Privacy Policy

salmon.app is an independently operated productivity tool. The developer is the data controller for information handled by the Service. You can reach us at hi@project-salmon.com.

• Account data: your email address, display name, and authentication identifiers when you sign up or sign in.
• Content you create: notes, tasks, projects, comments, attachments, and other content you save in the Service.
• Google Calendar data (only if you connect it): your email address, profile info, calendar list, and calendar events, per the scopes you approve.
• Integration tokens: OAuth access and refresh tokens for services you connect, stored encrypted at rest.
• Operational data: log entries, IP address, browser type, and timestamps used to run and secure the Service.

• To provide the Service — display your notes and tasks, sync your calendar, and run features you invoke.
• To authenticate you and keep your account secure.
• To respond to support requests you send us.
• To improve reliability and diagnose problems using aggregated logs.

We do not sell your personal data, and we do not use your content or Google user data to train advertising models.

salmon.app’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request the minimum Calendar scopes needed for features you enable (read-only for viewing events; read/write only if you enable event creation).
• Google Calendar data is used solely to provide the calendar features you see inside the Service (listing upcoming events, and, if enabled, creating or updating events you author).
• We do not transfer Google user data to third parties except as necessary to provide the Service, to comply with applicable law, or as part of a merger, acquisition, or asset sale where you will be notified.
• We do not use Google user data for serving advertisements, and we do not allow humans to read your Google user data unless we have your explicit consent, it is necessary for security purposes (e.g. investigating abuse), to comply with law, or the data has been aggregated and anonymized.

You can revoke access at any time by disconnecting Google Calendar on the Integrations page, or from your Google Account permissions page. When you disconnect, we delete the stored OAuth tokens and stop accessing your calendar.

• Data is stored with our managed backend and hosting providers on infrastructure that supports encryption in transit (TLS) and encryption at rest.
• OAuth tokens and secrets are stored server-side and are never exposed to the browser.
• Access to production data is limited to the developer and required service providers.
• No online service can be guaranteed 100% secure. If we learn of a breach affecting your data, we will notify affected users as required by applicable law.

We share data only with:

• Infrastructure providers (hosting, database, email delivery) acting as processors under contract.
• Services you explicitly connect (for example, Google) — and only the data required to make that integration work.
• Authorities when required by valid legal process.

• Your content is retained for as long as your account is active.
• You can delete individual items inside the Service at any time.
• You can request full account deletion by emailing us; we will delete your account data within 30 days, except where retention is required by law.
• Disconnecting Google Calendar removes the stored tokens immediately and stops future access.

Depending on where you live (for example, under GDPR or CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact hi@project-salmon.com to exercise any of these rights.

We use strictly necessary cookies and local storage to keep you signed in and remember your preferences (such as theme). We do not use third-party advertising cookies.

The Service is not directed to children under 13, and we do not knowingly collect personal data from them.

We may update this policy from time to time. Material changes will be posted here with an updated effective date.

Questions or requests: hi@project-salmon.com.