Privacy Policy

Gmail Lokal Heri · last updated 6 November 2026

This policy describes how Gmail Lokal Heri ("the app") accesses, uses, stores, and shares Google user data. The app is a personal tool. It is used only by its owner, with the owner's own Gmail accounts. About the app.

Data the app accesses

For each Gmail account that the owner explicitly authorizes, the app uses the Gmail API scope https://www.googleapis.com/auth/gmail.modify to access:

• email messages and their metadata: sender, recipients, subject, date, and labels;
• the account's list of labels;
• drafts that the app creates.

How the data is used

• To prepare a private daily briefing for the owner, for example messages that need a reply, bills, tax and business notices, and security alerts.
• To apply the owner's labels to messages, and to create reply drafts for the owner to review.
• To count frequent senders, to help the owner create Gmail filters.

The app never sends email, deletes email, or moves email to Trash. It does not use Google user data for advertising.

Storage and security

• The app runs only on the owner's computer. It has no server or database of its own.
• Authorization tokens are stored on that computer, encrypted with Windows Data Protection (DPAPI). Only the owner's Windows account can open them.
• The app keeps no copy of email content. A short summary of selected messages (sender, subject, and a one-line note) is saved in the owner's private briefing page in the owner's own Claude account.

Sharing

Google user data is not sold and is not shared with anyone. To prepare the briefing, message content is processed by the owner's AI assistant, Claude by Anthropic, under the owner's own account, and only to provide the briefing to the owner. The app does not use Google user data to develop, improve, or train artificial intelligence or machine learning models.

Limited Use

The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and removal

• Access stays authorized until the owner revokes it. The owner can remove access at any time at myaccount.google.com/permissions; the stored token then stops working immediately, and the owner can delete it from the computer.
• Briefing summaries remain in the owner's private briefing page until the owner deletes them.

Contact

Questions about this policy can be sent to the support email shown on the app's Google consent screen.