suggested next steps, and the company, department and urgency it was filed under.
An encrypted credential for each account you connect, so it can be searched again later. Encrypted at rest, and deleted the moment you disconnect that source.
Which stage of the pipeline ran, how long it took, and whether it failed. Timings and error messages, so a broken connection can be diagnosed.
The contents of your mailboxes and your cloud files are never stored. When you send a thought, the app searches Outlook, Gmail, Drive and Dropbox live, passes the handful of matches to the model that writes your postcard, and discards them. Nothing from those four is copied into a database, and nothing from them is indexed.
Two sources are different, and you should know which. Voice recordings and websites cannot be searched where they live: Plaud offers no way to search recordings remotely, and a website has no search at all. For those two only, the text is copied into our database so it can be searched when you dump a thought. That means transcripts of the recordings you connect, and the text of the pages on the sites you add, are stored by us until you disconnect that source.
Disconnecting a recorder or a site deletes everything copied from it. Websites are read only where they are public and only where the site's own robots.txt permits it.
From everything else, what survives is only what ends up written on the postcard: a sentence or two of your own summary, and the titles of the things it connected to, so that you can see why it thought what it thought.
Read-only mail access, used to search your own mailbox after you have sent a thought. Nothing is sent, moved, replied to, deleted or marked read.
Read-only. Gmail is searched for messages matching what you just said; Drive is searched for files matching it. Nothing is created, edited, shared or deleted.
Read-only file search. The app holds no write permission at all, so it could not change a file even if asked to.
Texts you send to the app's number, through Twilio, become thoughts. Only messages you send to that number are ever seen.
Read-only access to your own recordings. Transcripts are copied here so they can be searched, and deleted when you disconnect it.
Public pages of sites you add, read politely and slowly, honouring robots.txt. Page text is copied here so it can be searched. No sign-in, nothing private, nothing behind a login.
The microphone button turns speech into text using your browser's own dictation, not ours. The microphone is live only while you have pressed the button, and we never receive, record or store any audio. What reaches us is the words, once you press the button to send them, exactly as if you had typed them.
Where your voice goes depends on your browser, and it is worth knowing. Safari does the recognition on your own device. Chrome does not: it streams the audio to Google's speech service and sends back text, under Google's privacy policy rather than this one. If that matters for a particular thought, type it instead, or use Safari.
Goldfish vs Kitty's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
In plain terms: Google data is used only to provide the feature you asked for, which is reading your own mail and files to give your postcard context. It is not transferred to anyone except as needed to provide that feature, is not used for advertising, is not sold, and is never used to train generalised AI models. No human reads your Google data except you.
Nobody, unless you choose it. Every account is a private space. A postcard reaches someone else only when you assign or share that specific card.
Sees account names, sign-up dates and how many postcards exist. There is no screen, anywhere, that shows an administrator the contents of someone else's postcard.
Your thought and the search results are sent to Anthropic's API to write the postcard. Anthropic does not train on data sent through its API.
Netlify hosts the app, Supabase stores the database, Twilio carries the text messages. Each handles data only to run the service.
Disconnect a source in the app and its stored credential is deleted immediately; the app loses all access to that account. You can also revoke access from Google's side at myaccount.google.com/permissions, or from Microsoft's at myapps.microsoft.com.
Delete a postcard and its original words, its steps and its links go with it, permanently.
Delete your account by emailing the address below. Everything belonging to it is removed, including any stored credentials. Data is kept only while your account exists.
Questions about any of this, or a request to delete your data: alex@weddingsunlimited.com.
If this policy changes in a way that affects what is read or stored, the date at the top changes and the app says so when you next sign in.