1. Who we are
Great Scott ("we", "us") publishes Delivered, an email app for Windows, and Scheduled, a calendar app for Windows (together, "the apps"), and operates the website at greatscott.dev. This policy explains what information the apps and the website handle, why, and what control you have.
2. How the apps work
You add an account by signing in with Google in your web browser. Google asks you to approve specific permissions, then gives the app on your PC a token. The app uses that token to call Google's APIs directly from your PC. Your mail, events, contacts and attachments are copied into an encrypted database on your PC so the apps open quickly and keep working offline.
This traffic goes between your PC and Google. It does not pass through any Great Scott server, because we do not operate one for this purpose. We never receive your Google password, your tokens, or the content of your account.
3. Google user data the apps access
The apps request only the permissions ("scopes") below, and only when a feature needs them. Delivered requests the mail, contacts and Drive scopes. Scheduled requests the calendar, contacts and Drive scopes. Both request basic account information so they can show which account is signed in.
| Permission | What it allows | What the app uses it for | App |
|---|---|---|---|
gmail.modify | Read your Gmail messages and change them (labels, read state, archive, trash). Does not allow permanent deletion that bypasses Trash. | Showing your mailbox, conversations and attachments; searching; archiving, trashing, starring and marking messages read; keeping the app in sync with Gmail. | Delivered |
gmail.compose | Create and edit drafts and send email. | Writing and replying to messages, saving drafts, sending, and Undo Send. | Delivered |
gmail.labels | Create, read, update and delete Gmail labels. | Showing your labels in the sidebar, and creating, renaming or deleting a label when you ask. | Delivered |
calendar | View and manage your Google calendars. | Listing your calendars, showing their names and colors, and managing calendars when you ask. | Scheduled |
calendar.events | View and edit events on your calendars. | Showing your events, and creating, editing and deleting events and their guest invitations when you ask. | Scheduled |
contacts.readonly | Read your Google Contacts. | Suggesting recipients and guests as you type, and showing names and photos. | DeliveredScheduled |
contacts.other.readonly | Read "Other contacts", the people you have emailed but not saved. | Adding those people to recipient and guest suggestions. | DeliveredScheduled |
drive.file | Access only the Drive files that you choose with the app or that the app creates. It does not allow access to the rest of your Drive. | Uploading a large attachment to your Drive and inserting a link in your message, and attaching a Drive file to a calendar event. | DeliveredScheduled |
userinfo.emailuserinfo.profile | Your Google account email address and basic profile information such as your name. | Identifying which account is signed in and showing your name and address in the app. | DeliveredScheduled |
The apps use these permissions only for the features described above, and only for the account you signed in with.
4. How we use Google user data
The apps use Google user data only to provide the user-facing features you asked for inside the apps: reading, organizing, searching, writing and sending mail, and viewing and editing your calendar. Specifically:
- We do not sell Google user data or transfer it to data brokers, advertising platforms or other third parties.
- We do not use Google user data for advertising, including personalized, retargeted or interest-based advertising.
- We do not use Google user data to develop, improve or train generalized AI or machine learning models.
- No person at Great Scott reads your Google user data. The data stays on your PC and is never sent to us, so we have no access to it.
- We do not use Google user data to determine credit-worthiness or for lending.
5. Google API Services User Data Policy
Delivered's and Scheduled's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In line with those requirements, we use data from the restricted Gmail scopes only to provide and improve the user-facing features visible in the apps. We do not transfer it to others except as needed to provide those features (for example, sending a message you wrote through Gmail), to comply with applicable law, or as part of a merger or sale with notice to you. We do not allow humans to read it, except with your explicit consent for specific messages, where necessary for security purposes such as investigating abuse, or where required by law. We do not use it for advertising.
6. Where your data lives and how it is protected
- On your PC only. Your messages, events, contacts and search index are kept in a local database in your Windows user profile. There is no Great Scott cloud copy.
- Encrypted database. The database is encrypted with SQLCipher (AES-256). The encryption key is generated randomly on your PC and protected with the Windows Data Protection API (DPAPI), so only your Windows user account can unlock it.
- Protected sign-in credentials. Google tokens, and passwords for any IMAP accounts you add, are encrypted with DPAPI before they are saved.
