Privacy Policy
Last updated: July 20, 2025
1. Introduction
Harmony is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application. We adhere to strict data protection standards and comply with the Google API Services User Data Policy, including the Limited Use requirements.
2. Google Account Integration
2.1 Authentication and Access
- We request access to your Gmail, Google Calendar, and Contacts data only after receiving your explicit consent
- We use secure OAuth 2.0 authentication provided by Google
- Your Google account credentials are never stored on our servers
- You can revoke access to your Google account at any time through the settings page in the app
- We access only the minimum Gmail, Calendar, and Contacts API scopes required for Harmony to function
2.2 Data Processing and Storage
- All email data is processed in accordance with Google API Services User Data Policy
- We only process and display email data in real-time - no copies are stored anywhere
- All data transmission is encrypted using industry-standard protocols
- OAuth access and refresh tokens are stored encrypted on our servers with regular secret rotation and access logging
3. Data Access and Usage
3.1 Google User Data
We access the following Google user data:
- Email content and metadata through Gmail API
- Calendar events (titles, times, attendees) through Google Calendar API
- Contact information through Google People API
- Email attachments when necessary
This data is used exclusively for providing email, calendar, and contact functionality within Harmony. No Google user data is used for advertising or marketing purposes.
Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.
3.2 Data Sharing
Google user data is never shared with or sold to third parties. We never sell your data to anyone - Harmony makes money through its subscription model. When necessary for core service functionality, we only work with service providers who comply with Google API Services User Data Policy and are bound by strict confidentiality agreements.
3.3 Analytics and Crash Reporting
We collect anonymized usage analytics and crash reports to identify bugs and improve performance. These reports never contain Google user data or personally identifiable information.
4. Voice Command Processing
Voice commands are processed through OpenAI's services. The minimal text necessary to fulfill your request (such as snippets of email, calendar, or contact content) may be included in these requests. All transmissions are encrypted and nothing is stored after processing.
5. Your Rights and Controls
- Right to revoke access to your Google account at any time
- Right to request deletion of any cached data
- Right to lodge complaints about data handling
- Right to request information about how your data is processed
- Right to delete your account and all data associated with it
6. Limited Use Disclosure
We affirm our use of information received from Google APIs adheres to the Limited use of user data requirement of the Google Workspace API User Data and Developer Policy.
7. Data Retention and Deletion
- Email data is processed in real-time only - no storage occurs anywhere
- OAuth tokens are retained only while your account is active and are deleted immediately when you revoke access or delete your account
- No Google data is retained after processing
- You can revoke application access at any time through your Google account settings
8. Children's Privacy
Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.
9. Changes to Privacy Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and, when appropriate, sending you a notification.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at nathan@harmonyassistant.com