Privacy Policy

Effective Date: November 2026 · Application: Saphirium (Developer: devSergioSS)

Summary: Saphirium operates with a strict local-first, zero-server architecture. We do not own or operate any backend servers, analytics trackers, or advertising networks. Your calendar events, tasks, and credentials stay on your Windows computer and—only if you choose to sign in—travel directly over encrypted HTTPS between your device and Google’s official APIs.

1. Overview & Scope

This Privacy Policy explains how Saphirium (also published on the Microsoft Store as “Saphirium: Desktop Planner Widget — Calendar, Tasks & Sync”, official website https://saphirium.app; hereinafter “the Application”, “we”, “us”, or “our”) accesses, processes, stores, and protects information on your Windows device.

2. Information Accessed & Processed Locally

Saphirium can be used completely offline without any account. If you voluntarily connect a Google account, the Application accesses the following Google user data solely on your local computer:

Google Account Identity (openid, userinfo.profile, userinfo.email): Your display name and email address, used strictly to display which Google account is currently connected inside the Application’s Settings window.
Google Calendar Data (calendar.readonly, calendar.events): Your calendar list and event details (titles, start/end times, recurrence rules, locations, descriptions, color labels, and conference links such as Google Meet, Zoom, or Microsoft Teams) so you can view, search, create, edit, and delete calendar events directly from your desktop widget.
Google Tasks Data (tasks): Your task lists, tasks, subtasks, notes, completion status, and due dates so you can view, create, organize, complete, and time-block tasks on your desktop.
Local Application State: Events and tasks created in Local PC mode, an offline cache of synced schedules, pending offline sync operations, and UI preferences (selected theme, opacity, window coordinates, language, and notification settings).

3. Google API Services User Data Policy & Limited Use Disclosure

Saphirium’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, with respect to Google user data:

We do not transfer, transmit, or store your Google user data on any developer-owned or third-party servers.
We do not sell, rent, license, or monetize your personal data, calendar events, or tasks.
We do not use your data for serving advertisements, profiling, or marketing.
We do not use, transfer, or retain Google user data to train, fine-tune, or improve generalized artificial intelligence (AI) or machine learning (ML) models.
No human at devSergioSS can read your calendar or task data because it never leaves your personal device except when communicating directly with Google APIs under your own OAuth token.

4. Local Data Storage & Security

Local Windows Storage: All configuration files, local events/tasks, and cached schedules are stored exclusively inside your local Windows user profile directory (%APPDATA%).
Windows DPAPI Token Encryption: When you sign in with Google OAuth 2.0, your access and refresh tokens are encrypted at rest on your device using native Windows Data Protection API (DPAPI) via OS-level cryptographic storage, bound to your local Windows user account.
Direct TLS/HTTPS Transport: All requests between your computer and Google APIs (googleapis.com) are transmitted directly over encrypted HTTPS connections.

5. Third-Party Services & Payments

Microsoft Store: Distribution, licensing, regional pricing, and payment processing are handled directly by Microsoft Corporation in accordance with the Microsoft Privacy Statement. Saphirium never receives or stores your payment card or billing details.
External Video Links: Clicking a meeting link (such as Google Meet, Zoom, or Microsoft Teams) opens that URL in your default browser or native conferencing client under that provider’s respective privacy policy.
Zero Analytics or Telemetry: Saphirium contains no third-party analytics SDKs, crash-reporting trackers, or behavioral telemetry.

6. Data Retention, Revocation & Deletion

Because all data resides locally on your computer and in your own Google account, you have complete control at all times:

Sign Out in App: Clicking Sign Out in Saphirium Settings immediately deletes your stored OAuth tokens and cached Google session data from your PC.
Revoke Google Access: You may revoke Saphirium’s access to your Google account at any time at myaccount.google.com/permissions.
Full Local Removal: Uninstalling Saphirium through Windows Settings or deleting its folder in %APPDATA% permanently erases all local preferences, caches, and offline data from your computer.

7. Children’s Privacy

Saphirium is a general-audience productivity utility not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction), and we do not knowingly collect personal information from children.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect technical or regulatory changes. The updated version will always be posted on this page with a revised Effective Date.

9. Contact Us

If you have any questions about this Privacy Policy or data handling in Saphirium, please contact us at: [email protected]