QuickCal is a personal productivity tool that extracts calendar events from text, images, and voice and adds them directly to your calendar. We have designed QuickCal to handle as little of your data as possible and to never store your Google or Microsoft data on our servers.
When you sign in with Google, QuickCal requests access to the following scopes:
https://www.googleapis.com/auth/calendar.events
Write access to create calendar events on your behalf. QuickCal never modifies or deletes your existing calendar events.
https://www.googleapis.com/auth/calendar.readonly
Read-only access to your Google calendars. QuickCal uses this for two purposes: (1) to show you which calendar to add events to, so you can choose a non-primary calendar if you prefer; and (2) to read attendee names and email addresses from your recent events to populate the “Suggested people” list when inviting someone. Attendee data is read ephemerally server-side — it is never stored on QuickCal servers and is never sent to OpenAI.
When you sign in with Microsoft, QuickCal requests access to create events in your Outlook calendar via the Microsoft Graph API (Calendars.ReadWrite scope), to list your calendars so you can choose which one to use, and to read attendee names and email addresses from your recent Outlook events to populate the “Suggested people” list. The same no-storage principle applies: attendee data is read ephemerally server-side and is never stored or sent to OpenAI.
QuickCal also retrieves your name and email address from your Google or Microsoft account at sign-in so you can confirm which account is connected. This information is not stored in any database.
QuickCal uses your Google or Microsoft account access only for the purposes described in section 1. Here is exactly what happens when you use QuickCal:
Your input (text, image, or voice recording) is sent to OpenAI's API to extract event details such as the title, date, time, and location. This processing is entirely automated — no human reads your input. Once the event is extracted, your original input is discarded.
Your extracted event details (title, date, time, location) are sent directly to the Google Calendar API or Microsoft Graph API to create the calendar event. This is a direct machine-to-machine transfer. QuickCal does not store your event data on any server.
Your calendar access token is held in a secure, encrypted session cookie for the duration of your session only. It is used solely to post the event to your calendar on your behalf and is not used for any other purpose.
Your email address is displayed in the app so you can confirm which account is connected. It is not stored in any database and is not used for marketing or any purpose other than session identification.
Attendee names and email addresses from your recent calendar events are read ephemerally when you open the “Add people” sheet, to populate the “Suggested people” list. This data is fetched server-side, used only to generate the suggestion list for your current session, and is never stored on QuickCal servers and never sent to OpenAI.
QuickCal's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
QuickCal shares data with the following parties only, and only to the extent necessary to provide the service:
OpenAI API — receives only the text content of your input (the event description you provide) for the purpose of extracting event details. OpenAI does not receive your Google account data, your calendar data, or your access tokens. OpenAI does not use API data to train its models. openai.com/privacy
Google Calendar API — receives your access token and the extracted event details for the sole purpose of creating the calendar event you requested. policies.google.com/privacy
Microsoft Graph API — same as above, for Outlook calendar users. microsoft.com/privacy
Vercel — hosts the QuickCal application and processes web requests. Standard server logs (IP address, request path, timestamp) may be retained by Vercel for security purposes. vercel.com/legal/privacy-policy
QuickCal does not sell, rent, or share your data with any other third party. Your Google user data is not used for advertising, analytics, or any purpose other than creating the calendar events you explicitly request.
QuickCal is designed to store as little data as possible:
QuickCal is served over HTTPS. All API calls to Google, Microsoft, and OpenAI are made over encrypted connections.
Because QuickCal does not store your Google user data, there is nothing to delete from our servers. Specifically:
To revoke QuickCal's access to your Google account at any time, visit myaccount.google.com/permissions and remove QuickCal from the list of connected apps. This immediately revokes all access tokens. If you have any questions about your data or wish to request deletion of any information we may hold, contact us at privacy@jmcguinness.co.
QuickCal uses OpenAI's API to extract event details from your input. This is the only AI or machine learning service used.
QuickCal does not use Google user data — or any user data obtained through Google APIs — to develop, improve, or train any AI or machine learning model. The extracted event text sent to OpenAI contains only the content you provided as input; it does not include your Google account data, calendar data, or access tokens. OpenAI's API data is not used by OpenAI to train its models per their API usage policy.
QuickCal uses a single encrypted session cookie to maintain your signed-in state. This cookie is cleared when you sign out or your session expires.
QuickCal uses your browser's local storage to remember your calendar preference. This data never leaves your device and is not accessible to QuickCal's servers.
QuickCal is not directed at children under the age of 13 and we do not knowingly collect data from children.
If we make material changes to this policy we will update the date at the top of this page.
If you have any questions about this privacy policy, or to request deletion of any data we may hold, please contact us at privacy@jmcguinness.co.