Privacy policy

Kea ("the app") is a private tool of Ryan Bregieta. It signs in to Google through the OAuth app(s) PlexiBexi Persoonlijk and PlexiBexi Breghazel, which are used only with the owner's own Google Accounts. This policy explains what the app does with data from those accounts. Contact: r.bregieta@gmail.com.

What the app accesses

Only after the owner signs in with Google and allows it, the app uses these permissions:

• Read, compose and send email, and manage labels (gmail.modify, gmail.send): to read new mail, summarise it, label or archive it, and send the replies and messages the owner asks for.
• View and edit calendar events (calendar.readonly, calendar.events): to read the owner's agenda and to create or change events he asks for.

The app does not access any other Google service, and it does not access anyone's account except the owner's own.

How the data is used

The data is used only to provide the assistant's features to the owner: summaries, reminders, drafts, replies and agenda changes that he can see and control. To write those answers, the relevant message or event content is processed by a large language model service, only for that purpose.

The app does not use Google user data for advertising, profiling or selling, does not sell, rent or share it with anyone else, and does not use it to train general AI models.

Where it is stored

The app runs on the owner's own private server, which is not open to the public. The sign-in tokens Google issues are stored only there, in files only the app can read. The app keeps a small working record of messages it has handled (such as message ids, labels and short notes) so it does not handle the same message twice. Nothing is sent anywhere except to Google's own APIs and, as described above, to the language model service that produces the assistant's answers.

Deleting data and revoking access

Access can be revoked at any time on myaccount.google.com/permissions (Third-party apps & services). Deleting the stored tokens removes the app's access; any working records can be deleted at any time. On request to r.bregieta@gmail.com they are deleted within 7 days.

Limited Use

Kea's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google's own handling of your data is described in the Google Privacy Policy.

This website

This website sets no cookies and runs no tracking or analytics. Its host, Cloudflare, may process technical request data (such as IP addresses) to deliver and protect the site.

Changes

When this policy changes, the date at the top changes with it.