Who we are

UnKAnscious LLC is the company responsible for the information described here. You can reach us about anything on this page at bt@unkanscious.com.

Two different things

The website (unkanscious.com) is public. You can read all of it without an account, and we ask nothing of you unless you fill in the form on our contact page.

GoalRunner is the product. It is early-access software — you sign in with Google, and only accounts we have explicitly added can open a workspace. GoalRunner only sees a mailbox after you connect one.

Google user data

This is the part that matters most, so it is the longest.

What we ask Google for

GoalRunner requests one Google scope: https://www.googleapis.com/auth/gmail.modify

We ask for it because GoalRunner does two things: it reads your mail to work out what still needs you, and it carries out the actions you take in GoalRunner — inside your own mailbox, one at a time, when you press the button.

Those actions are: applying and removing labels (including marking read or unread, and starring), moving a conversation to Trash or bringing it back, creating and updating Gmail drafts, and sending a draft you have confirmed.

GoalRunner never permanently deletes mail. Moving to Trash uses Gmail’s own Trash, which you can undo, and which Gmail keeps for 30 days.

GoalRunner never sends mail on its own. Every send is a Gmail draft that you confirmed; there is no code path that sends a message you have not seen.

What GoalRunner reads

First, message details without the body: message and thread identifiers, the date, sender and recipients, the subject, Gmail labels, approximate size, whether there is an attachment, and standard list headers such as List-Unsubscribe and Precedence. This is how GoalRunner reads a large mailbox cheaply and decides what is worth opening.

Then, for the messages that pass that filter, the readable text of the message — plain text where it exists, HTML flattened where it does not.

Attachments are recorded by name, type and size. GoalRunner does not read the contents of an attachment, and only ever downloads one when you open it — in which case it goes to your browser and is not stored by us.

What GoalRunner keeps

The addresses of the Gmail accounts you connected, and any other addresses you tell us are also yours.
The understanding it built from your mail: who a conversation is with, what was asked, what was promised, what state each of those is in, and short quotations from the message that support each claim. Those quotations are the evidence GoalRunner shows you when you ask why it said something — the product is built so that no claim exists without one.
The message metadata described above.
Your Google credential, so GoalRunner can keep working without asking you to sign in to Google every time.
If you use the forwarding address: the subject, sender and recipients, body text and threading headers of what you forwarded, plus attachment names, types and sizes — never attachment contents.

Measuring whether GoalRunner is right

GoalRunner claims things about your mail, so we have to be able to check those claims. To do that we keep frozen copies of real mail from connected mailboxes in a private, access-controlled store inside our own Google Cloud project, and compare what the product said against what the mail actually says. This involves a person reading mail. We do it only for a mailbox whose owner has agreed to it, and never for anyone else’s. Write to bt@unkanscious.com and we will tell you whether any of your mail is held this way.

Limited Use

GoalRunner’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising. We do not sell it. We do not use it to train, develop or improve any generalized artificial-intelligence or machine-learning model, ours or anyone else’s.

Why we process any of it

To run the product for you: to work out what you owe, what you are owed, and when you are finished — and to show you the evidence behind each of those.
To carry out an action you took in GoalRunner.
To keep the service working and secure — logs, error diagnosis, and abuse prevention.
To check the product’s accuracy, as described above.

We do not process your mail for any other purpose. There is no advertising business here, and no data business.

Where it goes, and who else touches it

GoalRunner runs on Google Cloud. The application and its background workers run in Google Cloud’s us-central1 region in the United States, and data is stored in Google Cloud Firestore and Google Cloud Storage in the same Google Cloud project. The website unkanscious.com is served from that same Google Cloud project.

We use a small number of third-party providers to run GoalRunner, and your information reaches them only where delivering the service requires it. They act as our processors: they handle it on our instructions, for us, and for no purpose of their own. Each of them may in turn use its own subprocessors, which its agreement with us holds to equivalent obligations. These are the only third parties that receive any of it:

