Privacy Policy

Last updated: January 8, 2026

At PalmLab AI LLC (“Company”, “We”, “Us”, or “Our”), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, and protect your information when you use Calendor, our AI-powered calendar and task management application (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

Account Information

When you create an account, we collect:

Email address
User ID
Authentication credentials (encrypted)
Profile information you choose to provide (name, avatar)

Calendar and Task Data

To provide the Service, we collect and store:

Calendar events you create (titles, descriptions, times, locations)
Tasks and reminders
Notes and associated metadata
Recurring event patterns

AI Conversation Data

To provide intelligent assistance, we collect:

Chat messages with the AI assistant
AI-generated responses and suggestions
Context from your calendar for relevant recommendations

Device and Usage Information

We automatically collect:

Device type and operating system
App version
Usage patterns and feature interactions
Error logs and crash reports (anonymized)
Push notification tokens

Location Data

If you grant permission, we may collect:

Location for event suggestions and travel time estimates
Location-based reminders

2. How We Use Your Information

We use your information to:

Provide the Service: Create and manage your calendar, tasks, and reminders
Power AI Features: Generate intelligent suggestions, natural language processing, and personalized recommendations
Send Notifications: Event reminders, task due dates, and important updates
Improve the Service: Analyze usage patterns to enhance features and fix issues
Ensure Security: Protect your account and detect fraudulent activity
Communicate with You: Respond to support requests and send service updates

We do not sell, rent, or trade your personal information.

We may share your information only in these circumstances:

Service Providers: With trusted third parties who help operate our Service (cloud hosting, analytics), under strict confidentiality agreements
Legal Requirements: When required by law, court order, or government request
Safety: To protect the rights, safety, or property of our users or the public
Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
With Your Consent: For any other purpose with your explicit permission

Third-Party Services We Use

Supabase: Authentication and data storage (US-based, SOC 2 compliant)
OpenAI: AI processing for the assistant (data not used for training)
Apple Push Notification Service: Delivering notifications to your device
Google Places API: Location search and suggestions

All third-party service providers are contractually obligated to provide the same or greater level of data protection as described in this Privacy Policy.

4. Data Security

We implement industry-standard security measures:

Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
Authentication: Secure token-based authentication with session management
Access Controls: Strict internal access controls and audit logging
Regular Audits: Security assessments and vulnerability testing
Secure Infrastructure: Cloud infrastructure with automatic backups

5. Data Retention

Active Accounts: We retain your data while your account is active
Deleted Accounts: After account deletion, data is permanently removed within 30 days
Backup Retention: Encrypted backups may persist for up to 90 days for disaster recovery
Anonymized Data: Aggregated, anonymized usage data may be retained indefinitely

6. Your Rights and Choices

You have the right to:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Delete your account and associated data
Export: Download your calendar and task data
Opt-Out: Disable AI features or marketing communications
Notification Control: Manage push notification preferences

To exercise these rights, contact us at privacy@palmlab.ai or use the in-app settings.

Account Deletion

You can delete your account at any time through the app:

Go to Profile → Settings → Account
Tap “Delete Account”
Confirm deletion

Your account will be marked for deletion immediately and permanently removed within 30 days. You can recover your account by signing back in within this period.

7. AI and Machine Learning

Our AI assistant:

Processes your calendar and conversation data to provide personalized assistance
Does not use your personal data to train general AI models
Stores conversation history to maintain context within your account only
Can be disabled in settings if you prefer not to use AI features

8. Children’s Privacy

The Service is rated 4+ and is suitable for all ages. For users under 13, we recommend parental guidance. We do not knowingly collect personal information from children under 13 without parental consent. If we discover such data has been collected without proper consent, we will delete it promptly.

9. International Data Transfers

Your data may be transferred to and processed in the United States, where our servers are located. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. California Privacy Rights (CCPA)

California residents have additional rights:

Right to know what personal information is collected
Right to request deletion of personal information
Right to opt-out of the sale of personal information (we do not sell your data)
Right to non-discrimination for exercising privacy rights

If you are in the European Economic Area, you have rights under GDPR including:

Right to access your data
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object to processing

For GDPR-related requests, contact our Data Protection Officer at privacy@palmlab.ai.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Posting the new policy on this page
Updating the “Last updated” date
Sending an in-app notification or email for material changes

We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

Email: privacy@palmlab.ai
Website: https://palmlab.ai/#contact
Address: 2108 N St Ste N, Sacramento, CA 95816, USA

For data protection inquiries in the EU, contact our Data Protection Officer at the email above.