Your account
Profile
Every section here is yours alone. Relationship labels, preferences, and agent scopes never grant record access — that authority stays explicit on each record.
Identity
How you appear to people you invite or share with.
Sam
YouLoves loud dinners and quiet parks.
Identity editing is not part of this prototype.
Preferences
Everyday tastes and needs. These describe you — they are not consent.
Food
- No shellfish
Alcohol
- Loves natural wine
Accessibility
- Step-free venues please
Social energy
- Quiet on weeknights
Romance
- None yet.
Comfort & boundaries
Discreet, adult-friendly comfort settings. Preferences are not consent — automation, manual suggestions, and how content appears are separate switches.
Connections
Mutual relationship state and a directional label owned by you. Presets suggest defaults, never access — a Connection is not access; every record grant stays explicit.
Accepting, declining, relabeling, or removing a connection does not change any record grant. Sharing a plan or library entry is always explicit on that record.
Paste a handle they've shared with you. This prototype does not browse people.
- J
Jamie
ConnectedYour label: partner
Label (yours only) - A
Ari
Wants to connectYour label: none
Label (yours only)
Groups you organize
Plans where you are the organizer and three or more people participate. Membership never changes record grants — sharing stays explicit on each record.
- Open planSmorgasburg Saturday3 people · you organize
- Open planRockaway Beach Escape3 people · you organize
- Open planFall Foliage Weekend3 people · you organize
- Open planComedy Cellar Late3 people · you organize
- Open planDomino Park Sunset3 people · you organize
- Open planConey Island Day3 people · you organize
- Open planNowadays Sunday3 people · you organize
- Open planBotanic Cherry Blossoms3 people · you organize
- Open planRuss & Daughters Sunday3 people · you organize
- Open planHudson Valley Weekend3 people · you organize
People & sharing
Everyone with an explicit grant on a record you administer. Sharing authority is per-record and independent of Connection state or Plan participation.
- JJamie51 distinct records · combination, library, plan · up to Share
- AAri27 distinct records · combination, plan · up to Edit
- ?Someone you shared with1 distinct record · combination · up to Comment
- ?Someone you shared with1 distinct record · combination · up to View
- ?Someone you shared with1 distinct record · combination · up to Share
- ?Someone you shared with1 distinct record · plan · up to View
Agents
Per-agent capability scopes. Sensitive preferences are off by default and independently revocable. Plan-edit never implies calendar, messaging, sharing, private ratings, or sensitive preferences.
Planner copilot
Drafts options for confirmed plans. Never posts on your behalf.
- Edit plans
- Suggest plans
- Read your library
- CalendarOff by default
Confirms before turning on. Revocable on its own.
- MessagingOff by default
Confirms before turning on. Revocable on its own.
- SharingOff by default
Confirms before turning on. Revocable on its own.
- Private ratingsOff by default
Confirms before turning on. Revocable on its own.
- Sensitive preferencesOff by default
Confirms before turning on. Revocable on its own.
Date-night scout
Ambient suggestions for weekends. Off by default.
- Edit plans
- Suggest plans
- Read your library
- CalendarOff by default
Confirms before turning on. Revocable on its own.
- MessagingOff by default
Confirms before turning on. Revocable on its own.
- SharingOff by default
Confirms before turning on. Revocable on its own.
- Private ratingsOff by default
Confirms before turning on. Revocable on its own.
- Sensitive preferencesOff by default
Confirms before turning on. Revocable on its own.
Connected apps
Prototype only — no real integrations. Disconnecting or reconnecting an app never changes record grants.
Google Calendar
Not connectedScopes: Read primary calendar, Write plan events
Apple Notes
RevokedScopes: Read shared notes
Notifications
Per-kind and per-channel. Discreet content is independent of whether the notification is on.
New invitations
in-appDiscreetemailDiscreetpushDiscreetPlan responses
in-appDiscreetemailDiscreetpushDiscreetConcierge approvals
in-appDiscreetemailDiscreetpushDiscreetReminders
in-appDiscreetemailDiscreetpushDiscreetWeekly inspiration
in-appDiscreetemailDiscreetpushDiscreet
Privacy
Controls what other people can infer about you. Private ratings and personal notes are always author-only, regardless of these switches.
Your private ratings stay only-me regardless of this switch. This controls whether Shared ratings get suggested to Connections.
Turns off Connection-authored recommendation signals in Discover results for you. Your own private data is never used to personalize anything.
Communications
Where Datebook may reach you. This prototype does not send real messages.
- Primary emailNot set. Email delivery is not wired in this prototype.
- Push channelThis device (mock). Real push delivery is not wired in this prototype.
Account
Export, sign-out, and deletion. Data controls stay on your side.
Export, sign-out, and deletion are part of the production handoff. This prototype does not persist your data across the network — the entire store lives in-memory in this browser session.
Prototype: no export, sign-out, or delete controls are wired.