Google Cloud (Google LLC) — hosting, database, file storage and secret storage.
OpenAI (OpenAI OpCo, LLC) — GoalRunner sends the text of a message to OpenAI’s API to work out whether it contains an obligation, and to whom. This is the reasoning step; without it the product cannot do its job. UnKAnscious LLC and OpenAI have executed OpenAI’s Data Processing Addendum, under which OpenAI is our processor for that step: it may use what we send only to return the answer to us, it may not use it for anything of its own, and it is bound to tell us if it is ever compelled to hand it over. Under that agreement and OpenAI’s current API terms, what we send is not used to train or improve OpenAI’s models — and the settings in our OpenAI account that would share it for that purpose are all switched off. We have checked them. OpenAI keeps a copy in its own abuse-monitoring logs for up to 30 days, and longer only where the law requires it or where it is needed to stop harm; we have not applied for OpenAI’s zero-retention option, so we are not going to tell you we have one. OpenAI may use its own subprocessors for this step, and it publishes who they are at platform.openai.com/subprocessors. We do not use your mail to train any model, and we do not send it to anyone for that purpose.
Postmark (ActiveCampaign) — receives mail sent to the forwarding address, delivers the single verification message we send when you add one of your own email addresses, and delivers the notification we send ourselves when someone fills in that contact form. Neither of those messages contains anything from your mail.
Sentry (Functional Software, Inc.) — when we turn this on, Sentry receives a report when the GoalRunner web application hits an unexpected error: the error type and message, with anything shaped like a credential, a token, a cookie or an email address removed before it leaves your browser. For the specific browser session that hit that error, and only that session, Sentry also receives a masked recording of what was on screen — every word of text and every image blocked out, so what is recorded is the shape of the failure, not its content. A session that never errors is never recorded; this exists to let us fix a bug you hit, not to watch how you use the product. Sentry never receives your Gmail credential, the contents of your mail, or anything from a session that did not error. Before this is live we will execute Sentry's Data Processing Addendum, the same step we took for OpenAI, so Sentry is bound as our processor and may use what it receives only to return it to us.

We do not share your information with anyone else. We would disclose it if the law required it, and we would tell you unless we were forbidden to.

How long we keep it, and how to have it deleted

We will be plain about this, because the honest answer is not the tidy one.

Disconnecting Gmail deletes the credential we hold. Once it is gone, GoalRunner cannot open your mailbox again until you reconnect it.

Disconnecting does not, by itself, delete what GoalRunner has already recorded. The metadata, the understanding and the quotations stay in your workspace, so that reconnecting does not start you from nothing.

We have no automatic deletion schedule, and we are not going to invent one here. GoalRunner is early software with a small number of users, and deletion is done by hand, by us, when you ask.

To have it deleted, email bt@unkanscious.com. We will delete your workspace’s stored data — metadata, understanding, quotations, credentials and any evaluation copy of your mail — and confirm to you in writing when it is done.

What you can do

See the evidence. Every claim GoalRunner makes can be opened to the words it came from. That is a product feature, not a privacy promise, but it is the most useful control you have: you can check it.
Disconnect Gmail at any time in GoalRunner’s Settings.
Revoke our access at Google, which is the authoritative way to end it: go to myaccount.google.com/permissions and remove GoalRunner. Revoking there stops GoalRunner reaching your mailbox even if something on our side failed.
Ask what we hold about you, and ask us to delete it — bt@unkanscious.com.

Depending on where you live you may have additional rights over your personal information. Ask us and we will honour them; we would rather do that than argue about which statute applies.

Security

Sign-in is Google’s, not ours — we never see or store your Google password. Access to GoalRunner is limited to an explicit list of accounts.

Everything travels over HTTPS. Our secrets and API keys are held in Google Secret Manager, not in code. Stored data sits in Google Cloud Firestore and Google Cloud Storage, which encrypt data at rest. The evaluation store is private and access-controlled, and the code that writes to it refuses to publish into a bucket that is not locked down.

We hold no security certifications and we are not going to imply otherwise. GoalRunner is early-access software, and the honest reason access expands slowly is that access should expand no faster than the security of the product justifies.

If you find a security problem, write to bt@unkanscious.com. A person reads it.

What we never do

We never sell your information.
We never use it for advertising, and we run no advertising business.
We never use your mail to train models.
We never buy data about you, enrich your contacts from data brokers, or collect anything you did not hand us.
We never send mail as you without you.
We never permanently delete your mail.

The website

unkanscious.com sets no cookies and stores nothing in your browser. We checked, and we will keep it that way.

It loads no analytics, no tracking scripts and no third-party fonts or embeds. Every page is static HTML served from our own Google Cloud project.

If you fill in that contact form we receive the name and email address you type, and your answer to the optional question. They are stored in our own Google Cloud project and emailed to us so we can reply. We use them to reply to you about GoalRunner, and nothing else. To have a submission deleted, write to bt@unkanscious.com.

Children

GoalRunner is a tool for adults doing work. It is not directed at children, and we do not knowingly collect information from anyone under 16.

Changes to this policy

If what the product does changes, this page changes first, and the date at the top changes with it. We will not quietly widen what we take.

Changed on August 31, 2026. We executed OpenAI’s Data Processing Addendum, and the section above now says exactly what OpenAI may and may not do with the text we send it — including how long OpenAI keeps a copy for abuse monitoring, which is the part a shorter policy would have left out. Nothing about what GoalRunner reads, keeps or does changed. What changed is what we can prove about the provider that does the reasoning step, so the paragraph stopped being careful and started being specific.

Changed on August 30, 2026. unkanscious.com moved off Framer onto our own Google Cloud infrastructure. Framer is no longer a processor of anything, the website no longer loads Framer’s page analytics, and contact-form submissions are now received and stored by us directly. Nothing about what GoalRunner reads or keeps changed.

Contact

UnKAnscious LLC · North Carolina, United States · bt@unkanscious.com

What GoalRunner reads, what we keep, and what you can do about it.