What sheepdog reads, and where it goes.

Effective date: October 22, 2026.

sheepdog is a macOS menu bar meeting alarm. It runs entirely on your Mac. It has no server, no account with its developer, no analytics and no tracking. Nothing it reads is sent to its developer or to anyone else.

What sheepdog reads

macOS Calendar. With your permission, sheepdog reads upcoming events from the calendars macOS Calendar already knows about. This happens on your Mac through the system calendar store.

Microsoft, if you sign in. sheepdog asks for these Microsoft Graph permissions:

User.Read, to show which account is signed in.
Calendars.Read, to read your upcoming events.
offline_access, to stay signed in without asking again.

Google, if you sign in. sheepdog asks for the calendar.readonly scope, to read your calendars and upcoming events.

From each event sheepdog reads the title, start and end times, whether it is all day, canceled or marked free, your response, the organizer and attendees, the location, the online meeting link, the description and the link that opens the event in its calendar. It reads the description and location only to find the link that joins the meeting. From Google it also reads your calendar list, to find the calendars that are yours.

sheepdog only reads. It never creates, changes or deletes an event.

Where it goes

sheepdog talks directly to Microsoft and Google from your Mac to sign you in and read your calendars. That data goes nowhere else. sheepdog does not sell, share or transfer it, does not use it for advertising, and does not use it to train any model.

What stays on your Mac

Sign-in. The account's email address and the token that keeps you signed in are stored in your macOS login Keychain.
Settings. Your alert timing, sound, Slack channel links and other choices are stored in the app's preferences on your Mac.
Hold my place notes. A note you write before a meeting is stored with the meeting's title and time on your Mac. It is deleted when you clear it, or at 4 a.m. after it is handed back.
Errors. When a sign-in or calendar read fails, sheepdog writes the service name and the error to the macOS system log on your Mac.

Events themselves are held in memory while sheepdog runs and are not written to disk.

Removing access

Click Disconnect next to an account in sheepdog's settings to delete its sign-in from your Keychain. You can also revoke sheepdog's access at any time from your Microsoft account or your Google account. Deleting the app and its preferences removes everything else.

Google user data

sheepdog's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes and contact

If this policy changes, the new version will be posted on this page with a new effective date. Questions go to GitHub issues.