← Up Next

Privacy policy

Up Next is a macOS desktop app that runs entirely on your own Mac. It has no servers, no accounts and no analytics. This policy describes exactly what it accesses and where that data goes.

Last updated: 30 September 2026

What the app accesses

With your permission, Up Next requests two read-only Google Calendar scopes:

• calendar.events.readonly — to read the events in today’s agenda.
• calendar.calendarlist.readonly — to list your calendars, so you can choose which ones appear.

These are read-only. The app cannot create, change or delete calendar entries, and it has no access to Gmail, Drive, Contacts or any other Google service.

How that data is used

Event titles, times and meeting links are used only to draw today’s agenda on your screen, show a countdown in your menu bar, and open a meeting link when you click Join.

Event descriptions and attendee lists are read in memory only, to find a meeting link and to check whether you declined an invitation. They are then discarded. They are never stored, never written to logs, and never displayed.

Where data is stored

• Calendar events are held in memory while the app is running and are not written to disk. Closing the app discards them.
• Your Google sign-in token is encrypted using the macOS Keychain and stored in the app’s own folder on your Mac, readable only by your user account. It never leaves your machine.
• Your settings — which calendars to show, which monitor to use, and similar preferences — are stored on your Mac. They contain no calendar content.
• Your TODO list is text you type into the app yourself. It is saved unencrypted in the app’s own folder on your Mac, in a file readable only by your user account, so that it survives restarts. It is never sent anywhere, and it is not calendar data: Google neither sees it nor supplies it. Completed items are deleted after 30 days, and deleting an item removes it immediately.
• Logs stay on your Mac. They record counts, timings and error codes. They never contain event titles, attendees, meeting links or credentials.

What is never sent anywhere

The app makes network requests only to Google’s own endpoints, to sign in and to read your calendar. It sends no data to the developer or to any third party. There is no analytics, no telemetry and no crash reporting. There is no backend service of any kind, because the app has no server component.

Sharing

Your Google user data is never sold, never shared, and never transferred to anyone. It is not used to train any model, and it is not used for advertising.

Up Next’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing your data

Choosing Disconnect in the app revokes the token with Google and deletes it from your Mac. You can also revoke access at any time at myaccount.google.com/permissions. Uninstalling the app removes its stored settings, TODO list and token.

Children

The app is not directed at children under 13.

Changes

If this policy changes, the updated version will be published on this page with a new date.

Contact

Questions about this policy can be sent to the support address listed on the Google consent screen. For how the app is built and how the credential is protected, see the security overview.