Privacy policy
Last updated October 17, 2026.
BuddyDex keeps notes about your friends so you see them more. Your friends never agreed to be in a database, so it handles their information carefully and sends it as few places as it can. This page covers this BuddyDex, which runs at buddydex.dev and is run by josh@birdwellabs.com.
What BuddyDex stores
- Your account: your email address, name, time zone, and settings.
- People you add, and what you or your agents record about them: names and nicknames, email addresses and phone numbers, birthdays, which circle they're in and how often you want to see them, hangouts and conversations with your notes, facts (like where someone works), and short summaries.
- Planned hangouts and, if you connect Google Calendar, the events from the calendars you choose to scan: titles, times, places, and attendees' email addresses, used to match events to people.
- A change history of every write, with who made it, so any change can be undone.
- Sign-in data: sessions, passkeys (public keys only), one-time sign-in links, and the agents and API keys you've connected. API keys are stored only as hashes. Google tokens are encrypted.
- Agents that sign in with AgentID: what AgentID shares about the agent (its inbox address and name, and an ID for its owner) and about you as its owner (your name and email), to know which agent connected and whose account it is.
- Search data: if search embeddings are turned on, numeric representations of interaction and fact text.
Where it goes
Everything is stored in BuddyDex's own database, with its hosting provider. Your friends' information never leaves BuddyDex except to these services, and only for the purpose listed:
- Google Calendar, if you connect it: BuddyDex reads your events and free/busy times, and creates, moves, or deletes events for hangouts you schedule. Invitations go out only when you ask.
- OpenAI, only when embeddings are turned on: the text of interactions and facts is sent to OpenAI's embeddings API to make search work. Turn embeddings off and nothing goes to OpenAI.
- The email provider (AgentMail), which delivers sign-in links, notices about agents that connect, and the daily digest. It handles your email address and the digest's contents, such as who's due for a hangout.
The agents you connect, like Claude, see what they read through BuddyDex, limited to the permissions you approve. What they do with it is up to their own providers' policies. BuddyDex doesn't send them anything on its own.
What it doesn't do
- No ads, analytics, or tracking. No third-party scripts. The only cookies are the ones that keep you signed in.
- It doesn't sell your data or share it beyond the services above, and it doesn't use it to train AI models.
- It never contacts your friends. It drafts, and you send.
- Server logs carry IDs, not names, notes, or facts.
Google user data
BuddyDex's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is used only to log hangouts, find free time, and manage the events BuddyDex creates for you. It isn't used for ads, isn't transferred to anyone else, and isn't read by people, except with your permission, for security, or where the law requires it. Disconnect at any time from BuddyDex's calendar page, or at myaccount.google.com/connections.
Your choices
- Export: you can get everything BuddyDex holds about you and your friends as one JSON file.
- Forget: you can have a person deleted permanently, with their facts, links, and summary, and scrubbed from the change history.
- Disconnect: agents and API keys can be disconnected on the agents page, and they stop working immediately.
- Delete your account: ask, and everything is deleted.
For any of these, or with questions, write to josh@birdwellabs.com.
Keeping it safe
Connections use HTTPS. Each account's data is walled off by the database itself (row-level security), Google tokens are encrypted, and API keys are stored only as hashes. Data stays until you delete it.
Changes
If this policy changes, the date at the top changes too.