Privacy policy
Effective November 1, 2026
Duet is a personal tool used by one person, its owner. The only Google account it connects to is the owner's own.
Google data Duet accesses
- Gmail (
gmail.metadata): the sender, subject, time and labels of unread messages marked important. Duet can't read email bodies or attachments. - Google Calendar (
calendar.events.readonly): event titles, start and end times, and status.
How Duet uses it
Duet uses this data only to show the owner their important unread email and upcoming events in a daily brief. It doesn't use the data for advertising, and doesn't use it to train AI models. Duet doesn't send this data to any AI model.
Where it's stored
- Email senders and subjects, event titles and event times are stored in a database on a private server the owner rents. Subjects and titles are cut to 150 characters.
- The Google sign-in tokens are stored encrypted in n8n, the automation software on that server that connects to Google.
- The owner's private status dashboard reads from the same database. It isn't on the public internet.
How long it's kept
Stored items are kept until the owner deletes them. Duet doesn't delete them automatically. The owner can delete them at any time, and can remove Duet's access from their Google Account permissions.
Who it's shared with
Duet doesn't sell this data. The only outside service that receives it is Telegram, which delivers the daily brief to the owner's private chat, so the lines in that brief pass through Telegram and stay in that chat. Duet doesn't share the data with anyone else, unless the law requires it.
Google's Limited Use rules
Duet's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Changes
If Duet's use of this data changes, this page will be updated and its effective date changed.