knOS Privacy Policy

Last updated: 2026-05-23

Who this applies to

knOS is a personal desktop application used solely by its developer, Kevin Nguyen. There are no other users. This privacy policy describes how knOS handles the developer's own Google Workspace data.

What data knOS accesses

When granted the relevant OAuth scopes, knOS reads:

• Gmail messages — to display unread emails, draft replies, and apply labels. Scope: gmail.modify.
• Google Calendar events — to display the day's schedule, create or move events, and accept/decline invites. Scope: calendar.events.
• Google Contacts — to resolve recipient names to email addresses when drafting outbound mail. Scope: contacts.readonly.

Where data is stored

All Google data accessed by knOS is stored locally on the developer's device in an encrypted SQLite database (.knos.db). OAuth tokens are stored in the macOS Keychain via Electron's safeStorage API.

No data is sent to any third-party server. Data is sent only to Google's APIs in direct response to the developer's actions.

Data retention

Cached external data (emails, events) is retained in the local database while the corresponding upstream entity exists. An event log retains state-change history for 180 days. A command audit log retains records of actions taken for 365 days. The developer may delete the local database at any time to wipe all cached data.

How AI processing works

knOS uses large language models (LLMs) to process the developer's requests. Specifically, when drafting an email, fragments of email context may be sent to Anthropic (Claude API) or other LLM providers the developer has configured. Only data necessary for the requested task is included.

Third parties

knOS communicates with the following services on behalf of the developer:

• Google APIs (Gmail, Calendar, Contacts) — for data access
• Notion API — for task data (separate from this Google OAuth)
• Anthropic / LLM providers — for drafting assistance

Your rights

The developer (sole user) can revoke knOS's Google access at any time at myaccount.google.com/permissions. Revoking access immediately stops knOS from reading Google data.

Contact

For questions, contact kevinnguyen@hey.com.

← Back to knOS home