DailyMail

Your data, explained.

DailyMail is a privately hosted personal email and calendar assistant. The owner controls the server and database.

What we access

With your Google consent, DailyMail reads a bounded snapshot of your Gmail inbox and your primary Google Calendar. Gmail modify access supports reading, marking read, starring, archiving, and sending an approved email or an acknowledgement authorized by your automation rule. Calendar events access supports viewing and making approved event changes.

What we store

Your server encrypts private profile fields, synced email text, calendar titles and descriptions, attendees, drafts, activity text, and briefings using authenticated encryption with a separate data key. Google access and refresh tokens use their own encryption key. Dates, status flags, remote identifiers, and non-content preferences remain readable for scheduling. Also enable encryption for database storage and backups.

How AI uses your data

AI is off until you enable it in Settings. Once enabled, requests send selected email text and calendar context to your chosen provider, including for scheduled briefings. Common email addresses, links, credentials and numeric identifiers are redacted; recognized login-code and password-reset messages are blocked. This is best-effort redaction, not guaranteed anonymization. The provider can read the remaining text. That provider's terms and retention practices apply. DailyMail does not use your Google data to train a model. Optional agent mode can read scoped messages and prepare reply drafts or new-event proposals through private tools. It cannot approve actions, access credentials, or change its permissions. Agent prompts, results, sources and tool activity are stored encrypted for task history; ordinary non-agent chat stays in the browser tab. Local full-message mode shares message facts with a downloaded local Ollama model, while recognized credentials and security-code messages remain excluded. It never falls back to a hosted provider.

You approve the changes

Calendar changes and ordinary email sends require your approval. If you explicitly enable an acknowledgement rule, the worker may send the exact configured acknowledgement and signature to selected senders after a waiting period without another approval. You can cancel scheduled replies or pause automation; a send already in progress cannot be recalled. Attendees may receive invitations or updates when you approve a calendar action. Clicking archive, star, or mark-read directly performs that requested mailbox operation.

Disconnect and remove data

Settings lets you disconnect Google and remove cached mail, events, actions, briefings, jobs, agent task history, and activity. Your local profile and preferences remain. DailyMail attempts to revoke the Google token; if Google is unreachable, you can also remove access in your Google Account permissions. Previously created backups follow the server owner's retention policy.

Google user data use must follow the Google API Services User Data Policy, including Limited Use requirements. Public distribution requires a separate review of Google's verification and data-handling requirements.