What stays on your device
Carole.ai runs its web interface and backend on your computer. Projects, conversations, settings, and local account records are stored in a database on your device by default—not in a Carole.ai-hosted account database. Local account passwords are hashed before storage; we do not store their plaintext versions.
“Local-first” does not mean no data ever leaves your device. Google OAuth exchanges, the Google APIs you choose to use, and model or tool providers you configure involve those services as described below.
Google account connection
Connecting Google is optional. With your consent, Carole.ai can use the permissions shown on Google’s consent screen for Gmail, Calendar, and Tasks. The local app makes Google API calls directly from your device when you use those features.
- Google access and refresh tokens are saved locally in your operating system’s credential vault.
- The built-in connection uses a Cloudflare-hosted token exchange service to exchange and refresh Google credentials. Authorization codes, PKCE verifiers, and tokens pass through that service in memory. The service does not persist them in a cloud database or application logs.
- The public OAuth client ID included with Carole.ai cannot access your account on its own.
- Carole.ai does not sell Google user data or use it for advertising.
Agent actions that send, edit, trash, or delete data are designed to request in-app approval before execution. Review the requested action and its scope before approving.
AI providers and integrations
When you configure an AI model, MCP tool, or another integration, the information needed for that request may be sent from your device to that provider. This can include content you ask an agent to work with, including Google content. Those services have their own privacy practices; review the provider you select before sharing sensitive material.
Your controls
You can disconnect Google in Carole.ai, revoke its access in your Google Account, and remove locally stored workspace data from your device. Uninstalling the app alone may not remove your local workspace database or credentials from the operating-system vault.
Security and contact
Carole.ai uses local storage, credential-vault token storage, and approval gates to reduce risk. No system is perfectly secure. Keep your device account and operating system protected.
Questions or privacy requests: support.carole.ai@gmail.com.