Privacy Policy

• Your Google profile — name, email address, and profile image, to identify your account.
• Calendar events — via the calendar.events scope. Fugit reads the timesof your events to find free space, and creates, updates, and deletes its own Focus / Do Not Disturb events. We store only event start/end times and Google’s event identifiers — not titles, descriptions, attendees, or locations of your real meetings.
• OAuth tokens — the access and refresh tokens Google issues so Fugit can act on your behalf between visits.
• Your settings — timezone, working hours, weekly focus target, and the like.

Your data is used solely to operate Fugit’s scheduling for you: reading busy times to place blocks, and writing/maintaining those blocks. We do not use it for advertising, we do not sell it, and we do not share it with third parties beyond Google’s own APIs that make the feature work.

Fugit’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer or use Google user data for serving ads, and no humans read your calendar data except where you explicitly ask us for support.

Data is stored in a managed Postgres database (Neon, US region) and the app is hosted on Vercel. OAuth access, refresh, and ID tokens are encrypted at rest with AES-256-GCM before they touch the database; the encryption key is held only in server configuration, never in the database.

You can delete your account and all associated data at any time from your Fugit settings. Deletion revokes Fugit’s Google access, removes your tokens, settings, and stored event times, and deletes the Focus / Do Not Disturb events Fugit created. This is immediate and irreversible.

Questions or requests: jap@josepalomares.com.