What the AI can see
Exactly which records the assistant reads, what is masked before anything reaches an AI model, and how your role and household limit its answers.
Overview
The assistant never reads the whole database. Each time you ask, Personal360 gathers only the records you are allowed to read, masks sensitive numbers, and sends that short context to an AI model with your question. The model is told to answer only from that context and to cite the records it used.
Before you start
- Your role in each household decides what you can read: Owner, Adult and Member (read-only) read the whole household; Limited reads only their own record and what is filed under it. The assistant uses the same rules as every page.
- The household selector in the sidebar also applies. With one household pinned, only that household is searched.
Steps
Use this checklist to understand what goes into an answer.
- Scope. Personal360 finds the households you can read (or just the pinned one). For a Limited member, only their own record.
- Focus. The focus you chose decides which kinds of records are gathered: | Focus | Records gathered | |---|---| | All | Everything below | | Personal | People and their IDs & documents | | Medical | Medications, medical reports, latest lab results | | History | Jobs, addresses, travel | | Appointments | Calendar events from the past week onward |
- Masking. Government ID and account numbers — Aadhaar, PAN, SSN, passport and document numbers — are masked to the last four characters, like •••• 1234, before anything leaves the server.
- Context. Along with masked numbers, the context is sent to the AI provider in readable form and can include names, dates of birth, addresses, expiry dates, medication details, lab values with their range status, and a short excerpt of a document's or report's scanned text. Only ID and account numbers are masked — this is not full anonymisation.
- Answer. The model writes an answer and cites records. Personal360 shows only those records under Sources.
What is not included
- Bank accounts and utility accounts.
- Full, unmasked ID or account numbers.
- Records in households you do not belong to.
- For Limited members: anyone else's records, and household-level items such as unfiled documents and household appointments.
- For Telegram users who are not head of household: all medical and lab records.
Help questions
When you ask how to do something, the assistant uses published Help Center articles. These are public documents and contain no household data. Help content and your records are handled separately, so one person's records never appear in a help answer.
Example
Rohan, a Member in the Mehta household, asks "What is Meera's PAN?". The assistant can see only a masked value such as •••• 7F2Q and replies that the full value is on Meera's profile. Rohan's read-only role cannot reveal it, so he would need to ask an Owner or Adult.
FAQs
Does the AI provider keep my data?
For the assistant, Personal360 sends only the context needed for one answer (described above). Other AI features send more: scanning a document, summarising a file or reading a lab report sends that file's contents so it can be read, including any numbers printed on it. How each provider handles requests is set by that provider's own terms; your administrator chooses which providers are used.
What if no AI provider is set up?
Then nothing is sent to any model. The assistant shows your matching records directly instead of a written answer.
Can a master admin see my questions?
Master admins can review assistant questions and replies in Bot Activity for support and quality. These are stored encrypted. The Activity log you can see records only that a question was asked.
Troubleshooting
The assistant mentions a record I thought was private
Check who can read that person's records on their profile. The assistant can only use what your role already allows you to open yourself.