Privacy
Goldfish vs Kitty is run by Weddings Unlimited LLC, Houston, Texas. Last updated 6 September 2026.
You send a thought. Only then does the app search the accounts you have connected, to work out what you meant. It reads; it never writes. It does not run in the background, does not sync your mailbox, and cannot create anything from a message you did not ask about.
Your data is never sold, never used for advertising, and never used to train any AI model.
Name, email address and, if you gave one, your mobile number. From Microsoft or Google sign-in we keep your name, email and account identifier, nothing else from your profile.
The exact words of every thought you type or text, and the postcard made from it: the summary, the suggested next steps, and the company, department and urgency it was filed under.
An encrypted credential for each account you connect, so it can be searched again later. Encrypted at rest, and deleted the moment you disconnect that source.
Which stage of the pipeline ran, how long it took, and whether it failed. Timings and error messages, so a broken connection can be diagnosed.
The contents of your mailboxes and files are never stored. When you send a thought, the app searches your connected accounts live, passes the handful of matches to the model that writes your postcard, and discards them. Nothing is copied into a database, and nothing is indexed.
What survives is only what ends up written on the postcard: a sentence or two of your own summary, and the titles of the things it connected to, so that you can see why it thought what it thought.
Read-only mail access, used to search your own mailbox after you have sent a thought. Nothing is sent, moved, replied to, deleted or marked read.
Read-only. Gmail is searched for messages matching what you just said; Drive is searched for files matching it. Nothing is created, edited, shared or deleted.
Read-only file search. The app holds no write permission at all, so it could not change a file even if asked to.
Texts you send to the app's number, through Twilio, become thoughts. Only messages you send to that number are ever seen.
Goldfish vs Kitty's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
In plain terms: Google data is used only to provide the feature you asked for, which is reading your own mail and files to give your postcard context. It is not transferred to anyone except as needed to provide that feature, is not used for advertising, is not sold, and is never used to train generalised AI models. No human reads your Google data except you.
Nobody, unless you choose it. Every account is a private space. A postcard reaches someone else only when you assign or share that specific card.
Sees account names, sign-up dates and how many postcards exist. There is no screen, anywhere, that shows an administrator the contents of someone else's postcard.
Your thought and the search results are sent to Anthropic's API to write the postcard. Anthropic does not train on data sent through its API.
Netlify hosts the app, Supabase stores the database, Twilio carries the text messages. Each handles data only to run the service.
Disconnect a source in the app and its stored credential is deleted immediately; the app loses all access to that account. You can also revoke access from Google's side at myaccount.google.com/permissions, or from Microsoft's at myapps.microsoft.com.
Delete a postcard and its original words, its steps and its links go with it, permanently.
Delete your account by emailing the address below. Everything belonging to it is removed, including any stored credentials. Data is kept only while your account exists.
Questions about any of this, or a request to delete your data: alex@weddingsunlimited.com.
If this policy changes in a way that affects what is read or stored, the date at the top changes and the app says so when you next sign in.