Who uses this app. Helmdall is a personal tool with one user, its owner. No one else can sign in to it, and it offers no service to the public.
What it accesses. With the owner's consent, Helmdall reads message headers and short previews from the owner's own Gmail account, using Google's read-only Gmail permission (gmail.readonly). It cannot send, change, move or delete email.
How the data is used. The messages are summarised by a language model running on the owner's own computers, and the summary is shown only to the owner. Nothing is sold, shared with third parties, used for advertising, or used to train models.
Storage. Summaries and the access token are kept on the owner's private network. The owner can revoke access at any time at myaccount.google.com/permissions.
Helmdall's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.