ContactSwap is a desktop app for Mac and Windows. It copies your contacts between Google and Outlook in either direction, with their photos, and backs them up to a file on your computer that you can restore later. This policy explains what data the app accesses, why it needs each permission, where your data goes, and how to delete it.
ContactSwap is provided by GCalTools (GERSTENBERG, France, SIRET 511 482 481 00016).
The short version
- ContactSwap runs on your computer. Your contacts go directly between your Google or Microsoft account and your computer. There is no ContactSwap server, and we never receive your contacts.
- The app reads and writes contacts only when you ask it to copy, back up or restore them.
- There is no ContactSwap account, no advertising, no analytics and no tracking.
The permissions we request, and why
When you add an account, Google or Microsoft asks you to approve these permissions. The app requests only what it needs.
- See, edit, download, and permanently delete your contacts (
googleapis.com/auth/contacts). ContactSwap reads your contacts and their photos so it can copy or back them up, and creates or updates contacts and photos when you copy or restore into your Google account. It needs write access because copying contacts into Google, and undoing a change, both write to your contacts. It never deletes contacts you haven't asked it to change. - Your email address (
openid,email). Used only to show which account you added, and to keep each account's sign-in separate on your computer.
Microsoft
- Read and write your contacts (
Contacts.ReadWrite). For the same reasons as above, for your Outlook contacts and contact folders. - Maintain access to data you have given it access to (
offline_access). Lets the app stay signed in, so you don't have to sign in again each time. - Your email address and basic profile (
openid,email,profile). Used only to show which account you added.
ContactSwap does not access your email, calendar, files or any other data in your accounts.
How we use Google data (Limited Use)
ContactSwap's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use your Google contacts only to provide the copy, backup and restore features you use in ContactSwap.
- Your Google contacts are transferred only where you direct it: into the Microsoft account you choose to copy them to, or into a backup file you choose to save.
- We do not use this data for advertising, and we do not sell it.
- Nobody at GCalTools can read your contacts. They are never sent to us.
- We do not use your data to train artificial intelligence or machine learning models.
What is written to your accounts
When ContactSwap copies a contact, it creates the contact in the account you chose and adds a small hidden reference to the original contact. This lets the app resume an interrupted copy without creating duplicates. When copying from Google to Outlook, details that Outlook has no field for are added to the end of the contact's notes, and also kept in a hidden field so they can be restored if you copy the contact back to Google. All of this stays in your own accounts.
What is stored on your computer
- Sign-in tokens. The tokens that let ContactSwap reach your accounts are stored on your computer, protected by your operating system: in the Keychain on Mac, and encrypted with a key held in Windows Credential Manager on Windows. They are never sent to us.
- Run records. Each copy, backup or restore keeps a folder in the app's own data folder, with a record of the contacts involved (so an interrupted run can be resumed), a log of the requests made, and, when contacts are replaced or merged, a safety copy of them as they were before (so you can undo the change).
- Backup files. Backups are built in the app's data folder before you choose where to save them, and backups you restore from are copied there so an interrupted restore can be resumed.
Backup files you save contain your contacts and photos in readable form. Keep them somewhere safe.
Purchases
ContactSwap is sold through app stores. Payment is handled by the store you buy from, under its own privacy policy. We do not receive your payment details, and the app does not send us anything when you use it.
How your data is protected
All communication with Google and Microsoft uses HTTPS (TLS) encryption. You sign in on Google's or Microsoft's own page in your web browser, so ContactSwap never sees your password. Sign-in uses OAuth 2.0 with PKCE, and the app accepts the sign-in only on your own computer.
Data retention and deletion
We do not hold any of your data. Everything ContactSwap stores is on your own computer, and stays there until you delete it:
- Sign out in ContactSwap to delete that account's sign-in tokens from your computer.
- Revoke access to stop ContactSwap reaching an account at all: for Google at myaccount.google.com/permissions, for a personal Microsoft account at account.live.com/consent/Manage, and for a work or school account at myapps.microsoft.com. Signing out alone does not revoke access.
- Delete run records and backups in the app's folder: on Windows, uninstalling ContactSwap removes them. On Mac, move ContactSwap to the Bin and delete the folder
~/Library/Containers/com.gcaltools.contactswap. - Backup files you saved elsewhere stay where you saved them until you delete them.
Contacts the app copied into your accounts are ordinary contacts in those accounts, and you can edit or delete them there like any other contact.
Children
ContactSwap is not directed at children under 16, and we do not knowingly collect data from anyone.
No affiliation with Google or Microsoft
ContactSwap is an independent product. It is not affiliated with, endorsed by, or supported by Google LLC or Microsoft Corporation. Google, Gmail and Google Contacts are trademarks of Google LLC. Microsoft and Outlook are trademarks of Microsoft Corporation.
Changes to this policy
We may update this policy as the app changes. We will change the date at the top of this page for any material change.
Contact
Questions about this policy or your data? Contact us at info@gcaltools.com, or by post at GCalTools (GERSTENBERG), 56 Raymond Comboul, 06000 Nice, France.