Sidekick Privacy Policy

Last updated: October 18, 2026

Sidekick is a personal assistant application built, operated, and used solely by Matt Kutz. It has one user. This policy describes how it handles data from Google services, in the terms Google asks every application that accesses Google user data to publish.

Who operates Sidekick

Matt Kutz, an individual, at mattkutz@gmail.com. Sidekick is not operated by, for, or on behalf of any company.

Whose data it accesses

Only Matt Kutz's own Google account. Sidekick is not available to other users and does not accept authorization from any other Google account.

What Google data it accesses

• Gmail. Message headers (sender, recipients, subject, date, labels), Gmail's snippet, and the beginning of the message body, for messages in Matt's inbox. Depending on the scopes granted, Sidekick may also apply or remove Gmail labels and archive messages. It does not send email, and it does not permanently delete email.
• Google Calendar. Event titles, times, and locations from Matt's calendars, read-only.

How it uses that data

• To produce a daily summary of which messages need Matt's attention and which upcoming dates matter.
• To let Matt search his own recent mail and ask questions about it through a private chat interface.
• To organize his own mailbox with labels, when he has granted that permission.

Portions of message text (headers, snippets, and short excerpts) are sent to Anthropic's Claude API, under Anthropic's commercial terms, to classify and summarize them. Anthropic acts as a processor for this purpose and does not use the data to train models under those terms.

Where it is stored

On a server owned and physically controlled by Matt Kutz, in his home, reachable only over a private network from his own devices. Stored data includes message metadata, short excerpts, classification results, and the OAuth tokens needed to access Google on his behalf. Nothing is stored with any hosting provider or third-party database service.

Who it is shared with

No one. Google user data is not sold, not shared with advertisers or data brokers, not transferred to any other application or service except as described above for processing by Anthropic's API, and not used for advertising of any kind. No human other than Matt Kutz reads it.

Retention and deletion

Mail data older than the working window (currently 14 days) is not refreshed and can be deleted at any time; Matt controls the server and database directly. Google access can be revoked at any time at myaccount.google.com/permissions, which immediately stops all access. Revoking access and deleting the server's database removes all Google user data Sidekick holds.

Google API Services User Data Policy

Sidekick's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to this policy

If Sidekick's handling of Google data changes, this page will be updated and the date above revised.

Contact

Matt Kutz — mattkutz@gmail.com