Your information

Privacy policy

Effective October 17, 2026

Center, also called the Gobitron Smart Mirror or Mirror, is a personal household assistant operated by Gobitron, LLC. This policy covers its Google connections, household functionality, and these public information pages.

The public website explains the product. Household settings, personal calendar content, and appliance controls are not available through this website.

1. Information the app accesses

Household sign-in uses Google’s basic identity permissions, including your account identifier, name, email address, and profile information. Connecting Google Calendar is a separate consent flow. It accesses your calendar list, calendar settings needed for correct scheduling, and event information such as titles, descriptions, locations, dates, times, recurrence, and attendees. Event permissions also allow creating, changing, and deleting events.

Google’s Calendar permissions can cover more than one calendar. Mirror limits its Calendar operations to the calendar you explicitly select. Other optional services require their own connection and settings.

The appliance also processes household profiles, shared activities, lists, reminders, and voice requests. Depending on enabled features, it may retain transcripts, voiceprints, optional voice-learning recordings, and optional phone-presence information.

2. How information is used

Identity information binds a sign-in to the correct household member. Calendar information supports calendar selection, agenda answers, cached calendar views, and event changes that you review and confirm. Household information supports the shared display and household requests. Voice information supports request interpretation and speaker identification.

Google user data is used to provide these user-facing functions. It is not used for advertising, sold to data brokers, or used to train generalized artificial intelligence models. Use and transfer of information received from Google APIs must comply with the Google API Services User Data Policy, including its Limited Use requirements.

3. Sharing and external processing

Calendar requests and confirmed changes are sent to Google. The hosted household sign-in service uses Cloudflare infrastructure to complete identity handoffs. Google and other connected providers process information under their own policies.

If you enable calendar sharing on the household display, eligible event titles and times can be visible to people nearby. Events marked private are excluded from that shared view.

Optional AI features can send relevant request text, calendar details, service results, or shared household context to a configured hosted provider such as OpenAI. Shared-calendar chat use and Listen transcript analysis have separate settings and permissions. Audio and local speaker identification are not sent to the Listen text analyzer. Review the enabled features and provider permissions in your household settings.

4. Local storage and diagnostics

The appliance stores provider credentials and household records locally. Google refresh tokens are encrypted using the configured Windows account’s credential protection. The appliance caches calendar data to keep agenda requests responsive. Local access, backups, and the security of the appliance remain important.

When explicitly enabled, development diagnostics can retain transcripts and API request or response bodies, including calendar content and connection information, in local logs. Logs and backups should be protected as private household data. Diagnostics do not create permission to publish or share that information.

5. Retention, disconnection, and deletion

Saved credentials remain until replaced or removed through the applicable connection or membership workflow. Cached data, saved household records, transcripts, recordings, and diagnostic logs have separate lifecycles and configured retention. Some local records can remain after you disconnect a provider. Backups may retain earlier copies until you remove or rotate them.

Use household settings to manage your connection, saved requests, transcripts, and available deletion controls. Disconnecting locally removes the appliance’s saved connection; it does not necessarily revoke the provider’s grant. You can separately revoke Center’s access in your Google Account connections. Deleting a local request or transcript does not undo an event already written to Google Calendar.

6. These public pages

These static pages do not ask you to sign in, read your calendar, or submit household data. They contain no application analytics scripts or advertising. Hosting and delivery providers may process network information such as IP addresses, browser request details, and security logs to deliver and protect the website.

7. Questions and changes

For questions about data use or deletion, contact dave@calynx.ai. We will update this page when the described practices change and show the effective date above.