Glowstate privacy policy

Effective November 3, 2026 · Private beta

Glowstate is a desktop app created and operated by Shruti Murali. It helps you notice patterns in your Google Calendar and offers optional suggestions about your workday. This policy describes the Glowstate beta app and its supporting services.

What Glowstate accesses

• Google account information. Google sign-in provides an account identifier, email address, and basic profile information to authenticate you through Supabase. Glowstate stores your account identifier, email, and beta-access status.
• Your calendar selection. The app retrieves calendar names and identifiers so you can choose calendars. Selected calendar identifiers are saved with your account.
• Event timing. For selected calendars, the app requests start and end times, creation and update times, cancellation and availability status, and identifiers used temporarily to avoid counting duplicate events. These event requests exclude titles, descriptions, locations, and attendees. The app has read-only access and does not create or modify calendar events.
• Your answers and preferences. This includes onboarding answers, settings, and anything you choose to write about your work or constraints. Older answers may remain saved after a question is removed from the beta form.
• Nudge history and feedback. The app saves generated suggestions, pattern summaries, generation and delivery status, ratings, and written feedback. Feedback text is saved as you type, including drafts you do not submit.
• Service information. Sign-in, request usage, and operational logs support account security, troubleshooting, and beta usage limits. Service providers may process network information such as IP addresses.

How calendar analysis works

The app normally reads a rolling 30-day calendar window, including today. A manual preview after the delivery window may also read through the next workday to check whether a suggested action could fit. Calendar timing is processed on your Mac to calculate meeting load, overlaps, gaps, and historical comparisons.

Raw event records are not saved to Glowstate’s application database. Derived schedule information is saved with nudge records, including pattern dates, counts, durations, available time, and the evidence behind a suggestion. These summaries may still reveal information about your schedule.

How your information is used

Glowstate uses this information to connect the calendars you select, identify relevant patterns, personalize and check suggestions, respect your stated constraints, avoid repeated nudges, record feedback, and operate the private beta. It can compare later calendar summaries with earlier ones; a calendar change does not prove you followed a suggestion or that it improved your well-being.

Services that process your information

• Google handles sign-in, calendar permission, and calendar access. Glowstate never asks for your Google password.
• Supabase provides authentication, the account database, and server functions. It stores account details, calendar selections, preferences, nudge records, feedback, and usage records. Google authorization credentials also pass through the authentication and renewal services when needed.
• OpenAI receives selected calendar summaries, preferences and work context you supplied, prior nudges and feedback, and proposed suggestions. It interprets constraints and writes, revises, and checks nudges. Glowstate does not include raw event titles, descriptions, attendees, or locations in these requests. Information you choose to enter in notes or feedback can be included.

Glowstate requests that OpenAI not store responses for later retrieval. This does not mean zero provider retention: OpenAI’s standard API abuse-monitoring records can include prompts and responses and are generally retained for up to 30 days, with exceptions described in its policy. OpenAI states that API data is not used for model training by default unless the API customer opts in. See OpenAI’s API data controls.

Glowstate does not sell Google user data or use it for advertising. Google-derived information is used to provide the user-facing Glowstate features described here, not to train a general-purpose AI model. Glowstate’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Access and security

Saved sign-in credentials on your Mac use operating-system-backed encryption. Database access is restricted by account. The service operator has administrative access for operating and supporting the beta; account separation does not mean the operator has no technical access. Human access to Google-derived data is limited to your explicit consent for specific data, necessary security or legal purposes, or permitted aggregated internal operations.

No system can guarantee absolute security. Google, Supabase, and OpenAI may process information in countries other than the one where you live, under their applicable service arrangements.

Retention and deletion

The 30-day calendar analysis window is not a deletion schedule for saved nudge history. The current beta does not automatically expire nudge records. Your account information, preferences, feedback, and saved nudge records remain in the active database until you delete your account.

In Settings, Disconnect Google Calendar stops further calendar access by this app while keeping your preferences and nudge history. You can separately remove Glowstate’s access in your Google Account connections.

Delete account removes your account and associated preferences, nudge records, feedback, and usage rows from the active Glowstate database and clears the app’s encrypted sign-in storage. It does not delete events from Google Calendar. Independent provider logs, backups where applicable, or records subject to legal obligations may remain under the relevant provider’s retention rules. Deleting your Glowstate account does not itself remove every provider’s operational record.

You can also contact shrutimurali0@gmail.com for help with access, correction, or deletion requests. Do not email passwords, authorization tokens, or API keys.

This website and policy changes

This information website is hosted by Squarespace. Visiting it does not connect your calendar. Squarespace may process website usage and device information as described in its privacy policy; website cookies and analytics are separate from the Glowstate app. If this policy changes, the updated version and date will be posted here.

Questions about Glowstate or this policy? Contact Shruti Murali at shrutimurali0@gmail.com.