Privacy Policy | Great Scott Software

1. Who we are

Great Scott Software, LLC ("Great Scott", "we", "us"), an Oklahoma limited liability company, publishes Delivered, an email app for Windows, and Scheduled, a calendar app for Windows (together, "the apps"), and operates the website at greatscott.dev. This policy explains what information the apps and the website handle, why, and what control you have.

2. How the apps work

You add an account by signing in with Google in your web browser. Google asks you to approve specific permissions, then gives the app on your PC a token. The app uses that token to call Google's APIs directly from your PC. Your mail, events, contacts and attachments are copied into an encrypted database on your PC so the apps open quickly and keep working offline.

This traffic goes between your PC and Google. It does not pass through any Great Scott server, because we do not operate one for this purpose. We never receive your Google password, your tokens, or the content of your account.

The one Great Scott service the apps contact is the subscription check described in section 7. It handles your Microsoft Store purchase information only, never Google data.

3. Google user data the apps access

The apps request only the permissions ("scopes") below, and only when a feature needs them. Delivered requests the mail, contacts and Drive scopes. Scheduled requests the calendar, contacts and Drive scopes. Both request basic account information so they can show which account is signed in.

Permission	What it allows	What the app uses it for	App
`gmail.modify`	Read your Gmail messages, change them (labels, read state, archive, trash), create and edit drafts, and send email. Does not allow permanent deletion that bypasses Trash.	Showing your mailbox, conversations and attachments; searching; archiving, trashing, starring and marking messages read; writing and replying to messages, saving drafts, sending, and Undo Send; showing your labels and creating, renaming or deleting a label when you ask; keeping the app in sync with Gmail.	Delivered
`calendar`	View and manage your Google calendars and the events on them.	Listing your calendars, showing their names and colors, managing calendars when you ask, and showing, creating, editing and deleting events and their guest invitations when you ask.	Scheduled
`contacts.readonly`	Read your Google Contacts.	Suggesting recipients and guests as you type, and showing names and photos.	DeliveredScheduled
`contacts.other.readonly`	Read "Other contacts", the people you have emailed but not saved.	Adding those people to recipient and guest suggestions.	DeliveredScheduled
`drive.file`	Access only the Drive files that you choose with the app or that the app creates. It does not allow access to the rest of your Drive.	Uploading a large attachment to your Drive and inserting a link in your message, and attaching a Drive file to a calendar event.	DeliveredScheduled
`userinfo.email` `userinfo.profile`	Your Google account email address and basic profile information such as your name.	Identifying which account is signed in and showing your name and address in the app.	DeliveredScheduled

The apps use these permissions only for the features described above, and only for the account you signed in with.

4. How we use Google user data

The apps use Google user data only to provide the user-facing features you asked for inside the apps: reading, organizing, searching, writing and sending mail, and viewing and editing your calendar. Specifically:

We do not sell Google user data or transfer it to data brokers, advertising platforms or other third parties.
We do not use Google user data for advertising, including personalized, retargeted or interest-based advertising.
We do not use Google user data to develop, improve or train generalized AI or machine learning models.
No person at Great Scott reads your Google user data. The data stays on your PC and is never sent to us, so we have no access to it.
We do not use Google user data to determine credit-worthiness or for lending.

5. Google API Services User Data Policy

Delivered's and Scheduled's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In line with those requirements, we use data from the restricted Gmail scopes only to provide and improve the user-facing features visible in the apps. We do not transfer it to others except as needed to provide those features (for example, sending a message you wrote through Gmail), to comply with applicable law, or as part of a merger or sale with notice to you. We do not allow humans to read it, except with your explicit consent for specific messages, where necessary for security purposes such as investigating abuse, or where required by law. We do not use it for advertising.

6. Where your data lives and how it is protected

On your PC only. Your messages, events, contacts and search index are kept in a local database in your Windows user profile. There is no Great Scott cloud copy.
Encrypted database. The database is encrypted with SQLCipher (AES-256). The encryption key is generated randomly on your PC and protected with the Windows Data Protection API (DPAPI), so only your Windows user account can unlock it.
Protected sign-in credentials. Google tokens, and passwords for any IMAP accounts you add, are encrypted with DPAPI before they are saved.
Encrypted connections. The apps talk to Google over HTTPS. Automatic setup for other mail providers only uses servers that offer encrypted connections.
Safe sign-in. Sign-in happens in your own browser using OAuth 2.0 with PKCE. Google sends the result back to a temporary listener on your own PC (a localhost address). We never see your Google password.
Cached files. Attachments and images you open are cached in the apps' folder in your Windows user profile, and are removed with the account (see section 8).
No tracking inside the apps. The apps contain no analytics, advertising or crash-reporting services. Diagnostic information is kept on your PC and is not sent to us.

Everything below is sent directly from your PC to the party named. The only exception is the subscription check, which goes to a service Great Scott runs.

