Gormur is a private, single-user service. The person who runs it is its only user, and the only
data it handles is that person's own mail and calendars. This policy describes what the service
does with that data, including data obtained from Google.
What is accessed
Gmail: messages in the connected mailbox — their headers (sender, recipients,
subject, date, list headers), labels and text. Attachments are not read.
Google Calendar: the list of calendars and their events in a window around
the present (title, time, location, the owner's response).
Sign-in: the owner's email address, to check that the person signing in is the
owner.
How it is used
To show the owner what needs attention: mail that asks for a reply or an action, deadlines,
upcoming events, and a daily digest of the rest.
To suggest tasks, filing and calendar entries. Nothing is changed in a mailbox or calendar
without the owner's confirmation: with it, and only on an account connected with that permission,
the service can remove the Inbox label from a message (archive it) or create a calendar event
without attendees. It never deletes mail, never sends mail and never sends invitations.
For nothing else. Data is not sold, not used for advertising, and not used to build profiles.
What is stored
Stored: identifiers, sender, subject, date and labels of recent messages; short summaries and
short quoted excerpts that support a task or deadline; tasks; a copy of upcoming calendar events;
the owner's rules and settings.
Not stored: message bodies and attachments. A message's text is read from Gmail when it is
analysed or when the owner opens it, held in memory for that request, and discarded.
Access tokens for Google are stored encrypted, with the key kept separately from the database,
and are deleted when an account is disconnected.
Logs contain identifiers and status codes only — no message text, subjects or addresses.
Who else processes it
Cloudflare hosts the service (compute, database, queues) and is a processor of
everything above.
AI model providers, when analysis is switched on: the text of a message may be
sent, through a gateway with logging and caching turned off, to a model on a route with
zero-data-retention terms, to classify it and extract tasks, dates and events. The model can only
return text; it cannot act on a mailbox or calendar.
Apple delivers push notifications. By default a notification carries generic
text and an opaque identifier, not message content.
Data from Google is never used to develop, improve or train generalized AI or machine-learning
models, and no human reads it other than the owner.
Google API Services User Data Policy
Gormur's use and transfer to any other app of information received from Google APIs will adhere
to the Google
API Services User Data Policy, including the Limited Use requirements.
Retention and deletion
Records derived from mail are removed after 180 days unless an open task still refers to them;
the calendar copy 90 days after an event ends.
The owner can disconnect an account (its tokens are deleted at once), delete everything derived
from an account, or delete everything, from the app's settings, and can export what is stored.
The service has one user, who is also its operator. If you believe it holds something of yours,
reply to the person you have been corresponding with; they run it.