Privacy Policy

Effective from 25 October 2026

1. Scope and operator

This policy applies to the private family application Doby rodina and its information website sqost.eu. The operator is Jan Hladovec. This is not a public service; users contact the operator through their existing private communication channel.

2. Data that may be processed

Within permissions actually granted and enabled, the application may process the connected account’s identification, email content and metadata, calendars and events, and Google Drive files and metadata. It also processes user instructions, assistant responses and technical records needed for operation and security. Access and refresh tokens provide API access; a Google account password is not needed for a normal OAuth connection.

3. Purpose and permissions

Data is used solely for user-requested personal assistance: finding and summarising information, organising calendars and working with permitted documents. Gmail access is intended to be read-only. Calendar changes require a request; deletion requires confirmation. Drive writes must not be enabled until a designated-folder restriction is technically enforced. Access may be restricted or revoked.

4. Recipients and AI processing

The assistant runs on the operator’s server and may use an external language-model provider. Necessary parts of instructions and related data may therefore be sent to that provider to generate a response. Messages also pass through any communication channel used, such as Telegram. The operator will identify the active model and provider before account connection; users who disagree should not connect their account.

Google API data and Limited Use

We do not sell Google API data, use it for advertising or use it to train our own general-purpose models. Access to and any transfer of Google API data must comply with the Google API Services User Data Policy, including its Limited Use requirements. This statement does not itself certify technical acceptance or Google approval of the application.

5. Separation and security

Members’ accounts and credentials are intended to be kept separate. The public website does not expose tokens, files, conversations or internal administration. Website traffic uses HTTPS. Stored-data access is restricted to authorised processes and administration. No system can guarantee absolute security. Other members’ private data is not intended for sharing; an explicitly requested, addressed message is a separate feature.

6. Retention and deletion

Tokens are retained while the account is connected. Conversations and local working materials may be retained for continuity of assistance; revoking Google consent does not automatically delete them. Contact the operator to delete them and the tokens. Data is retained only as needed for operation, requested continuity and security; deletion from backups may take until their rotation. No single fixed automatic retention period is defined for all data types.

7. Revoking access

You can revoke access at any time in Google account connections settings. This prevents further access under that permission but does not necessarily remove previously stored data or history. Ask the operator to delete those records. Tokens are not irrevocable; Google may also terminate access for security reasons.

8. Children’s accounts and restrictions

Parental supervision, Family Link rules and Google restrictions apply to children’s accounts. This application does not bypass them. If Google does not allow the necessary consent, the integration will not be enabled.

9. Public website

The information pages contain no analytics, advertising trackers or external scripts and do not themselves set cookies. The web server may process normal request details, such as IP address, time and requested path, for operation and security. Private panels on the same domain require separate authentication and may use essential session cookies.

10. Changes and contact

The current version is published at this address. Contact Jan Hladovec through your existing private communication channel for questions, access, correction, disconnection or deletion requests. This English text translates the Czech policy; the Czech version prevails if interpretations differ, without affecting mandatory rights.