Privacy Policy — KaZ Gmail Notify
Last updated: November 2, 2026
Overview
KaZ Gmail Notify ("the application") is a private, single-user application operated by Kaz Tulcianu ("the operator"). It connects to one Gmail account — the operator's own mailbox, kaz.tulcianu@gmail.com — solely to notify the operator about new incoming mail from senders the operator is waiting on. No other person uses the application or has data processed by it.
Information the application accesses
- Gmail data (read-only). With the account owner's OAuth consent,
the application receives push notifications from the Gmail API when mailbox
changes occur, and reads message metadata — primarily the sender, subject,
and date of newly arrived messages — to decide whether to alert the owner.
The application uses the read-only scope
https://www.googleapis.com/auth/gmail.readonly. It cannot send, modify, or delete email. - No other data. The application does not collect names, contacts, files, location, or any information about any third party beyond the sender address and subject line that appear in the owner's own inbox.
How the information is used
Gmail data is used for one purpose only: comparing the sender of a newly arrived message against the owner's private watch list and, on a match, sending the owner a notification. KaZ Gmail Notify's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Sharing
No Gmail data — and no other data — is sold, shared, transferred, or disclosed to any third party, for any purpose, including advertising or data brokering. No human other than the operator reads Gmail data through this application.
Storage and security
OAuth credentials for the application are stored on the operator's own private server with restricted, owner-only file permissions. Message metadata is processed in transit for the notification check; the application does not build a database of email content. Notification events are kept only in the operator's private activity log.
Retention and revocation
The owner may revoke the application's access at any time at myaccount.google.com/permissions. Revoking access immediately stops all data processing. Any stored credentials are deleted on request or when the application is shut down.
Changes
If this policy changes, the updated version will be posted on this page with a new "last updated" date.
Contact
Questions about this policy: kaz.tulcianu@gmail.com