Privacy Policy

Ganymede — last updated 14 August 2026

Ganymede is private, single-user software operated by one individual for their own personal use. It has no other users and collects no data from anyone else. This policy describes how Ganymede handles the operator's own Google user data.

What Ganymede accesses

Ganymede requests exactly two Google OAuth scopes, both read-only:

• https://www.googleapis.com/auth/calendar.calendarlist.readonly — to list which calendars exist, so specific calendars can be selected.
• https://www.googleapis.com/auth/calendar.events.readonly — to read events from the selected calendars.

Ganymede requests no write scope of any kind. It cannot create, modify, or delete calendars or events. It requests no other Google data — no email, no contacts, no files, no profile or identity scope.

How it is used

Calendar data is used solely to answer the operator's own questions about their own schedule, and to send the operator reminders about their own events. It is used for no other purpose.

Where it is stored

Calendar data and OAuth credentials are stored only on a single computer owned and physically controlled by the operator. Credentials are held in the operating system's encrypted secret storage. Backups are encrypted. No data is stored on any third-party server operated by anyone else.

What is never done with it

• Google user data is never sold, rented, or transferred to anyone.
• It is never used for advertising, marketing, profiling, or analytics.
• It is never sent to any third-party service or other application.
• It is never used to train, fine-tune, or improve any AI or machine learning model.
• No human other than the operator ever reads it.

Limited Use disclosure

Ganymede's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

The operator can disconnect Ganymede from Google Calendar at any time. On disconnect, the stored OAuth refresh token and associated key material are deleted, and Ganymede can no longer reach Google. The operator can separately purge all stored calendar content from local storage. Access can also be revoked independently at any time from the operator's own Google Account permissions page at myaccount.google.com/permissions.

Contact

Questions about this policy: cc@tpmind.com