# Built so that a mistake by the AI cannot become a sent email > Every Gmail and Calendar permission Momo asks for and why, what is stored and for how long, why the AI cannot send without you, and how to delete it all. Source: https://askmomo.app/security ยท Updated 10 October 2026 Momo reads your inbox, so the bar is high. Here is exactly what it can see, what it stores, what the AI is allowed to do, and how to leave. ## The approval gate The language model can never approve anything. Sending an email and cancelling a meeting always need your tap on a card that shows the exact message and recipients. Approval goes through a single-use database latch with a 2-hour expiry, so a card cannot be reused. New and moved meetings can be set to auto-approve in Settings, only when the slot has no conflict. - Gated tools tell the model "NOT happened yet". Typing "send it" cannot trick it into claiming something was sent. - Success is reported only after Google's API confirms it. - Sends from chat wait 10 seconds and can be undone. - Recipients of drafts and nudges are chosen by code, never by the model. ## Prompt injection Email content, attachments and tool results are marked as untrusted data in every prompt. Memories can only be saved when the text appears word for word in what you typed, so an email cannot plant one. The brief's AI gets no tools and any id it invents is dropped. Even if a model is fooled, every outbound side effect still needs a human click. ## Permissions, and why Momo uses Google sign-in and never sees your password. - gmail.readonly: search, read and summarise mail you ask about, build the brief and triage. - gmail.send: send an email, only after you tap Send. - gmail.compose: save drafts to Gmail Drafts. - gmail.modify: archive mail you approve. Never deletes. - calendar.readonly and calendar.events: list events, find free time, create, move or cancel after approval. - contacts.readonly and contacts.other.readonly: work out who "Rahul" is. ## What is stored and for how long Your Google refresh token is encrypted with AES-256-GCM and used only server-side. Conversations are encrypted at rest and purged 30 days after the last message. Triage items keep sender, subject and a snippet, encrypted, for 14 days. Promise text and memory facts are encrypted with an HMAC fingerprint for de-duplication. Your writing-style profile stores style, not email text. The audit log keeps 180 days and holds no email bodies. ## AI processing Momo uses Azure OpenAI models under Microsoft's enterprise terms, which do not use customer data to train models. Momo does not train its own models on your email. Attachments are parsed in memory with size and entry caps, never written to disk, and no macros or formulas are executed. ## Where it runs Application servers run on Google Cloud in Mumbai (asia-south1). The database runs on Azure in Central India with TLS required. AI model calls go to Azure OpenAI in the United States (East US 2) under Microsoft's enterprise terms. Static pages are served by Cloudflare. ## Leaving Settings has Disconnect Google, which revokes Momo's access at Google, and Delete everything, which removes conversations, memory, drafts records and stored data. Google verification of the app is in progress; until it completes, Google shows an "unverified app" screen at sign-in. ## Questions ### Are Gmail AI assistants safe? They can be if they cannot act without you. Momo cannot send, cancel or archive without your tap, encrypts your Google token and conversations, and treats all email content as untrusted input. ### Does Momo train AI on my email? No. Momo does not train models on your email, and the Azure OpenAI service it uses does not use customer data for training. ### Can an email trick Momo into doing something? Email content is marked untrusted, memories require your own words, and every outbound action still needs your click. An injection could at most produce a draft you then read. ### Why does Google say "unverified app"? Google's verification of Momo is in progress. Choose Advanced, then continue. The permissions requested are listed above. ### How do I delete my data? Settings, then Delete everything. Google access is revoked and stored data is removed. ## Related - [/privacy](https://askmomo.app/privacy) - [The Gmail AI assistant that does the follow-through](https://askmomo.app/gmail-ai-assistant) - [An Instinct alternative that asks before it acts](https://askmomo.app/alternatives/instinct) - [Momo, also known as Ask Momo](https://askmomo.app/about) --- Momo (Ask Momo, askmomo.app) is an AI chief of staff for Gmail and Google Calendar, built in India. It triages your inbox, drafts replies in your voice to Gmail Drafts, tracks who hasn't replied and what you promised, schedules meetings over email, and sends a morning brief. Every email and cancellation waits for your approval.