- Encrypted connections. The apps talk to Google over HTTPS. Automatic setup for other mail providers only uses servers that offer encrypted connections.
- Safe sign-in. Sign-in happens in your own browser using OAuth 2.0 with PKCE. Google sends the result back to a temporary listener on your own PC (a
localhostaddress). We never see your Google password. - Cached files. Attachments and images you open are cached in the apps' folder in your Windows user profile, and are removed with the account (see section 8).
- No tracking inside the apps. The apps contain no analytics, advertising or crash-reporting services. Diagnostic information is kept on your PC and is not sent to us.
7. Who else receives data
Everything below is sent directly from your PC. None of it passes through Great Scott.
- Google. Your account data is exchanged with Google's servers to run the features in section 3. Google's own privacy policy applies.
- Other providers you add. If you add a Microsoft account (Outlook.com or Microsoft 365), an iCloud calendar, or an IMAP/SMTP account such as Yahoo, AOL or Fastmail, the apps connect to that provider with the credentials you supply. That provider's privacy policy applies to that account.
- Mail server lookup. When you add a non-Google email account, the apps look up its server settings. They ask your email domain's own configuration address (which can include your email address) and, as a fallback, the public Mozilla Thunderbird configuration database at autoconfig.thunderbird.net (which receives only your email domain). This does not happen for Gmail accounts.
- Connectivity check. The apps make a small request to a Google connectivity check address to learn whether you are online. It carries no account information.
- Remote images in email (off by default). Delivered blocks images and other content hosted on remote servers. If you turn this on, or choose to show images in a message, your PC downloads them from the sender's servers, which can tell the sender that the message was opened and reveal your IP address.
- Company logos for contacts (off by default). If you turn this option on, the domain of each correspondent you have not saved (for example
example.com) is sent to Google's favicon service to fetch a logo. Message content and addresses are not sent. - Your own Google Drive. When you attach a large file, it is uploaded to your Drive and shared by link, as you choose.
We do not sell your information and we do not share it with advertisers.
8. Retention and deletion
- You are in control. Data stays on your PC until you remove it. When you remove an account in the apps' account settings, the app revokes its access with Google and deletes that account's messages, contacts, search index and cached attachments from your PC.
- Uninstalling. Uninstalling an app from Windows also removes its local data.
- Revoking access from Google. You can remove the apps' access at any time at myaccount.google.com/permissions.
- Nothing to delete on our side. Because we hold no copy of your mail, calendar, contacts or files, there is nothing for us to erase. Your mail and events remain in your Google account until you delete them there.
9. This website and the beta list
This section covers the information that Great Scott itself collects. It is separate from the apps.
Beta sign-up
If you join the public beta, we collect:
- the email address you enter, which we ask to be the one linked to your Microsoft account;
- which apps you chose to test;
- the time you signed up; and
- your approximate country, which Cloudflare derives from your IP address. We do not store your IP address.
We use this only to invite you to the beta, give your Microsoft account access to the beta build, and send you updates about Delivered and Scheduled. We do not sell it or share it with advertisers. It is stored in a database in our Cloudflare account. You can ask us to remove it at any time (see section 13), and we will delete it within 30 days.
Hosting
The website is hosted on Cloudflare, which processes technical request information such as IP address and browser type to deliver and protect the site, and may keep routine server logs. See Cloudflare's privacy policy for details. The site does not use advertising or analytics cookies.
10. Children
Delivered, Scheduled and this website are not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect their personal information. If you believe a child has joined the beta list, contact us and we will delete the entry.
11. Your rights and choices
Your app data is on your own PC, and you control it directly in the apps and through your Google account. For the beta list, depending on where you live (for example under the GDPR, UK GDPR or California privacy law), you can ask us to tell you what we hold about you, correct it, delete it, or stop contacting you. Contact us using the details in section 13. You may also complain to your local data protection authority.
The beta list may be processed in the United States and other countries where Cloudflare operates.
12. Changes to this policy
We may update this policy as the apps change. We will post the new version here with a new effective date. If we ever change how the apps use Google user data in a way that needs your consent, we will ask for it before the change takes effect.
13. Contact
Questions, requests or concerns about privacy: privacy@greatscott.dev