Privacy Policy

1. Information We Collect

CALULU (the “Service”) collects the following information for the purpose of scheduling.

• Account information: The name, email address, and profile image of your Google/Microsoft account
• Calendar information: Collected according to the read scope you select when connecting. In “Free/busy only” mode, we collect only the start/end times of events (free or busy) and never collect event titles, details, or attendees. Even in “Include titles” mode, event details are never shown to other participants.

2. Purpose of Use

The information collected is used solely to calculate common free time across multiple participants, propose candidate dates and times, add confirmed events to your calendar, and send reminder notifications. We never use it for advertising purposes.

3. Sharing, Transfer, and Disclosure of Google User Data

We do not sell Google user data (your Google account information and Google Calendar information). We share, transfer, or disclose it only to the parties listed below, and to no other third parties.

• Other participants in your event: For scheduling purposes, your availability (free/busy status only) and the date and time of confirmed events are shown to participants of the same event. Your event titles, details, and attendee information are never disclosed to other participants.
• Google Cloud (hosting/database provider): As the Service's operating infrastructure, we store account information and encrypted OAuth tokens on Google Cloud (Firestore).
• Brevo (email delivery provider): Processes email addresses and notification text through Brevo in order to send notification emails.
• Disclosure required by law: Only where disclosure is required by law, we may disclose information to public authorities to the extent necessary.

4. Storage and Protection

Data is stored on Google Cloud (Firestore). The OAuth tokens used to access your calendar are encrypted with AES-256-GCM before storage. We do not store the calendar event data itself; it is fetched from the API each time candidates are calculated.

5. Limited Use of Google APIs

CALULU's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Our AI-assisted condition extraction feature processes only text typed by the user; we never send user data obtained from Google APIs to AI models, and we never use such data to develop, improve, or train AI/ML models.

6. Data Retention and Deletion

You can disconnect calendar integration at any time from the settings screen, and saved tokens are deleted when you do. You can also permanently delete your account and all associated data (connected accounts, organized events, and responses) at any time from the settings screen, with the option to export your data beforehand. We retain your data only while your account exists. If you have any questions, please contact us at the address below. You can also revoke this Service's access from your Google Account settings.

7. Contact

Inquiries regarding this policy: kurohune538@gmail.com