Touchless Privacy Policy

1. Who this policy applies to

This policy applies to the Touchless desktop application, its tutorial and control features, and the public Touchless download website.

2. Information Touchless can access

Depending on which features you use, Touchless can access, collect, or locally generate:

• Camera input for hand gesture recognition.
• Microphone input for voice commands and dictation.
• Optional phone camera and phone microphone streams when you enable QR-based pairing over your local network.
• On-screen content you intentionally capture using screenshot, recording, or clip features.
• Files and folders you choose to save to, such as drawings, screenshots, screen recordings, and clips.
• Application settings, tutorial progress, selected devices, custom gestures, and similar local preferences.
• Limited device and version metadata needed when the app checks for new releases.
• Optional diagnostic or debug files created on your device if debugging or advanced features are enabled.

3. How Touchless uses this information

Touchless uses this information only to provide the product's features, such as gesture control, mouse mode, dictation, saved outputs, update checks, and optional phone pairing.

Touchless does not require account creation to use its core desktop features.

4. Local processing

Touchless is designed so that gesture recognition and core voice features run primarily on your device.

• Camera frames are used to detect gestures and hand landmarks during runtime.
• Microphone audio is used for voice commands and dictation when you enable those features.
• If you enable phone camera or phone microphone mode, the stream is sent only between your devices over your local network.
• Saved screenshots, recordings, clips, and drawings are created only when you intentionally trigger those features.

Touchless does not sell your personal information, and it is not designed as an advertising or data-broker product.

5. Disclosure to third parties and network activity

Touchless may make limited network requests in the following situations:

• Checking for new app releases or downloading update packages.
• Loading files from the Touchless download or update host when you install or update the app.
• Serving the optional QR pairing page to your phone over your local network when you enable the phone camera or phone microphone feature.

For currently released builds, this may involve third-party infrastructure such as GitHub for release metadata and Cloudflare-hosted download delivery. If a future Touchless feature explicitly sends user content to an outside AI or cloud service, that feature should be treated as optional and disclosed in-product before use.

6. Optional Google account integration

Touchless includes optional features that connect to your Google account. They are off by default and activate only when you click Connect Gmail (or another Google connect button) and explicitly approve Google’s consent screen. You can use Touchless without ever connecting a Google account.

Data Accessed

When you connect a Google account, Touchless requests the following OAuth scopes. Each scope is requested only because a specific user-facing feature requires it; you can revoke any or all of them at any time (see Revocation below).

• Sign in / identify your account (openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile) — allows Touchless to confirm which Google account is connected, display your name and avatar in the app, and address you by name (e.g. “Good morning, Konstantin”). Standard OpenID Connect identity scopes.
• Send email on your behalf (https://www.googleapis.com/auth/gmail.send) — allows Touchless to send messages composed inside the app when you dictate them (e.g. “email Sam and tell him the meeting is moved to 4”). Does not grant access to read your inbox.
• Manage your calendar (https://www.googleapis.com/auth/calendar) — allows Touchless to read upcoming events for voice queries about your schedule, and to create, modify, or remove events when you dictate a new appointment or change.
• Manage your contacts (https://www.googleapis.com/auth/contacts) — allows Touchless to resolve names you speak (e.g. “email Dani”) to the right email address or phone number, and to add or update contacts when you dictate them.
• Read your birthday (https://www.googleapis.com/auth/user.birthday.read) — allows Touchless to know your birthday for personalized reminders and greetings (e.g. “happy birthday” on the day), and to surface upcoming birthdays of contacts when combined with contact data.
• Read and edit your Google Docs (https://www.googleapis.com/auth/documents) — allows Touchless to read documents you ask it to summarize or append to, and to create new documents and append text to existing documents on your behalf.
• Read and edit your Google Sheets (https://www.googleapis.com/auth/spreadsheets) — allows Touchless to read spreadsheets you ask it to summarize or update, and to create new sheets and append rows on your behalf.
• Read and edit your Google Slides (https://www.googleapis.com/auth/presentations) — allows Touchless to read presentations you ask it to summarize and to create new presentations or add slides on your behalf.
• Create and read Google Forms (https://www.googleapis.com/auth/forms.body, https://www.googleapis.com/auth/forms.responses.readonly) — allows Touchless to create new forms (e.g. quick polls or surveys) on your behalf and to read responses when you ask (e.g. “how many responses on the beta signup form?”).
• Per-file Google Drive access (https://www.googleapis.com/auth/drive.file) — per-file read/write limited to files Touchless creates or that you specifically open with Touchless via a Google Picker. Touchless cannot see, list, or access any other files in your Drive.
• Read your YouTube account (read only) (https://www.googleapis.com/auth/youtube.readonly) — allows Touchless to read your YouTube playlists, subscriptions, watch history, and liked videos for voice queries (e.g. “play my Coding Music playlist”, “what’s in my Watch Later?”). Does not grant the ability to upload, like, comment, or modify YouTube content.
• Add media to Google Photos (https://www.googleapis.com/auth/photoslibrary.appendonly) — allows Touchless to upload media items (screenshots, screen recordings, voice-saved clips) to your Google Photos library on your behalf. Append-only: Touchless cannot read, list, modify, or delete existing photos in your library.

