Last updated 12 August 2026
Clawd Calendar ("the app") is an independent macOS application. This policy explains exactly what data the app touches, why, where it is kept, and how to remove it. It covers the macOS app distributed from this website.
Clawd Calendar is made and operated by an individual developer, reachable at dhruvsingh2084@gmail.com. There is no company, no staff, and no third party with access to anything described here.
The app asks your permission for two Google OAuth scopes, and no others. You grant them once when you connect your account.
| Scope | What it reads or writes | Why the app needs it |
|---|---|---|
.../auth/calendar.events |
Reads events in your primary calendar within a short window around the present time — title, start and end time, location, meeting link, organiser, and the attendee list with each person's response. Writes back only your own attendance response when you press RSVP Yes or RSVP No. | These are the details the reminder puts on screen, and the reason it knows when to appear. The write is what makes the RSVP buttons work; the read-only alternative would remove that feature entirely. |
.../auth/userinfo.email |
Reads your Google account's email address. Nothing else from your profile. | So the menu bar can show which account is connected. Without it the app cannot tell you whose calendar it is watching. |
Google user data is used for exactly one purpose: showing you your own upcoming meeting on your own screen, and acting on the buttons you press. Specifically:
Nobody. To be concrete about what does not happen:
The app contacts exactly two places:
accounts.google.com,
oauth2.googleapis.com and www.googleapis.com, to sign
in, renew the token, read your calendar and write your RSVP.
clawd-calendar.vercel.app, which serves this same
site under its original hostname; update checks were deliberately left there
because that address cannot lapse, and an installed copy that could no longer
find updates would be far worse than a broken link. This request carries no
personal data and no calendar data. Like any web request it necessarily
reveals your IP address to the host, which tells us only that some copy of the
app checked for an update. No identifier is attached, and no record is kept.
Two independent ways, either of which is sufficient:
Deleting the app removes it and its local preferences from your Mac. Because no copy of your data exists off your machine, there is nothing else to request the deletion of — but if you would like confirmation of that in writing, email the address below and you will get it.
The app is a work tool and is not directed at children under 13. No age information is collected, because no personal information is collected at all.
Tokens are kept in the macOS login keychain rather than in a settings file. Sign in uses the authorization-code flow with PKCE, and the callback listener is bound to your machine's loopback interface only. Application updates are signed with a private key and verified by the app before installation, so a compromised host or a hostile network cannot deliver code to your Mac. No system is perfect, and the app's remaining limitations are documented publicly rather than hidden.
If this policy changes, the revised version will be posted here with a new date at the top. Any change that would broaden what data is collected or who it is shared with would require your consent through a fresh Google sign-in.
Questions about this policy, or about your data: dhruvsingh2084@gmail.com.