Read-only Outlook access
Microsoft is the source of truth. The app reads calendar events and does not need permission to edit Outlook calendars.
Trust-first calendar sync.
Calendar permissions are sensitive. The product is designed around one-way sync, narrow default scopes, and clear disconnect controls.
Narrow Google default
The default flow creates a dedicated Google calendar for synced events instead of asking for broad access first.
Encrypted sync state
OAuth tokens and event cache data are stored encrypted at rest so updates and deletes can be handled reliably.