Connected-account data use
Last updated: October 2, 2026
Morning Meeting's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Morning Meeting connects directly to Google. We store your OAuth access and refresh tokens encrypted at rest and use them to call Google APIs from our application servers.
We request gmail.readonly to read message metadata and snippets for recent unread inbox messages, and calendar.events.owned.readonly to read today's events on your primary calendar. We also request the standard openid and email scopes to identify the Google account you connected. If you grant only one data permission, only that part of your briefing is enabled.
We use Gmail and Google Calendar data only to generate the calendar and email summary you request. We never send email, change messages, or create or modify calendar events.
To generate, edit, and answer your follow-up questions about the requested briefing, we send the necessary context to OpenRouter and the downstream providers hosting the selected Anthropic Claude, Google Gemini, or OpenAI GPT models. We require no-training, zero-data-retention endpoints and disable external AI tools for this content. See our Privacy Policy for the named processors and protection mechanisms.
Raw and derived Google data is not used to create, train, or improve generalized AI or machine-learning models. Feedback from a mail/calendar briefing is not automatically learned into your long-term profile or briefing guidance; make lasting preference changes directly in Settings or the briefing configuration.
We do not sell Google user data. We do not use Google user data for advertising.
Microsoft (Outlook / Microsoft 365)
If you connect Microsoft, we use Composio as a technical processor to manage OAuth tokens and call Microsoft Graph under the permissions you approve at sign-in. We use that data only to generate your requested briefing. We do not sell Microsoft customer data or use it for advertising.
Your controls
You can disconnect accounts in Settings and delete your account at any time. Disconnecting Google asks Google to revoke the grant and removes the encrypted local tokens.