Data Usage

Purpose. Google user data is used solely to fulfill the specific command you give Touchless (voice or gesture). Touchless does not use Google user data for advertising, analytics, profiling, generalized AI or machine-learning model training, or any purpose other than executing the request you made.

Processing. Data is fetched on demand from Google’s APIs at the moment you issue a command. Touchless does not bulk-download, sync, or proactively poll your Google data. Each API call is made directly from your computer to Google — there is no Touchless backend that receives, processes, or relays your Google data.

Storage. Data returned from Google APIs is held in memory only for the duration of the command and any immediate follow-up turn (for example, so a voice query can refer to “the email I just read”). It is not written to disk, transmitted to Touchless servers, or transmitted to any third party.

OAuth tokens. Your Google authorization token (the credential that lets Touchless call Google APIs on your behalf) is stored locally on your own device at Documents/Touchless/google/. The token never leaves your machine, is never transmitted to Touchless servers, and is never shared with any third party.

Sharing. Touchless never sells, rents, or shares Google user data with third parties. Because Touchless has no backend that processes Google data, there is no Touchless-side party data could be shared with even if we wanted to.

Revocation and deletion

You can revoke Touchless’s access to your Google account at any time at myaccount.google.com/connections — find Touchless in the list and click Delete all connections you have with Touchless. You can also delete the local token file at Documents/Touchless/google/ to drop Touchless’s credentials immediately; the next time you start the app, the “Connect Gmail” button will appear again as if the account had never been connected.

Because Touchless does not store Google user data on any server, no further deletion request is required — revoking access (above) is sufficient to end Touchless’s ability to access your Google data.

Limited Use

Touchless’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data is used only to provide the user-facing features described above, is not transferred to others except as necessary to provide or improve those features (which, in practice, is never — Touchless makes all Google API calls directly from your device), is not used for advertising, and is not used to train generalized AI or machine-learning models. Touchless does not allow humans to read Google user data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, doing so is necessary to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

7. Storage and retention

Touchless stores data primarily on your device, including settings and files you intentionally create or save through the app.

• Settings and preferences may be stored in local Touchless configuration folders such as ~/.touchless.
• Saved outputs such as drawings, screenshots, recordings, and clips are stored in the folders you choose.
• Custom gestures and similar user-created content are stored locally so they remain available across sessions.
• Some temporary working files may be created during capture, export, or update operations and later cleaned up or overwritten by the app.

Most locally stored data remains on your device until you delete it, change save locations, clear the relevant files, or uninstall the app.

8. Security

Touchless is designed to reduce unnecessary data transfer by keeping core processing local where possible.

• Touchless uses operating-system permissions for camera and microphone access.
• Touchless update checks and download links are intended to use HTTPS endpoints.
• Touchless phone pairing is intended to use encrypted local-network connections.
• Access to local Touchless data depends on the security of your Windows account, device, and chosen storage locations.

No software can guarantee absolute security, and you are responsible for protecting access to your PC and saved files.

9. Your choices, access, and controls

You can control how Touchless accesses device data by:

• Granting or revoking camera and microphone permissions in Windows.
• Choosing whether to enable voice features, phone pairing features, screenshots, recordings, and clips.
• Deleting saved files, custom gestures, and local configuration data from your device.
• Uninstalling the app at any time.

Because Touchless stores most user data locally, you can usually access that information directly through the app itself, through the save folders you selected, or through the relevant Touchless configuration folders on your device.

10. What Touchless does not do by default

• Touchless does not require you to create an account to use its core desktop features.
• Touchless does not sell personal information.
• Touchless does not use always-on advertising trackers or behavioral advertising features in the current public desktop experience.

11. Changes to this policy

This policy may be updated as Touchless adds or changes features. The latest version will be posted on this page with an updated effective date.

12. Contact

If you have privacy or support questions about Touchless, contact [email protected].