Data and control

Privacy policy

Last updated 3 November 2026

Caroline Gmail Desktop is maintained by its owner for one configured Gmail account. This policy covers that application's Gmail integration and its information website. Privacy and data-removal enquiries can be sent to her.owncloud@gmail.com.

Information accessed

With the owner's Google consent, Caroline can access the account's email address, labels, message and thread identifiers, sender and subject headers, dates, and message text. The current reader excludes attachments. Google's gmail.modify permission supports reading and reversible inbox organisation.

Google authorisation tokens are handled by the local Gmail helper and Google. They are kept in access-restricted files on the Mac, not included in AI tool results or this website. Caroline does not ask for the Google password in its chat.

How Gmail data is used

Data supports the owner's searches, reading, summaries and inbox organisation. Changes to labels, read state, stars, importance and inbox placement use bounded actions with local recovery receipts. The integration exposes no sending, draft creation, Trash or permanent deletion action.

The approved newsletter collector checks for subscription mail and saves candidate message text, source links, metadata and collection progress locally. For checked messages that are not candidates, it retains a deduplication identifier and receipt time rather than their bodies. The collector does not mark mail read, make AI requests or publish material.

AI processing and sharing

When an authorised conversation reads Gmail material, returned message text and metadata can form part of the AI request. The current route is Nous Portal and the model provider used by that route. This is external processing, even though Caroline's interface and local records run on the Mac.

Nous Privacy Mode was enabled for the account used by Caroline on 3 November 2026. Under the Nous privacy policy, this opts future inference content out of routine storage and use for training, product improvement and support, with exceptions for security, legal obligations and service operation. It does not erase earlier data or change downstream providers' policies.

Model providers also process the content needed for the request. For OpenAI API processing, OpenAI's published data policy excludes training by default unless its customer opts in, and describes separate retention for abuse monitoring and some features. These are provider policies, not a guarantee that all processing stays on the Mac or that every service retains nothing.

Caroline uses Gmail data only for the owner's visible reading, organisation and subscription-workflow features. It does not sell that data, use it for advertising or use it to train general-purpose AI models. Caroline's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including Limited Use, and the Google Workspace user data and developer policy.

Storage and retention

Newsletter candidates, collection identifiers and progress are stored in Caroline's local profile. Gmail excerpts used in conversations may remain in local chat history, summaries or notes the owner chooses to save. Label-change receipts are also retained locally. These records have no fixed automatic deletion period.

Local records may be included in the owner's backups. Material deliberately saved into a synchronised notes folder or exported elsewhere follows that destination's settings. Provider-held data is subject to the provider's terms and controls. Quitting Caroline does not erase saved data.

Stopping access and removing data

The owner can pause newsletter collection in Caroline and revoke the app's access through Google Account connections. Revocation stops future authorised access but does not remove existing local copies or change the original Gmail messages.

Removal of saved Gmail material is a separate, owner-directed maintenance action. Contact the address above to arrange removal from active local records and identify any related notes, exports, backups or provider copies that also need attention. There is no automatic one-button purge or promise of immediate erasure from every backup.

This website

These pages contain no sign-in, mailbox connection, forms, analytics scripts or advertising. They do not request Gmail data. The public information website uses Cloudflare Pages. Cloudflare processes visitor connection and traffic information, including IP addresses, to serve and protect the website, as described in its privacy policy. Hosting these pages does not give Cloudflare access to Caroline's local Gmail credentials, mail store or conversations.

Changes

The owner will update the date and disclosures before introducing materially different data use or sharing, and obtain any required consent before that change takes effect.