Privacy policy

Last updated 19 October 2026

Noxyl is a desktop app for Windows. It runs on your PC and has no servers of its own. We don't collect, receive, store, sell or share your personal data, because it never reaches us.

What Noxyl accesses, and why

• Google Calendar, when you sign in with Google. Noxyl reads the events on the calendars you have selected, to show your next meeting, a countdown and a join link. It creates an event when you type one in, deletes an event you just added if you press Undo, and records your reply when you answer an invitation. It also reads your email address, to show which account is connected.
• Google Tasks, only if you turn on "Show Google Tasks". Noxyl reads your open tasks that have a due date, from all your task lists, to show the ones due today or overdue. It marks a task as completed when you tick it off in Noxyl. Hiding a task in Noxyl changes nothing in your account.
• A private calendar link (iCal), if you connect one instead. Noxyl downloads that calendar to show your meetings.
• Your Gmail, if you connect it with an app password. Noxyl checks for new messages to show the sender, the subject, any sign-in code and, if you turn previews on, the first lines of the message. It marks a message as read when you ask it to.
• Your Downloads folder, to show downloads in progress and finished files.

Where your data goes

• Data from these accounts is used only to show it to you in Noxyl, on your PC. It is not sent to us or to anyone else.
• Sign-ins (Google access tokens, app passwords, calendar links) are stored on your PC, encrypted with Windows for your user account.
• To show a sender's logo, Noxyl looks up the sender's web domain (for example newyorker.com) using Google Public DNS and Google's site-icon service, and downloads the logo from the address the sender publishes for it. Only the domain is sent, never your messages or your address. Logos are saved on your PC so they aren't fetched again.
• Noxyl keeps a log file on your PC for troubleshooting. It records events such as "Mail connected", never message contents, passwords or calendar links.
• Noxyl has no analytics, tracking or advertising.

Google user data

Noxyl's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used for advertising, never sold, and never read by people, and it is not used to train AI models.

Removing your data

Disconnect an account in Noxyl's settings, and Noxyl deletes its saved sign-in. Signing out of Google also withdraws Noxyl's access in your Google account. You can withdraw it yourself at any time at myaccount.google.com/connections. Uninstalling Noxyl and deleting the folder %LOCALAPPDATA%\Notch removes everything it stored.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions about privacy: hello@getnoxyl.com