Oasis Planner Privacy Policy

Effective date: October 18, 2026

Oasis Planner ("Oasis Planner", "Oasis", "the app") is a day planner and knowledge base for technical professionals, available for macOS, iOS, iPadOS, and Android. This policy explains what information Oasis Planner handles, where it goes, and the choices you have. "We" and "us" mean the developer of Oasis Planner, reachable at support@oasis-planner.com.

The short version: Oasis is a local-first app. Your tasks, notes, meetings, time entries, and recordings are stored on your device. Oasis has no account system, no servers of its own, no analytics, no advertising, and no tracking. Data leaves your device only when you connect an outside service, and then it goes directly between your device and that service.

1. Information stored on your device

Everything you create in Oasis is stored in a database on your device:

Tasks, projects, notes (including images you embed), and backlog items.
Meetings, including meetings mirrored from a connected calendar.
Time entries, work sessions, and reports built from them.
Meeting transcripts, summaries, and action items.
App settings and preferences.

We do not have access to this data. It is not sent to us, and we do not operate any server that could receive it.

Secrets — OAuth refresh tokens, personal access tokens, and API keys — are stored in your operating system's secure keychain, never in the app database.

2. Services you choose to connect

Each of the integrations below is optional and off until you connect it. When you connect one, Oasis talks directly to that service from your device. No Oasis-operated server sits in between.

Google Calendar and Google Drive

You can connect a Google account to sync your calendar, and you can choose Google Drive as a backup destination. Exactly what Oasis Planner accesses from Google, and how it uses, stores, shares, and deletes that data, is described in section 3.

GitHub

If you connect a GitHub host (github.com or GitHub Enterprise Server), Oasis uses a token you authorize (through GitHub's device sign-in or a personal access token you paste) to read your GitHub login and the pull requests linked to your projects. Oasis requests read access to pull requests; it does not change your repositories.

Jira

If you connect a Jira site, Oasis uses the API token you provide to read issues you choose to import as tasks and, when you ask it to, to update an issue's status.

AI assistance (Apple Intelligence, on your device)

Oasis offers optional AI-assisted features — suggesting which project a meeting or capture belongs to, choosing whether a quick capture is a note or a task, proposing a day plan from your backlog, and triaging meeting action items. These features are off by default, and each can be turned on or off individually.

They run entirely on your device, using the on-device model built into Apple Intelligence. Depending on the feature, the text it reads can include task titles, project names, meeting titles and times, capture text, and action items extracted from a meeting transcript — including information that came from your Google Calendar, such as meeting titles. That text is processed on your device and is not sent to us or to any third party. No account or API key is involved. On a device where Apple Intelligence isn't available or is turned off, these features stay quiet.

3. Google user data

This section describes how Oasis Planner accesses, uses, stores, shares, and deletes data it receives from Google APIs ("Google user data"). Oasis Planner accesses Google user data only after you sign in with Google and grant the permissions listed below.

3.1 Data accessed

Scope	Data accessed
`openid`, `email`, `profile`	Your Google account ID, email address, and name.
`https://www.googleapis.com/auth/calendar.readonly`	The list of calendars in your Google account, and the events on them: titles, start and end times, time zones, locations, descriptions, attendees, video-call links, your response status, and working location.
`https://www.googleapis.com/auth/calendar.events`	Write access to events on your calendars, so Oasis Planner can save changes you make: setting your working location for a day, and declining a meeting.
`https://www.googleapis.com/auth/drive.file`	Only the files and folders Oasis Planner itself creates in your Google Drive: the "Oasis Backups" folder and the backup files in it. Oasis Planner cannot see or open any other file in your Drive.

Oasis Planner requests the Drive scope only if you choose Google Drive as a backup destination.

3.2 How Google user data is used

Oasis Planner uses Google user data only to provide features you can see in the app:

Account details (ID, email, name) label the connected account in Settings and tell multiple connected accounts apart.
Calendar data is shown in your day plan, calendar, and meeting views, so you can plan around your meetings, link them to projects, take notes on them, and track time against them.
Calendar write access is used only when you take an action in Oasis Planner that changes an event: setting your working location for a day (which creates or updates a working-location event), or declining a meeting. Oasis Planner never creates, edits, or deletes events on its own.
Drive access is used only to upload your backups, list them so you can pick one, restore one when you ask, and delete old backups according to the backup retention limit.

3.3 How Google user data is shared

We, the developer of Oasis Planner, never receive your Google user data. Oasis Planner talks to Google directly from your device, and we operate no server that could receive it. We do not sell Google user data, and we do not share it with advertisers, data brokers, or anyone else.

Google user data never leaves your device for a destination other than Google. The AI assistance features that read calendar event titles and times (see section 2) process them on your device with Apple Intelligence's on-device model; nothing is sent elsewhere. Every AI assistance feature is off by default.

3.4 How Google user data is stored and protected

On your device. Calendar events are copied into the Oasis Planner database on your device so the app works offline. Your account ID, email, and name are stored there with them.
Credentials. Google OAuth tokens are stored in your operating system's secure credential store (Keychain on Apple platforms, Keystore-backed storage on Android), never in the app database. Google sign-in uses the OAuth 2.0 authorization-code flow with PKCE.
In transit. All requests to Google APIs are made over HTTPS (TLS).
In Google Drive. If you back up to Google Drive, backups are stored in your own Drive, protected by your Google account, and may contain calendar data mirrored on your device.

