Privacy at Jarurat Mail

Google Calendar, if you connect it

Connecting is optional and personal: each person decides whether to connect their own Google account, from the calendar in their mailbox.

Jarurat Mail asks Google for three things:

• your email address, to show which Google account is connected;
• permission to see, create, change and delete events on calendars you own;
• the list of your calendars, so you can choose which one receives events.

It uses that access for one thing. When you accept an invitation in Jarurat Mail with "Add to Google Calendar" ticked, it adds a copy of that event to the calendar you chose, and it changes or cancels that copy when the organizer updates or cancels the meeting. It does not read your other events, and it never touches your Gmail, Drive, contacts or any other Google data.

What it keeps: the connected account's email address and Google account id, the permissions you granted, the calendar you chose, which events it copied, and the token Google issues, which is encrypted (AES-256-GCM) with a key held only on the server. Google data is not sold, not shared with anyone, not used for advertising and not used to train any AI model. It is used only to keep the copies of your accepted invitations up to date.

"Disconnect", in the same place, revokes Jarurat Mail's access at Google and deletes the stored token at once. You can also remove the access at any time from your Google Account, at myaccount.google.com/permissions.

Jarurat Mail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.