TL;DR
- We don't resell your data or use it for AI training.
- We store your data in Supabase with strict row‑level security.
- We host the app on Vercel.
- We use the Vercel AI SDK to call AI models; your data is not used to train them.
- Sign in with email or Google, just like any other app.
- We use Postmark to send essential emails.
- Optional: You can import from Todoist; we only use that data in-app.
- Optional: On Android, you can sync wearable health data from Health Connect (e.g. sleep, heart rate, HRV). You choose which devices to include, and we only read what you authorize.
- You can delete your account and all your data at any time, no questions asked.
Introduction
BigPicture ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share your information when you use our personal productivity and health-tracking service.
Information We Collect
When you use BigPicture, we collect:
- Account information (via email, Google, or Microsoft sign-in)
- Content you create (notes, todos, habits, and related data)
- Mood ratings, nutrition logs, and other health-related entries you add in the app
- Optional wearable metrics you choose to sync from Health Connect on Android (e.g. sleep, heart rate, HRV, SpO₂, steps, weight)
- Optional imports you authorize (e.g., Todoist)
- Space and collaboration data (if you use shared workspaces)
- Usage data and analytics
How We Use Your Information
We use your information to:
- Provide and improve our productivity and health-tracking features
- Generate insights and briefs from your activity, mood, and optional wearable data
- Enable space and collaboration features
- Communicate with you about your account
- Analyze usage patterns to improve our service
Third-Party Services
We use several third-party services to power BigPicture:
- Supabase: Database and authentication. Your data is stored in secure Postgres with RLS.
- Vercel: Application hosting and content delivery.
- Vercel AI SDK: Access to AI models. We use providers that do not train on your data.
- OAuth Providers: Email, Google, and Microsoft for sign-in.
- Postmark: Transactional email delivery (e.g., login links, notifications).
- Todoist: Optional connection for imports when you explicitly authorize it.
- Health Connect (Android): Optional read access to health metrics stored on your device when you connect wearables in Settings. BigPicture does not write health data back to Health Connect in the current release.
Health and Wearable Data
If you use the Android app and connect Health Connect, BigPicture can read health metrics that your wearable or health apps have written to Health Connect (for example from Ringconn, Oura, Garmin, or Withings, depending on what you have enabled on your phone).
- Your choice: Sync is optional. You grant permissions in Health Connect and choose which detected data sources to include in BigPicture.
- What we read: Metrics such as sleep, heart rate, resting heart rate, heart rate variability (HRV), blood oxygen (SpO₂), steps, and weight, within the scopes you approve.
- How we use it: To show summaries on your Health page and to inform optional AI features (e.g. daily briefs). We do not sell this data or use it to train AI models.
- Where it is stored: After sync, copies are stored in your BigPicture account on Supabase, protected by row-level security, like your other account data.
- Revoking access: You can turn off individual sources in BigPicture Settings, revoke BigPicture’s permissions in Health Connect, or delete your account to remove stored health metrics.
- Not medical advice: Wearable and synced data is for personal wellness tracking only. BigPicture is not a medical device and does not provide medical advice, diagnosis, or treatment.
Health Connect itself is provided by Google and stores data on your device according to Google’s policies. BigPicture only accesses Health Connect when you use the mobile app and initiate or allow a sync.
Data Storage and Security
Your content and personal data are stored securely on Supabase's infrastructure using their PostgreSQL database. We implement row-level security policies so your private data remains private, and space data is only accessible to authorized members.
Data Retention
We retain your content, health metrics, and account information until you choose to delete them. You can delete individual items or your entire account at any time through the application interface.
Your Rights
You have the right to:
- Access your personal information
- Delete your content and account
- Export your data where the product provides export options
- Control sharing settings for space and collaboration features
- Revoke Health Connect or other optional integrations
- Object to processing of your information
Space and Collaboration Privacy
When using shared spaces:
- Personal content remains private unless explicitly shared
- Space owners can manage member access
- You control which content is shared within a space
- Synced wearable health data is tied to your user account and is not shared with other space members unless you explicitly add sharing for that data in a future feature
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy, please contact us at info@bigpicture.guru.