Last updated: 27 September 2026
This Privacy Policy explains how Mwale Agents (“the app”) handles information when a Google account is connected to it. The app is operated by Mwale Kalenga (“I”, “me”) for personal use only. It is not offered to the public.
1. Who uses the app
The app is used only with Google accounts that I own and control. It is not designed for, marketed to, or intended for anyone else. If someone else signs in, their data will be handled as described below, and they can remove the app’s access at any time (see section 7).
2. What data the app accesses
When a Google account is connected, the app requests access to Google Calendar through Google’s OAuth consent screen. Depending on the permissions granted, it can access:
- the list of calendars on the account
- calendar events, including titles, times, descriptions, locations, attendees and reminders
- free/busy information
- the account’s email address, to identify which account is connected
The app does not access Gmail, Google Drive, contacts, or any other Google service.
3. How the data is used
Calendar data is used only to provide the app’s features to the account owner:
- reading calendars and events so that my AI assistants can tell me what is scheduled
- creating, updating and deleting events, such as reminders for my own deadlines
- responding to event invitations on my behalf
Calendar data is not used for advertising, is not sold, and is not used to build profiles of anyone.
4. AI processing
The app’s features are carried out by AI assistants. To act on a request, relevant calendar data (for example an event’s title and time) may be sent to the AI model provider that runs the assistant at that moment, such as OpenRouter, Anthropic or DeepSeek, solely to process that request. These providers process the data under their own terms. Google user data is not used by the app to develop, improve or train generalized or non-personalized AI or machine learning models.
5. Storage and security
- OAuth access and refresh tokens are stored on a private server that I control, with access restricted to me.
- Calendar data itself stays in Google Calendar. The app does not keep a separate copy, other than short-lived conversation history held by the AI assistant while it works on a request.
- Reasonable measures are taken to protect this data, including encrypted connections (HTTPS) and key-based access to the server. No method of storage or transmission is completely secure.
6. Sharing
Google user data is not shared with, transferred to, or sold to anyone, except:
- the AI model providers described in section 4, to carry out the account owner’s own request
- where required by law
- as part of a security incident response where necessary to protect the account owner
7. Your choices and deletion
You can revoke the app’s access at any time at myaccount.google.com/permissions. Revoking access stops the app from reading or changing your calendar. To have stored tokens deleted, send a request through the contact form and they will be deleted within 30 days.
8. Google API Services User Data Policy
Mwale Agents’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
9. Children
The app is not intended for anyone under 18.
10. Changes
This policy may be updated. The date at the top shows when it last changed.
11. Contact
Mwale Kalenga, through the contact form.