Privacy Policy.

1. Who we are and how to contact us

“Cronbo” refers to the Cronbo website and the DuckAgent iOS app currently in development. “We” or “us” refers to the app's publisher. For privacy questions, requests to exercise data rights, or to report a problem, contact email@cronbo.com. This address forwards incoming messages to our support inbox.

2. Information the app accesses and why

With your permission or at your request, the app may access the following information to deliver the features you choose:

• Google account and Gmail: basic Google account identity (such as email address, name and profile information), mailbox metadata, message content, threads, labels, and information associated with the email actions you request. This powers inbox viewing, search, answering questions about your messages, and mailbox actions.
• Other mail services: with your permission, messages and mailbox details from connected Outlook or iCloud Mail accounts. Those providers separately manage the underlying accounts and mail.
• Calendars and reminders: events, reminder details, times, lists and related information you grant the app permission to read or modify, for viewing, searching, planning and requested changes.
• Screen Time and focus controls: selected apps or categories, chosen limits, and information made available through Apple's Screen Time/FamilyControls/DeviceActivity frameworks to administer the focus settings you enable. Exact access depends on Apple's permissions and the app version.
• Location or places: a current or user-entered location, destination, transport choice and related itinerary details when you use location-aware reminders or departure estimates. If a feature uses a maps or directions provider, the necessary place or route queries may be sent to that provider.
• Chats, content and attachments: text you enter, information you ask the assistant to analyze, images, camera captures, documents or other attachments you choose to add.
• App settings: selected AI provider/model, notification preferences, focus settings and other configuration needed to make the app work.

Permissions depend on the features you use; the app does not require every integration to be enabled. The app may also receive ordinary technical information necessary to connect to the services you authorize.

3. Google API and Gmail data: specific access, use and handling

When you select Connect Gmail, Google handles authentication. The implementation reviewed for this policy uses OAuth 2.0 with PKCE and requests openid, email, profile and the restricted Gmail permission https://www.googleapis.com/auth/gmail.modify.

What this permission allows: it is broad enough for the app to read Gmail messages and metadata and to compose, send or modify mail on your behalf; it does not authorize immediate permanent deletion that bypasses Trash. The app uses the authorized information for the Gmail features you choose, including displaying and searching mail, answering your inbox questions, and carrying out supported actions you initiate. Granting a scope does not mean every technically permitted action is performed automatically.

Storage and credentials: the reviewed Gmail integration keeps OAuth access and refresh tokens in the iOS Keychain, not in a webpage or a Cronbo account. We do not request or store your Google password. Mail data is retrieved for app functions on the device and may remain in local app state or caches needed for those functions; the mailbox itself remains hosted by Google.

Sharing: Gmail content is not sent to a remote AI merely because you connect Gmail. For a user-directed analysis or draft, message text or selected content may be provided to the AI route used for that task. If the selected AI service is remote, this means transmitting the relevant content to that service; the app must obtain the appropriate consent for that transfer. On-device AI processing does not require sending the prompt to an external model provider. See section 5.

Limited use: Cronbo's use and transfer of data obtained through Google APIs is limited to the user-facing functions described here, subject to user consent and Google's API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it to serve personalized advertising, or use it to train or improve generalized or foundation AI models. We do not permit human access to Gmail content except where you specifically authorize it or an applicable limited-use exception permits it (such as a security investigation or a legal requirement).

4. iCloud Mail and Outlook

If you choose iCloud Mail, the app's reviewed integration uses Apple's IMAP/SMTP servers and an Apple app-specific password supplied by you. That app-specific password is kept in the iOS Keychain; you should not enter your normal Apple Account password. You can revoke the app-specific password from your Apple Account.

If you choose Outlook, the app uses Microsoft's account authorization flow. Depending on the permissions granted, it may read and manage messages and send mail for features you request. Microsoft continues to store and manage the underlying mailbox. Access can be revoked through your Microsoft account.

