CalWidgetPrivacy Policy
This policy explains what CalWidget ("the app") does with your data.
The short version: your data stays on your Mac. We don't collect it, store it, or see it.
Who we are
The app is a free, open-source project by Hitjack007 (github.com/Hitjack007). Contact: hitjack007.master@gmail.com.
What Google user data the app accesses
When you sign in with Google, the app requests one permission (OAuth scope):
https://www.googleapis.com/auth/calendar.readonly: read-only access to your Google Calendar.
With it, the app requests your calendar list and the events for the month being shown. From Google's response, the app keeps and uses only:
- from your calendar list: each calendar's name and color
- from the events in the calendars you choose to show: title, start and end date and time, and whether it's an all-day event
Anything else Google returns, such as event descriptions, locations, or guest lists, is discarded immediately and never stored.
The app can't create, modify, or delete anything in your calendar. It doesn't access your Gmail, contacts, Drive, or any other Google data.
How the app uses Google user data
Calendar data is used only to display your events in the widget and in the app's window on your own Mac. It isn't used for anything else: not for advertising, not for profiling, not for analytics, and not to train AI or machine-learning models.
How the app stores Google user data
- Event and calendar data is cached locally on your Mac, in a container shared only between the app and its widget, so the widget can display it.
- Your Google sign-in tokens are stored in the macOS Keychain.
- Nothing is stored anywhere other than your Mac. We don't run any servers, so there is no copy on our side.
How Google user data is shared
It isn't. Your Mac talks directly to Google's servers, with no server run by us in between. We don't sell, share, transfer, or disclose Google user data to anyone, and we never receive it ourselves. We run no analytics, advertising, crash reporting, or tracking of any kind.
How your data is protected
- All communication with Google uses encrypted HTTPS connections.
- Sign-in tokens are kept in the macOS Keychain, which encrypts them and limits access to this app.
- Cached calendar data stays inside the app's sandboxed container on your Mac.
- Nobody reads your data. It never leaves your Mac except to and from Google.
Google sign-in
The app signs in through Google's own sign-in page. Google shows you exactly what the app is asking for before you agree, and you can say no. Your password is entered only on Google's page and is never seen by the app or by us.
Google API Services User Data Policy
CalWidget's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Retention and deletion
- Remove the cached data: quit the app and delete it. Choose "Sign out" in the app to clear the local cache and stored tokens.
- Revoke access at any time: visit myaccount.google.com/permissions, select the app, and choose "Remove access".
Because we hold no copy of your data, there is nothing for us to delete on our side.
Children
The app isn't directed at children under 13, and we don't knowingly collect any data from anyone.
Changes
If this policy changes, the updated version will be posted here with a new date. The full history is in the project's GitHub repository.
Contact
Questions about this policy: hitjack007.master@gmail.com or open an issue at github.com/Hitjack007/CalWidget/issues.