max / goingson

docs: reconcile privacy policy with launch reality Email at launch is app-password IMAP/SMTP only (third-party OAuth is post-launch); bump last-updated to June 8, 2026. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Max Johnson <me@maxj.phd> · 2026-06-08 23:29 UTC

Commit: 24708d3d8738b92308f01ec193f892164053e294

Parent: 19ab621

1 file changed, +3 insertions, -3 deletions

M docs/privacy-policy.md +3 -3

			@@ -1,6 +1,6 @@
1	1		# GoingsOn — Privacy Policy
2	2
3		-	Last updated: May 12, 2026
	3	+	Last updated: June 8, 2026
4	4
5	5		GoingsOn is published by Make Creative, LLC. This policy explains what data the app handles.
6	6
			@@ -14,7 +14,7 @@ GoingsOn is published by Make Creative, LLC. This policy explains what data the
14	14		## What GoingsOn Stores on Your Device
15	15
16	16		- Tasks, projects, notes, calendar events, contacts
17		-	- Email account credentials (IMAP/SMTP passwords, OAuth tokens) — stored in the OS keychain, never written to plain disk
	17	+	- Email account credentials — IMAP/SMTP app passwords — stored in the OS keychain, never written to plain disk
18	18		- Cached email message bodies and metadata for accounts you've added
19	19		- Plugin scripts you install
20	20
			@@ -25,7 +25,7 @@ This data stays on your device unless you choose to sync it.
25	25		GoingsOn connects directly to services you configure:
26	26
27	27		- Email servers (IMAP/SMTP/JMAP) you add — Google, Microsoft, Fastmail, or any other host. We don't proxy these connections; they go straight from your device.
28		-	- OAuth providers (Google, Microsoft, Fastmail) when you authenticate an email account. The OAuth tokens are issued by those providers under their own privacy policies.
	28	+	- OAuth providers — when third-party OAuth sign-in is offered in a future update, authenticating an email account will exchange tokens with that provider under its own privacy policy. At launch, email accounts connect via IMAP/SMTP app passwords only.
29	29		- Update server — the app periodically checks for new versions. The check transmits your current app version and platform; no personal data.
30	30		- SyncKit sync (optional, off by default) — if you enable it, the app talks to a SyncKit-compatible server using end-to-end encrypted payloads.
31	31