5. AI providers: on-device versus remote processing

DuckAgent offers an on-device AI path where supported, including Apple's on-device models and compatible downloaded or imported GGUF models using a local runtime. When local processing is used, prompts and model inference can remain on the iPhone, although the app may still contact connected services to retrieve information you requested.

The app may also offer optional connections to external AI services, such as ChatGPT/OpenAI, Claude/Anthropic or Gemini/Google, depending on availability and configuration. When a remote provider is used, the relevant prompt, selected message context and any attachments included in the request can leave the device and be processed under that provider's terms and privacy practices. We do not control independent providers' retention policies. Only submit content to a remote provider that you want it to process.

For Gmail data specifically, the app's handling must follow the Google Limited Use rules in section 3, including appropriate user consent and restrictions on general-purpose model training. Remote AI functionality involving Gmail content must not be used in a way that violates those rules.

6. Local processing, security and storage

Parts of the app, including compatible local AI model execution, agenda interactions and permitted Screen Time functionality, operate on your device. The reviewed mail connection stores certain credentials in Apple's iOS Keychain. Other app data, settings, attachments and caches may be saved in the app's local storage, and device backup or sync settings may affect copies of that information.

Network calls to Google, Microsoft, Apple, map services or a chosen remote AI provider still transmit the information required for the requested service. We use platform security features and reasonable safeguards, but no system can guarantee perfect security.

7. Service providers and third parties

Data may be handled by the provider of a service you choose to connect: Google for Gmail and Google identity, Apple for iCloud and iOS frameworks, Microsoft for Outlook, map/directions providers for routing requests, or an optional AI provider for the content you choose to submit. Each service may process data under its own terms and privacy policy.

The website is hosted by Cloudflare, which may process IP addresses, request metadata and security logs to deliver and protect it. Incoming mail to email@cronbo.com is forwarded using Cloudflare Email Routing to a Gmail inbox, so Cloudflare and Google may process support correspondence in delivering it. We do not use this contact channel as an in-app mailbox or sync service.

8. Website data and cookies

As published in this version, cronbo.com is a static information site with no account-registration form, advertising pixel, third-party analytics script or email-signup form. The site does not intentionally set advertising or analytics cookies. Its hosting provider may use essential security or infrastructure mechanisms and process connection data as described above. Links to outside services lead to websites with their own privacy practices.

9. Retention, deletion and revoking access

Information kept in the app's local storage generally remains until it is deleted through available app controls, cleared by the operating system, or removed with the app. Uninstalling the app does not necessarily erase Keychain entries, iCloud/device backups, data already stored in your connected services, or data previously sent to a third party. Calendar events, reminders and emails stored in their original services remain subject to those services' controls.

You can stop further access by disconnecting an integration where the app provides that option, revoking Google's third-party app permission from your Google Account, changing Microsoft's app permissions, revoking an iCloud app-specific password in your Apple Account, or turning off the relevant iOS permissions in Settings. You can contact email@cronbo.com to ask about data we may hold through support correspondence or other verified services. We will explain what can be deleted and what must be retained for legal or security reasons. For information sent to independent providers, refer to their deletion controls and policies.

10. Your choices and rights

You control whether to connect external accounts and can change device permissions through iOS Settings. Depending on your location, you may have rights to request access to, correction of, deletion of, or a copy of personal information held by us. Email email@cronbo.com for a request; we may need to verify your identity before disclosing account-related data.

11. Children

The app is not intended to be directed to children under 13. We do not intentionally ask children to connect Google accounts through this app. Parents or guardians should review the suitability of the app and the terms of any connected services for minors.

12. Updates to this policy

The app is in development and its integrations may change. We will update this page before introducing materially different data uses and, where required, provide a notice and obtain renewed consent. The date above shows when this version was published.

13. Contact

For privacy, data access or deletion inquiries: email@cronbo.com.

← Back to homepage