Last updated: July 2026
When you connect Google Calendar, Unstuck requests read-only calendar.readonly scope — the most restricted calendar permission Google offers. On each check, we read: your events' start and end times (to detect free gaps), event titles (so we can show you what's coming up next, e.g. "25 min before Team Standup"), and whether you personally declined an event (so declined meetings don't block a gap). We do not read other attendees' identities or RSVPs, meeting descriptions, locations, conferencing links, attachments, or recurrence rules — our Calendar API requests are field-masked so Google never sends us that data in the first place. Unstuck never creates, edits, moves, or deletes anything on your Google Calendar.
Calendar data is used solely, in real time, to compute your current gap and decide which of your tasks is safe to start. We fetch a rolling 8-hour window of events live from Google on each check and do not store raw event data — no titles, times, or RSVP data are written to our database. The only calendar-derived information we persist is minimal metadata needed to avoid double-sending a notification (a scheduled time and delivery status) for a task you've already been alerted about; this is deleted along with your account. We do not use calendar data for advertising, and we do not sell it or share it with third parties.
We protect your data — including Google Calendar data and your Google account tokens — with the following safeguards:
Your Google refresh token is stored in our database (Firestore) so we can check your calendar without asking you to sign in again. Firestore encrypts all data at rest at the infrastructure level; we do not apply additional field-level encryption to the token today. The token is retained until you delete your account or revoke access — there is no separate expiration. We do not currently offer a standalone "disconnect Google" button; deleting your account (see below) automatically revokes our access via Google's token revocation endpoint, and you can also revoke Unstuck's access at any time directly from Google, independently of us, at myaccount.google.com/permissions.
Deleting your account from Settings → Delete account immediately: revokes our Google access token via Google's revocation endpoint, cancels any active subscription, and permanently deletes your profile, tasks, task templates, routines, notification records, API tokens, gap history (including the calendar event names stored with it), any beta or Coach Space feedback you submitted, and your coach/client relationships, session notes, and suggestions from our database. This does not and cannot delete anything from your actual Google Calendar, because Unstuck never had write access to it — there was nothing there for us to remove.One exception, stated plainly: comments you posted publicly on the blog are not removed automatically, because deleting them would tear holes in conversations other people replied to. Email adhabnr@gmail.com and we will remove them for you.
(Only applies if you use a Coach-tier connection.)Coaches and clients connect only by explicit invite: a coach can never see your data until you accept their invite link. Once connected, your coach can see your name, email, avatar, and aggregated activity — total hours recovered, task counts, and days since your last completed task. Your coach never sees your task titles, task descriptions, or any calendar data. Coaches can keep private notes about clients; you cannot see these notes. Either side can disconnect at any time, which immediately cuts off the coach's visibility into your activity.
Focus Room is a Pro feature that shows other signed-in users a live presence card while you're in a session: your first name, avatar, how many minutes your current task is set for, and when you joined/were last active. It never shows your task's title or content, and never shows any calendar data. Leaving Focus Room removes your presence card.
We use a small number of service providers to operate Unstuck, each limited to the data they need to do their job:
Unstuck's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we use Google Calendar data only to provide and improve the user-facing calendar-gap features described in this policy, we do not use it for advertising, we do not sell it, and we do not allow humans to read it except as necessary for security, legal compliance, or with your explicit consent for support.
Questions about this policy or your data? Email adhabnr@gmail.com.