Scope and operator
This policy applies to myos.agcrn.com. angelcrown handles privacy inquiries and access, correction, deletion and restriction requests at angelcrown24@gmail.com. The service is not intended for children under 14.
Information stored on the server
For authentication and account protection, we store email, verification information for derived authentication values, encrypted key envelopes, recovery verifiers and consent versions. Raw passwords and recovery codes are not stored. There is no Google sign-in provider.
Schedules, projects, study, life, finance, notes, ideas, D-days, vault entries, settings and resized profile images are AES-256-GCM encrypted in the browser before storage in Cloudflare D1. Record IDs, versions, sizes and timestamps are also processed. Email, usage, entitlements and administration metadata are not concealed like encrypted record bodies.
Session/device IDs, encrypted device labels, hashes of IP/browser information and access/expiry times support authentication and abuse prevention. Request counts, successful AI counts, storage usage and entitlement/audit records support limits and operations.
Encryption and browser storage
A random master key encrypts records. Separate keys derived from the password and recovery code wrap that master key. The implemented storage design prevents ordinary administrative access from reading bodies from ciphertext and envelopes alone. It has not completed an independent security audit and does not guarantee safety in every environment.
While signed in, decrypted content and keys exist in the browser. Key material uses session storage by default; keep-me-signed-in retains it in local storage for access up to 14 days. This does not independently protect it from a compromised browser or someone with access to the device.
IndexedDB can retain encrypted records, sync/conflict state and recent profile history. UI preferences such as language are stored locally too. Logout removes myOS authentication key material, not necessarily all encrypted workspace caches. Essential session cookies use HttpOnly, Secure and SameSite=Strict.
The recovery TXT is generated in your browser after registration. If both password and recovery code are lost, the operator cannot recover existing encrypted data or reissue the code.
External AI and content
AI is optional. API keys sync as encrypted settings, but connection checks, AI input, table generation and review decrypt the selected key in your browser and send it directly to Gemini, OpenAI or Groq. The current myOS API does not relay these plaintext prompts and records successful use counts.
AI input includes your body, reference date, category and candidate destination titles/IDs. Table generation includes your request. Review includes completed/overdue schedule titles and active project/idea information. Vault secrets are not automatically attached, but secrets pasted into an input are transmitted.
With Gemini's unpaid services, inputs and outputs may be used for Google product/model improvement and human review. Do not send sensitive information. OpenAI/Groq store:false requests do not disable all provider security logging or retention. Regional and plan-specific processing, international handling and retention follow the linked provider policies.
Cloudflare supplies hosting, API, database and Turnstile security verification, and may process IP and browser signals on global infrastructure. Opening external images, videos or links requests the relevant site. Support email is handled by your mail service and the recipient Gmail account.
Ads and analytics
Display ads and ad requests are currently disabled, with no empty ad slots. The AdSense ownership tag and ads.txt do not request ads. Google Analytics and GTM are not used.
Public overview, example, guide and information pages use Cloudflare Web Analytics for page-view, referral, device/browser and loading-performance statistics. The overview's sign-in form shares the same public document, but emails, passwords, recovery codes, vault contents and changes made in the fictional example are not sent as visitor analytics. Visitor analytics scripts are blocked on private workspace and administration pages. Cloudflare network/security statistics and logs are separate operational processing.
Future ads require separately reviewed public pages and an appropriate consent mechanism. Approval alone will not enable ads on sign-in, vault, settings or personal workspace screens. This policy will be updated when tools or advertising processing change.
Retention and deletion
Accounts and encrypted records are kept until deletion. Deleting an individual record removes its server body but can retain a sync tombstone and version. Expired sessions and old revoked entries are cleaned regularly; revoked entries use a 30-day cleanup threshold.
Deleting your account in Settings immediately disables it and revokes all sessions. A job deletes the server account and dependent records, with periodic retries after failures. Completion of this job does not guarantee simultaneous physical removal from historical infrastructure backups.
Account deletion also clears the current browser's workspace storage. It cannot remotely erase encrypted caches on other devices, exported files, clipboard contents or data already sent to AI providers. Delete those site data/files separately. If you cannot log in, request account deletion from support; ownership verification may be required, but record recovery is not possible without the keys.
Requests and changes
Use your account email and describe the access, correction, deletion or restriction request. Never send passwords, recovery codes, API keys or vault plaintext. The operator can respond for metadata it holds, not read encrypted bodies on your behalf.
Material changes to providers, storage, payment or advertising will update this document and be announced in the service.