3.5 How Google user data is retained and deleted

Calendar events stay on your device while the account is connected, and are refreshed from Google on each sync.
Disconnecting a Google account in Settings → Calendars deletes, from your device, its OAuth tokens, its account record, and every calendar event mirrored from it. Notes you wrote on those meetings are kept as ordinary notes.
Backups in your Drive are kept until Oasis Planner rotates them out under its backup retention limit or you delete them from the "Oasis Backups" folder.
Uninstalling Oasis Planner removes its database from your device.
You can revoke Oasis Planner's access to your Google account at any time at Google Account permissions.

Because we never receive your Google user data, we hold none of it to delete. If you have a question about deletion, email support@oasis-planner.com.

3.6 Limited Use

Oasis Planner's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

Google user data is used only to provide or improve user-facing features that are visible in the app.
Google user data is transferred to a third party only as described in section 3.3, to provide a feature you turned on.
Google user data is never used for advertising, including targeted, personalized, or retargeted ads.
Google user data is never sold, including to data brokers or information resellers.
Google user data is never used to determine creditworthiness or for lending purposes.
Google user data is never used to develop, improve, or train generalized or non-personalized AI or machine-learning models.
No human reads your Google user data. It never reaches us.

4. Meeting recording and transcription

On macOS, you can record a meeting. Recording starts only when you tap Record meeting, and it uses your microphone and, if you grant permission, your Mac's system audio (to separate your voice from the other side of a call).

Transcription and summaries are produced on your device using Apple's on-device speech recognition and Apple Intelligence. Audio is not uploaded anywhere by Oasis. Audio is held in a temporary file only while it is being transcribed (or kept for a retry if transcription fails) and is deleted afterward. The resulting transcript and summary are saved as a note on your device.

You are responsible for obtaining any consent that the law where you and the other participants are located requires before recording a conversation.

5. Activity suggestions (macOS)

The macOS app can optionally suggest what untracked time in your day was spent on, from what you were working in. This is off by default and starts only when you turn on Suggested time entries in Settings → General. Turning it on asks macOS for Accessibility access, which Oasis uses solely to read which file or folder the frontmost window has open; you can withdraw that access at any time in System Settings → Privacy & Security → Accessibility.

While it is on, and only while you are actively using your Mac, Oasis notes once a minute:

the name of the app in front;
if that app's window has a file or folder open inside a git repository, the repository's name and owner and the checked-out branch, read from the repository's own .git files;
if the app is a browser Oasis already has your Automation permission for (granted for Quick Capture), the domain of the front tab, such as github.com.

Oasis does not keep window titles, file names or paths, full web addresses, page contents, keystrokes, or screenshots. These notes are kept in a separate folder on your Mac, outside the Oasis database, so they are never included in Oasis backups or sync, and they are never sent to us or anyone else. (A whole-Mac backup such as Time Machine copies them like any other file on your Mac.) They are deleted automatically after 7 days, and immediately when you turn the feature off.

Work Day Replay uses them to suggest a task or project for untracked stretches of your day — for example, matching a branch name to a task title, a linked pull request, or a Jira key. Nothing is logged until you accept a suggestion; only the time entry you accept is saved.

6. Local AI agent access (MCP server)

The macOS app can optionally serve your Oasis data to AI agents running on your own computer, using the Model Context Protocol. This is off until you turn it on. It listens only on your computer's loopback address (127.0.0.1), so other devices cannot reach it, and it requires an access token stored in your keychain. Write access is a separate switch, also off by default. Anything an agent reads is then handled under that agent's own privacy terms.

7. Other network activity

Exported notes. When you export a note as HTML, the file references Google Fonts. Opening that file in a browser may cause the browser to fetch fonts from Google.
Links. Opening a link from Oasis (for example, a meeting's video-call link) hands it to your browser or the relevant app.

Oasis sends no analytics, usage statistics, crash reports, or advertising identifiers.

8. Sharing and selling

We do not sell or rent your personal information. Because Oasis Planner has no servers, we do not hold your data and cannot disclose it to anyone. Data goes to a third party only when you connect that service yourself: Google, GitHub, and Jira, as described in sections 2 and 3.

9. Retention and deletion

Your data stays on your device until you delete it. You can:

Delete individual tasks, notes, meetings, and recordings in the app.
Turn off Suggested time entries, which deletes every activity note it took (section 5).
Disconnect any connected service in Settings, which removes its stored credentials from your device.
Delete backups from your backup folder or from the "Oasis Backups" folder in your Google Drive.
Uninstall Oasis to remove the app and its local database.

To revoke Oasis's access to your Google account at any time, visit Google Account permissions. You can revoke GitHub access in your GitHub settings under Applications or Personal access tokens, and Jira access by revoking the API token with Atlassian.

10. Security

Credentials are kept in the operating system's keychain. Connections to Google, GitHub, and Jira use HTTPS. Google sign-in uses the OAuth authorization-code flow with PKCE. Backups are not encrypted by Oasis Planner. Because your data lives on your device, its security also depends on how you secure that device and your backups.

11. Children

Oasis is a productivity tool for professionals and is not directed at children under 13. We do not knowingly collect information from children.

12. Changes to this policy

If this policy changes, we will update the effective date above and publish the new version at this address. Material changes will also be noted in the app's release notes.

13. Contact

Questions about this policy or your data can be sent to support@oasis-planner.com.