Privacy Policy
MyDay Google Connector · Last updated: 2026-09-24
MyDay is a personal dashboard operated by Brandon Le. It connects Google accounts that Brandon configures for his own use. MyDay is not a public sign-up service and does not offer accounts to other users. The local poller is configured for brandonvinhle@gmail.com and brandon.le@aputure.us. The Google OAuth project is External; Google production status itself does not enforce an account allowlist.
Google data accessed and purpose
MyDay requests the Google account email address, Gmail modify access, and Google Calendar access. It reads messages and calendar events to populate the personal dashboard. When Brandon confirms an action, MyDay can archive a Gmail message, create a calendar event, or delete a proposed duplicate event.
The Calendar scope is broad: Google describes it as permitting access to see, edit, share, and permanently delete calendars available to the account. MyDay uses the scope for its calendar display and confirmed event actions. MyDay does not request the Google Drive API scope.
Storage and sharing
OAuth client configuration, refresh tokens, and access-token caches are stored in a MyDay-only folder on Brandon's Mac with restrictive local file permissions. They are separate from other Google OAuth credentials and are not stored in the COWORK Google Drive folder.
The MyDay dashboard export contains Gmail- and Calendar-derived items. It is written to a Google Drive-synced COWORK folder and published to the password-gated Pocket dashboard at pocket.brandonvle.com. Google Drive sync and the private Pocket server therefore process the dashboard export. People with valid Pocket access can see its contents.
Google processes data under Google's terms. Google Drive and the private Pocket server provider supply infrastructure. MyDay does not intentionally give its OAuth refresh tokens to other services. The data is not sold or used for advertising.
Retention and choices
Google-derived dashboard data remains in published dashboard copies until those copies are replaced or removed. There is no fixed retention period or promise of automated deletion from backups. Revoking MyDay from the connected Google Account stops future access but does not itself delete dashboard copies.
To remove local credentials, delete the relevant .google.<email>.json and .tok.<email>.json files from ~/.claude/myday/. To request removal of synced or published copies, contact the operator.
Security and contact
MyDay credentials are stored locally with restrictive permissions, and the live dashboard is behind Pocket's password gate. No internet service can be guaranteed completely secure.
Questions or removal requests: brandonvinhle@gmail.com.