This policy describes how the Hermes app accesses Google user data. It applies to the Google accounts that choose to sign in. Last updated 13 October 2026.
Hermes is operated by a private individual in British Columbia, Canada, for a single household. It is not a company, it is not a commercial service, and it has no users other than that household.
If you grant access, Hermes may access:
Hermes does not access Google data from accounts that have not signed in.
Google user data is used only to provide features the account holder asked for on their own computer: reading and answering mail, adding real appointments to their calendar, and working with their documents. It is not sold. It is not used for advertising. It is not used to train a public AI model.
To answer a request, the relevant text (for example a message or a document excerpt) may be sent from the home computer to the AI model provider configured for Hermes, solely to produce that answer. That transfer is part of the feature the account holder requested. It is not a sale of their data.
OAuth tokens and working copies stay on the home computer that runs Hermes. Google continues to store the original mail, calendar, and files in your Google account. You can revoke Hermes at any time at Google Account permissions. After you revoke access, the stored tokens can no longer refresh.
The operator can see data in accounts that have signed in, because the operator runs the computer. No other person is given a copy for their own use. Human access is limited to operating the assistant, security, or a legal requirement.
Hermes's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.