Subscription check (Great Scott and Microsoft). The apps are free to download and include a free trial, followed by a paid annual subscription sold through the Microsoft Store. To tell whether you have an active subscription to any of our apps, the app asks Windows for a Microsoft Store purchase key and sends it, with the name and version of the app, to a licensing service we run on greatscott.dev. The service uses the key to ask Microsoft whether you own one of our subscriptions and replies with the answer, which the app keeps on your PC. We do not store the key or the answer, and no Google user data, message content or contacts are involved. Billing and payment details are handled entirely by Microsoft. See also "Subscription checks" in section 9.
Google. Your account data is exchanged with Google's servers to run the features in section 3. Google's own privacy policy applies.
Other providers you add. If you add a Microsoft account (Outlook.com or Microsoft 365), an iCloud calendar, or an IMAP/SMTP account such as Yahoo, AOL or Fastmail, the apps connect to that provider with the credentials you supply. That provider's privacy policy applies to that account.
Mail server lookup. When you add a non-Google email account, the apps look up its server settings. They ask your email domain's own configuration address (which can include your email address) and, as a fallback, the public Mozilla Thunderbird configuration database at autoconfig.thunderbird.net (which receives only your email domain). This does not happen for Gmail accounts.
Connectivity check. The apps make a small request to a Google connectivity check address to learn whether you are online. It carries no account information.
Remote images in email (off by default). Delivered blocks images and other content hosted on remote servers. If you turn this on, or choose to show images in a message, your PC downloads them from the sender's servers, which can tell the sender that the message was opened and reveal your IP address.
Company logos for contacts (off by default). If you turn this option on, the domain of each correspondent you have not saved (for example example.com) is sent to Google's favicon service to fetch a logo. Message content and addresses are not sent.
Your own Google Drive. When you attach a large file, it is uploaded to your Drive and shared by link, as you choose.

The mail server lookup applies only to non-Google accounts, and the connectivity check carries no account information, so neither sends Google user data to anyone. The two optional features above are off by default and send only what is described: the logo option sends a bare domain name to Google's favicon service, never message content or email addresses, and remote images are fetched from the sender's own servers. None of these requests passes through Great Scott, and the subscription check sends no Google user data.

We do not sell your information and we do not share it with advertisers.

8. Retention and deletion

You are in control. Data stays on your PC until you remove it. When you remove an account in the apps' account settings, the app revokes its access with Google and deletes that account's messages, contacts, search index and cached attachments from your PC.
Uninstalling. Uninstalling an app from Windows also removes its local data.
Revoking access from Google. You can remove the apps' access at any time at myaccount.google.com/permissions.
Nothing to delete on our side. Because we hold no copy of your mail, calendar, contacts or files, there is nothing for us to erase. The subscription check stores nothing about you either. Your mail and events remain in your Google account until you delete them there.

9. This website and the beta list

This section covers the information that Great Scott itself collects. It is separate from the apps.

Beta sign-up

If you join the public beta, we collect:

the email address you enter, which we ask to be the one linked to your Microsoft account;
which apps you chose to test;
the time you signed up; and
your approximate country, which Cloudflare derives from your IP address. We do not store your IP address.

We use this only to invite you to the beta, give your Microsoft account access to the beta build, and send you updates about Delivered and Scheduled. We do not sell it or share it with advertisers. It is stored in a database in our Cloudflare account. You can ask us to remove it at any time (see section 13), and we will delete it within 30 days.

Subscription checks

When an app checks your subscription (section 7), our licensing service receives the Microsoft Store purchase key your PC sends, the name and version of the app, and the technical details of the request. It uses the key only to ask Microsoft whether you own a subscription and to send back the answer. We keep no database of these checks and do not store the key. Cloudflare, which hosts the service, may keep routine request logs as described below; we do not record purchase keys in them.

Hosting

The website and the licensing service are hosted on Cloudflare, which processes technical request information such as IP address and browser type to deliver and protect them, and may keep routine server logs. See Cloudflare's privacy policy for details. The site does not use advertising or analytics cookies.

10. Children

Delivered, Scheduled and this website are not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect their personal information. If you believe a child has joined the beta list, contact us and we will delete the entry.

11. Your rights and choices

Your app data is on your own PC, and you control it directly in the apps and through your Google account. For the beta list, depending on where you live (for example under the GDPR, UK GDPR or California privacy law), you can ask us to tell you what we hold about you, correct it, delete it, or stop contacting you. Contact us using the details in section 13. You may also complain to your local data protection authority.

The beta list may be processed in the United States and other countries where Cloudflare operates.

12. Changes to this policy

We may update this policy as the apps change. We will post the new version here with a new effective date. If we ever change how the apps use Google user data in a way that needs your consent, we will ask for it before the change takes effect.

13. Contact

Questions, requests or concerns about privacy: privacy@greatscott.dev