Privacy Policy

Last updated: 2026-05-30 · Operator: Craig M. Brown · Contact: [email protected]

This Privacy Policy describes how the BlindOracle / TheBaby automation application ("the Application", "we", "our") accesses, uses, stores, and protects information — including data obtained through Google APIs. The Application is a personal automation system operated by Craig M. Brown that processes the operator's own email, calendar, and media accounts to perform tasks such as message triage, notifications, scheduling, and research summarization.

1. Information We Access

Source	Data	Why
Gmail	Message content, metadata, labels; ability to send/compose/modify	Read and triage incoming mail; send notifications and replies on the operator's behalf; organize with labels
Google Calendar	Calendar events and details	Read and create events for scheduling automation
YouTube	Read-only liked-video and channel data	Generate research summaries from videos the operator has liked

2. How We Use the Data

To perform the automation tasks explicitly initiated or configured by the operator (email triage, sending notifications, calendar management, research summaries).
Processing occurs on the operator's own private server infrastructure.
We do not use Google user data for advertising, and we do not sell or rent it.

Google API Services — Limited Use Disclosure

The Application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only use access to read, write, modify, or control Gmail/Calendar/YouTube data to provide the user-facing features described above.
We do not transfer this data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger/acquisition with user notice.
We do not use this data for serving advertisements.
We do not allow humans to read this data unless: (a) we obtain the user's consent for specific messages, (b) it is necessary for security purposes (e.g., investigating abuse), (c) to comply with applicable law, or (d) the data is aggregated and anonymized for internal operations.

3. Data Sharing

We do not share Google user data with third parties. The Application may send the operator's own content to the operator's own notification channels (e.g., the operator's WhatsApp/email). No data is shared with external advertising, analytics, or data-broker services.

4. Data Storage & Retention

OAuth tokens and any cached data are stored on private, access-controlled server infrastructure under the operator's sole control. Data is retained only as long as needed for the automation function and may be deleted at any time by the operator. Tokens can be revoked at any time at myaccount.google.com/permissions.

5. Security

Credentials and tokens are stored with restricted file permissions on a single private host. Access requires operator authentication. We apply reasonable administrative and technical safeguards appropriate to a single-operator personal automation system.

6. Your Choices

Revoke the Application's access at any time via Google Account permissions.
Request deletion of any stored data by contacting the email below.

7. Children's Privacy

The Application is not directed to children under 13 and does not knowingly collect their data.

8. Changes

We may update this policy; the "Last updated" date reflects the latest revision.

9. Contact

Questions about this policy: [email protected]