Privacy Policy
Effective 1 October 2026
This policy covers the Path Tracer apps: Path Tracer Mail (with Calendar and Meet), Path Tracer Web and Path Tracer Custom Desktop — "the app" below. They share one sign-in with Google, which Google shows as "Path Tracer".
In short: Path Tracer is a set of Mac apps that talk directly to Google on your behalf. Your mail, calendar and files go between your Mac and Google, and nowhere else. We run no servers, we receive none of your data, and we have no way to see it. The AI assistant runs on Apple's on-device model, on your Mac. Nothing is used to train any AI model, and nothing is sold, shared or used for advertising.
Who we are
Path Tracer is made by Path Tracer Pictures FZCO, a free zone company registered with IFZA, Dubai, United Arab Emirates ("we", "us"). Registered address: IFZA Properties, Dubai Silicon Oasis (DSO-IFZA), P.O. Box 342001, Dubai, United Arab Emirates. Contact: support@pathtracertechnologies.com.
What the app accesses, and why
When you connect a Google account, Google asks you to allow these permissions. The app uses each only for the feature listed, only on your Mac, and only when you use that feature.
| Permission | What it allows | What the app uses it for |
|---|---|---|
gmail.modifyGmail | Read your mail; change it; send | Showing, searching and reading your mail; marking messages read; moving messages to Bin (never permanent deletion); saving drafts; sending the messages you write and click Send on. |
calendar.eventsGoogle Calendar | View and edit events | Declining an invitation, inviting guests, and creating events with a Google Meet link — each only when you do it. |
drive.readonlyGoogle Drive | See and download your files | Browsing, searching and opening your files, and attaching one to an email you write. Read-only: the app never changes or deletes anything in your Drive. |
Each permission is a separate sign-in, so you can grant or revoke them independently. The app asks for nothing else.
Where your data is processed and stored
Only on your Mac. The app connects to Google's servers to fetch and change your data, and to nothing else that receives it. There is no server of ours in between, and no copy is sent to us or to any third party.
| What | Where on your Mac |
|---|---|
| Sign-in tokens (not your password — the app never sees that) | Your Mac's Keychain in signed releases; in beta builds, a file in ~/Library/Application Support/Path Tracer/ readable only by your user account |
| A copy of your recent mail (about the last 60 days) so the app is fast and works offline | ~/Library/Application Support/Path Tracer/, readable only by you, excluded from Time Machine; encrypted in signed releases |
| Your assistant conversation | The same folder, readable only by you |
| Attachments you open | Your user's private temporary folder |
| Diagnostic logs — what the app did, never the content of your mail, events or files | ~/Library/Logs/Path Tracer/, readable only by you |
Google Meet calls and any web pages you open (including Google Docs, Sheets and Slides) are Google's own web pages, displayed by macOS's built-in web engine and signed in with Google's usual website sign-in. Google's privacy policy applies to them.
The AI assistant
- The email you have open, and nothing else. The assistant is a beta. It works on the email thread you have open in Path Tracer Mail: it can summarise it, answer questions about it, and draft a reply in it. It does not search or read the rest of your mailbox, your calendar or your Drive.
- On your Mac only. The assistant uses Apple's on-device foundation model, built into macOS as part of Apple Intelligence. Your questions, the thread it reads to answer them, and its replies are processed entirely on your Mac. The app does not use Apple's Private Cloud Compute, or any other server-based model.
- Only when you ask. The assistant reads the open thread only to answer a request you type or speak.
- Nothing happens without you. The only thing the assistant can create is a draft reply in the open thread. It is shown to you first and saved to your Gmail drafts only if you click to confirm. The assistant never sends email.
- Secrets kept out. Before the model reads a thread, passwords, one-time codes, sign-in and reset links, and keys are replaced with "[hidden]", and the same is done to what it writes. This is a safety measure, not a guarantee; the original email is not changed.
- Never used for training. Nothing you do in the app — including data from Google APIs — is used to train, fine-tune or improve any AI or machine-learning model, by us or by anyone else.
- Stored locally, and yours to delete. The conversation is kept on your Mac so the assistant can refer back to it. Clear in the assistant deletes the conversation; Disconnect deletes it and any notes.
- Voice input uses Apple's on-device speech recognition; the app requires recognition to happen on your Mac, so your recordings are not sent anywhere.
What we never do
No analytics, no tracking, no advertising, no crash reporting to us, no selling or renting of data, and no transfer of your data to anyone. The app contains no third-party analytics or advertising code. This website sets no cookies and loads nothing from other sites.
Google API Services User Data Policy
Path Tracer's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, data from Google APIs is used only to provide the features you use in the app; it is not transferred to anyone; it is not used for advertising; it is not used to train AI or machine-learning models; and no person reads it — we have no access to it at all.
How long data is kept
On your Mac, until you remove it. The mail copy covers roughly the last 60 days and is refreshed as you use the app. We keep nothing, because we receive nothing.
Deleting your data and revoking access
- Disconnect (in Path Tracer Mail, click your address above the message list → Disconnect …) revokes the app's access at Google for that account — mail, calendar and Drive — and deletes everything the app stored for it on your Mac: sign-in tokens, the mail copy, the assistant's conversation and notes, and opened attachments.
- Uninstalling with the included uninstaller removes the apps and logs, and, after asking, all remaining data. See Support.
- At any time, you can revoke the app's access in your Google Account at myaccount.google.com/permissions.
Security
Sign-in uses Google's standard OAuth flow in your own browser (the app never sees your password), with PKCE. All connections to Google are encrypted (HTTPS). Data on your Mac is readable only by your user account; signed releases store tokens in the macOS Keychain and encrypt the mail copy.
Children
The app is not directed at children under 16, and we do not knowingly provide it to them.
Changes to this policy
If we change this policy we will update this page and its effective date. Material changes will be announced in the app before they take effect.
Contact
Questions or requests: support@pathtracertechnologies.com, Path Tracer Pictures FZCO, IFZA Properties, Dubai Silicon Oasis (DSO-IFZA), P.O. Box 342001, Dubai, United Arab Emirates.