This application is a self-hosted personal assistant operated by a single individual for their own private use. This policy explains what Google account data the application accesses and how it is handled. There is only one user: the owner and operator, who is also the person whose data it reads.
The application requests read-only access to the owner's own Google account:
https://www.googleapis.com/auth/gmail.readonly — reads the owner's own Gmail messages so the application can summarise recent, relevant email.https://www.googleapis.com/auth/calendar.readonly — reads the owner's own Google Calendar events so the application can report the day's schedule.These are read-only scopes. The application cannot send, modify, label, move, or delete any email or calendar entry, and it never attempts to.
Data read from Gmail and Calendar is used solely to present the owner with information about their own mailbox and schedule — for example, a short summary of recent non-spam email or a list of the day's events. The data is used only to serve the owner who granted access. It is not used for advertising, profiling, or any purpose unrelated to that assistance.
The application runs on the owner's own computer. The OAuth credential (token) is stored locally on that machine so the application can access the account without repeatedly prompting for sign-in. Message and event contents are processed in memory to produce summaries and are not retained in a separate long-term store beyond what is needed to present the current summary. Nothing is copied to any external database or cloud service operated by the application.
The application does not sell, rent, trade, or otherwise share Google user data with any third party. Data read from the account is never transferred to anyone other than the owner themselves. The application's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data accessed by the application is not reviewed by any outside party and is not used to train, fine-tune, or improve any general-purpose model. It is used only, at the moment of use, to answer the owner's own questions about their own mail and calendar.
The owner can revoke the application's access at any time from the Google Account permissions page at myaccount.google.com/permissions. Once revoked, the application can no longer read any Gmail or Calendar data. The locally stored token can also be deleted from the machine to remove access.
The OAuth token is kept on the owner's own machine with restricted file permissions and is not exposed to any public endpoint. The application requests the narrowest scopes it needs (read-only) and nothing more.
The application is a private tool for its adult owner and is not directed at children.
If the way the application uses Google data changes, this page will be updated and the "last updated" date above will change accordingly.
Questions about this policy can be sent to belatothpal2@gmail.com.