Privacy policy
Effective October 21, 2026.
Constellation is a personal app used only by its owner, on the owner's own Mac. This page explains what it does with Google user data.
Google data it uses
Constellation asks Google for these permissions, and no others:
| Permission (scope) | Why |
|---|---|
openid, email | To show which Google account is connected. |
gmail.readonly | To show the owner's own mail, read only: counts of unread and important mail from today, search results, and a conversation shown as plain text. |
calendar.events | To show the owner's events. Also to add, change or delete an event on a calendar the owner owns, but only after the owner sees a preview and confirms that exact change. No invitations or update emails are sent. |
calendar.calendarlist.readonly | To list the owner's calendars so they can choose which ones to show. |
Constellation never sends, drafts, deletes, labels or otherwise changes email.
How the data is handled
- Read live, not stored. Mail and calendar content is fetched from Google when the owner looks at it, and kept briefly in the app's memory to avoid repeat requests. It isn't written to a database, file, log or backup.
- One exception: when the owner asks Constellation's voice assistant what's on their calendar, the spoken answer goes through a temporary audio file that is deleted as soon as it has played. Email is never read aloud.
- Credentials: the sign-in tokens and the app's Google client credentials are stored only in the macOS Keychain on the owner's Mac. The short-lived access token is kept in memory only.
- Stays on the Mac: Google data never leaves the owner's Mac except in the requests to Google itself.
- Not shared, not sold, not used for ads. Google data isn't sent to any third party and isn't used to train AI models. Email content is never passed to the AI assistants inside Constellation.
Google API Services User Data Policy
Constellation's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Removing access
The owner can disconnect at any time:
- with Constellation's
google:disconnectcommand, which revokes the access at Google and deletes the stored credentials from the Keychain; or - in their Google Account, under Third-party apps & services.
Because no mail or calendar content is stored, disconnecting leaves no Google data behind.
Changes
This policy is updated before Constellation starts using any other Google data. The history of every change is public in this site's repository.
Contact
Open an issue in this site's GitHub repository.