Privacy policy
Apex, last updated 20 October 2026
Apex is a private tool operated by one person, Bardia Hematian, for his own use. It has no other users. This policy explains what it does with Google data.
What Apex accesses
When the owner connects a Google account, Apex can read and create events on that account's primary Google Calendar, and read (search and open) that account's Gmail messages. Gmail access is read-only: Apex cannot send, delete, label or change any email. It also reads the account's email address to label the connection.
If the owner also connects a Microsoft (Outlook or Hotmail) account, Apex can search and read that account's mail, read-only, in the same way. It cannot send, delete or change any email.
How it is used
Calendar and email data is used only to show the owner his schedule, summarise and prioritise his mail on request, and add calendar events he has confirmed. It is never used for advertising, sold, shared with third parties, or used to train generalised AI models. Relevant calendar and email details may be sent to an AI provider (Anthropic) solely to answer the owner's own requests. Voice notes the owner sends are transcribed by Cloudflare Workers AI.
Storage and security
Connection tokens are encrypted at rest and stored on Cloudflare infrastructure under the owner's account. Calendar and email contents are fetched on demand and are not kept as a permanent copy.
Google API Services User Data Policy
Apex's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Deleting data
The owner can revoke Apex's access at any time at myaccount.google.com/permissions, and stored tokens can be deleted on request.