This page is for IT and security teams reviewing a request from an employee who wants to connect their work calendar to Watt. It sets out exactly what Watt accesses, what it does not, and how that access is controlled.
What Watt is
Watt is a time-tracking app. It shows people how they actually spend their hours β work, sleep, exercise, focus and free time β by reading their calendar and wearable data and assembling it into a daily timeline. It is used by the individual employee, for themselves. Watt is not an employee-monitoring product, and it produces no reports for employers.
Watt is built by Watt Labs Inc.
What Watt accesses
When an employee connects a work calendar, Watt requests:
- Calendar events β read and write. Event times, titles and duration, so the employee can see and manage their schedule inside the app.
That is the entire scope of the request. Watt does not request or receive:
- Email or mailbox contents
- Contacts or directory data
- Files, documents or drive contents
- Any other user's data β access is limited to the calendars the employee themselves selects
Within the connected account, the employee chooses which individual calendars Watt may read. Calendars they don't select are never read.
How access is granted and revoked
Access is granted through your provider's standard OAuth consent flow β Google Workspace or Microsoft 365 β using the employee's own credentials. Watt never receives, stores or handles the employee's password.
Access can be withdrawn at any time, by either side:
- The employee can disconnect the account in the app under Senses β Calendars β Disconnect, which removes Watt's access.
- Your administrators can revoke Watt's access centrally from your Google Workspace or Microsoft 365 admin console, exactly as with any other connected application.
How the data is handled
- OAuth access tokens are encrypted at rest.
- Calendar data is used solely to render the employee's own timeline and lifestyle metrics inside their account.
- Watt does not sell personal data, and does not use it for advertising.
- Watt Labs applies HIPAA and GDPR standards to the storage and processing of personal information.
Full details are in our Privacy Policy.
If you'd rather not approve app access
The employee can instead share their work calendar with a personal account and connect that account to Watt, if your policy allows calendar sharing. In that arrangement Watt connects only to the employee's personal account and never to your systems directly. Shared calendars are read-only, so nothing Watt does can modify the work calendar.
Sharing permissions can be limited to free/busy information if you prefer that event titles not leave the organisation.
Questions
We're happy to answer security or procurement questions directly, including anything not covered here. Write to contact@usewatt.com and we'll respond.