Privacy policy

Last updated: 27 October 2026

Astra is a private, single-user assistant. It is not a public service and has no users other than its owner. This policy describes the one Google account it is authorised to access.

What is accessed

Exactly one Google service: Google Calendar, through the https://www.googleapis.com/auth/calendar scope. The application uses it to create and maintain a single secondary calendar named “Astra — Health & Meds”, and the recurring events inside it.

What is stored

An OAuth refresh token, held in a file readable only by the operating-system user that runs the application, on a server controlled by the owner. No calendar content is copied elsewhere. No analytics, no tracking, no advertising identifiers.

What is shared

Nothing. Data is not sold, rented, disclosed, or transferred to any third party. No third-party service receives calendar data.

Retention and deletion

The token is deleted when the owner revokes access, which can be done at any time at myaccount.google.com/permissions, or by deleting the calendar itself. Either action ends all access immediately.

Google API Services User Data Policy

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Contact

chris.mark.allison@gmail.com