docs: add PRIVACY.md

2026-10-16 23:33:51 +00:00
parent a1a24c8823
commit c35b1c1cb4
1 changed files with 36 additions and 0 deletions
@@ -0,0 +1,36 @@
+# Privacy Policy - Hermes Brief
+
+Last updated: 2026-10-16
+
+Hermes Brief is a personal tool used only by its owner. It is not offered to the public.
+
+## What data it accesses
+
+With the owner's explicit consent it requests two read-only Google permissions:
+
+- `gmail.readonly` - to read recent unread message headers and snippets.
+- `calendar.readonly` - to read calendar events for the current day.
+
+It cannot send, delete, or modify mail or calendar data.
+
+## How the data is used
+
+The data is used only to produce a daily summary for the owner. The summary is generated by a language model that runs on the owner's own computer. The data is not used for advertising, profiling, or model training.
+
+## Storage and sharing
+
+- Mail and calendar content is processed in memory and is not stored by the tool beyond the generated summary, which is delivered to the owner's own phone through a notification server the owner runs.
+- The only credential kept is an OAuth refresh token, stored in a private file on the owner's computer.
+- Data is not sold, shared, or transferred to any third party.
+
+## Google API Services User Data Policy
+
+Hermes Brief's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
+
+## Revoking access
+
+Access can be revoked at any time at https://myaccount.google.com/permissions, and by deleting the token files on the owner's computer.
+
+## Contact
+
+Open an issue in this repository.