Privacy Policy
Winsorlabs Home · last updated 17 October 2026
Winsorlabs Home is a private household tool. It is built by Cathrin and used by two people, Cathrin and Ricky, to run their own home. It is not a product, it is not offered to the public, and nobody else can sign in. The same Google sign-in also serves the author's Health and Capture tools: Capture uses only your email address, and Health can read Google Calendar (read-only) if you turn that on. That use is described in Health's privacy policy. All the tools are listed at winsorlabs.uk.
What it accesses
With explicit permission granted through Google sign-in:
- Your email address, to check you are one of the two people allowed in.
- Gmail, read-only, and only if you choose to connect it. The app searches for a narrow set of emails: order, dispatch and delivery notices from shops and couriers; receipts and renewal notices for subscriptions; and booking confirmations and invitations. It never reads emails Gmail files under Promotions, Social or Forums, it never sends, changes or deletes email, and it cannot.
- Google Contacts, read-only, and only if you choose to connect it. The app reads your contacts' names, phone numbers, addresses and birthdays. It never adds, changes or deletes contacts, and it cannot.
- Google Calendar, read-only, and only if you choose to connect it. The app reads your events for the next two months. It never adds, changes or deletes events, and it cannot.
What it does with it
From each email it finds, it keeps a few facts for the household dashboard:
- Deliveries: the shop, the courier, the delivery date and time window, and whether it has arrived. Never what was ordered.
- Subscriptions: the service, its cost, how often it renews, and the next renewal date.
- Events: a short title, the date and time, and the place.
From your calendar it keeps your days off (all-day events such as Holiday or Annual leave) and, for each other event, its title, date, time and the name of the place, to show on the dashboard. Event descriptions and guest lists are not read. Calendar events are not sent to Anthropic.
From your contacts it keeps each one's name, phone numbers, addresses and birthday, so birthdays can be marked and a message or card sent from your own phone. Contacts are not sent to Anthropic.
It also keeps each email's sender, subject and date, so the same email is never read twice. It does not keep email bodies.
That is the whole purpose. The data is not used for advertising, profiling, analytics or training any model.
Who else sees it
- Anthropic (the Claude API) reads the text of each matching email once, to pick out the facts above, and returns them to the app. Anthropic does not use data sent through its API to train its models. Nothing else is sent to Anthropic about you.
- Nobody else. No analytics, no advertising networks, no other third parties. The data is not sold or shared.
Where it is kept
On a private server the author controls. Gmail access tokens are encrypted at rest, and the server is backed up, encrypted, to private storage.
Limited use
Winsorlabs Home's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Removing access
Either of you can disconnect Gmail at any time from Email in the app's footer, or revoke access at myaccount.google.com/permissions. On request, everything found in your email is deleted.