This Privacy Policy explains how Weekly Summary (the
"application", "we", "us", or "our") handles information, including data accessed from
Google APIs. Weekly Summary is operated by SpicyChillySoft.
If you have any questions about this policy or how your information is handled,
contact us at support@spicychillysoft.com.
Weekly Summary is a personal productivity tool operated by SpicyChillySoft. It
compiles information from a small number of sources — Google Calendar, Google Tasks,
a weather forecast, public transport disruptions, and a local bin-collection schedule
— into a single styled HTML email digest delivered on a weekly schedule.
Weekly Summary is used by the operator and by invited household and family members who
choose to connect their own Google accounts. Each person authorises access to their
own account and can withdraw that access at any time (see Section 9). Weekly Summary
does not offer accounts to the general public, and it does not display, publish, or
expose your data to anyone other than the intended recipient of the email digest.
Google user data (accessed via OAuth 2.0, read-only)
When you connect a Google account, Weekly Summary requests the following
read-only scopes:
Scope
Google data accessed
Purpose
https://www.googleapis.com/auth/calendar.readonly
Calendar event titles, start/end times, locations, and calendar
names for the upcoming week
To list your events in the weekly digest
https://www.googleapis.com/auth/tasks.readonly
Task titles, due dates, and task-list names for the upcoming
week
To list your tasks due in the week ahead
Weekly Summary requests read-only access. It cannot create, edit, or
delete any of your Google Calendar events or Google Tasks.
Authentication data
To access your Google data on a recurring schedule, Weekly Summary stores an
OAuth refresh token for each connected account. This token lets
Weekly Summary request fresh access on your behalf until you revoke it.
Other (non-Google) information
Recipient email address — where the weekly digest is delivered.
Weather location — a fixed location (Point Cook, Melbourne); no
personal data is involved.
Public transport disruptions — for a fixed train line; no personal
data is involved.
Bin-collection schedule — a static local file; no personal data is
involved.
We use the information described above for one purpose only: to assemble and
deliver the weekly summary email. Specifically, Weekly Summary fetches the
data for the upcoming week, removes duplicate calendar events, sorts everything
chronologically, generates a short narrative paragraph, renders an HTML email, and
sends it to the intended recipient.
We do not:
sell or rent your information to anyone;
use your information for advertising or marketing;
build advertising or behavioural profiles;
use your Google user data to train, develop, or improve any generalised or
artificial intelligence / machine-learning models.
4. How the data is processed and shared (sub-processors) ↑ top
Weekly Summary relies on a small number of third-party service providers
("sub-processors"). We share only the minimum data necessary for each to perform its
role, and the specific providers may change from time to time.
Google APIs — the source of the calendar and task data you
authorise.
Anthropic (Claude API) — receives a summary of your week (event
titles and times, task titles, weather, and disruptions) to generate the short
narrative paragraph.
An email-delivery provider — receives the rendered email and
recipient address to deliver the digest.
A hosting and automation provider — runs the scheduled job and
stores credentials securely as encrypted secrets.
A weather provider and a public-transport provider — receive only
a fixed location / train line (no Google or personal data).
About AI processing: to write the narrative paragraph, summarised
details of your week are sent to the Anthropic Claude API. This data is used only to
generate that paragraph for your email. It is not used to train or
improve Anthropic's models, and it is not used to train or improve any
model operated by us.
We do not share your information with any other parties except where required to do so
by law, or as necessary to protect the security and integrity of Weekly Summary.
Weekly Summary is designed to hold as little data as possible:
Google user data is not stored in a database. Your calendar and
task data are fetched, processed in memory during each scheduled
run, used to build that run's email, and then discarded when the run
finishes.
OAuth refresh tokens are the only persistent piece of personal
data. They are stored securely as encrypted secrets and are used
solely to authenticate scheduled requests on your behalf.
The delivered email is the only lasting artifact containing your
information, and it resides in the recipient's own inbox, under the recipient's
control.
We retain refresh tokens only for as long as Weekly Summary is authorised to access
your account. When you revoke access (see Section 9), the token stops working and is
removed.
6. Limited Use disclosure (Google API Services User Data Policy) ↑ top
Weekly Summary's use and transfer of information received from Google APIs to any other
app will adhere to the
Google API
Services User Data Policy, including the Limited Use requirements.
In keeping with those requirements, we affirm that data obtained through Google APIs
is:
used only to provide or improve the user-facing feature (the weekly summary email)
that is prominent in Weekly Summary's interface and for which you granted access;
not transferred to others except as necessary to provide or improve that feature,
to comply with applicable law, or as part of a merger, acquisition, or sale of assets
with your prior notice;
never used for serving advertisements; and
never read by any human, except (a) with your affirmative consent for specific
data, (b) as necessary for security purposes such as investigating abuse, or (c) to
comply with applicable law.
We do not use Google user data to develop, improve, or train
generalised or artificial intelligence / machine-learning models.
Weekly Summary and some of its service providers (including our AI provider) may
process data on servers located outside Australia, including in the United States. By
using Weekly Summary, you acknowledge that your information may be processed
in these locations. We take reasonable steps to ensure your information is handled
consistently with this policy wherever it is processed.
9. Your choices, revoking access, and deletion ↑ top
You are in control of Weekly Summary's access to your Google account:
Revoke access at any time via your Google Account permissions
page: https://myaccount.google.com/permissions.
Find "Weekly Summary" and select Remove access. Once revoked,
Weekly Summary can no longer read your calendar or task data.
Request deletion of any stored data (such as your refresh token)
by emailing support@spicychillysoft.com.
Because Weekly Summary keeps no database of your calendar or task content, the only
data to delete is the stored refresh token and any email already delivered to the
recipient's inbox.
We will respond to deletion and access requests within a reasonable time.
Weekly Summary is not directed to children under the age of 16, and we do not
knowingly collect information from children. If you believe a child has connected an
account, please contact us so we can remove the associated data.
SpicyChillySoft is based in Melbourne, Australia. We handle personal information
consistently with the Privacy Act 1988 (Cth) and the Australian
Privacy Principles (APPs).
We may update this Privacy Policy from time to time. When we do, we will post the
revised version at this address and update the "Effective date" at the top. Material
changes will be reflected by a new effective date.