Tiro Personal Assistant. Last updated: October 12, 2026.
Tiro Personal Assistant ("Tiro", "the app") is a private, single-user tool operated by its owner on the owner's own computer. This policy explains what data the app accesses through Google APIs, how it is used, how it is stored, and how it can be deleted.
The app has exactly one user: the owner of the Google account that authorizes it. It is not distributed to the public, it has no sign-up flow, and it does not process data belonging to anyone else.
The app accesses the following Google user data, and only for the purposes described:
gmail.readonly, gmail.modify,
gmail.send): to read messages in the owner's own mailbox that the owner has forwarded
to it or that concern the owner's household tasks, to apply labels, and to send messages or plans
the owner has approved.calendar): to read the owner's calendars and to
create or move the owner's own household and personal events.drive.readonly): to read files the owner has placed
in a folder shared with the app.spreadsheets.readonly): to read spreadsheets the
owner shares with the app.The app does not access Google data beyond these scopes, and it does not request broad or unrestricted access to the owner's account.
Google user data is used solely to provide the app's functions to its owner: producing a daily summary of the owner's calendar, surfacing household tasks, drafting and sending messages the owner approves, and reading documents the owner has shared. Google user data is not used for any other purpose.
Tiro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
The app runs locally on the owner's machine. OAuth access and refresh tokens, and the app's working files, are stored on that local machine and are readable only by the owner. Google user data is not transmitted to any server operated by the app, because the app operates no server. It is not backed up to any third-party service. Working copies derived from Google data are deleted when they are no longer needed, and the owner can delete the app's local working directory at any time.
The app does not share Google user data with anyone. It sends email only to addresses the owner has explicitly authorized, and only for content the owner has approved. No analytics, advertising, or tracking services are used.
All communication with Google's APIs takes place over HTTPS (TLS). OAuth credentials are stored in files restricted to the owner's user account on the local machine. The app requests only the scopes it needs for the functions above.
The owner can revoke the app's access to their Google account at any time at myaccount.google.com/permissions. Revoking access stops all further API calls immediately. To delete everything the app has stored, the owner deletes the app's local working directory. There is no remote copy to delete.
If this policy changes, the updated version will be published at this URL with a new "last updated" date.
Questions about this policy or about data handling: tiro.adiutor@gmail.com.