Privacy Policy

Last updated: 2026-07-25

This Privacy Policy describes how ClaroCal (the “Service”), operated by Victoria Garland Creative Inc. (“we”/“us”), collects, uses, and protects your information when you use the Service available on the clarocal.com domain and related subdomains, and the ClaroCal for iPhone app.

Information we collect

• Account information: email address, name you provide, and basic account settings.
• Calendar and task metadata: identifiers, titles, dates, durations, and calendar associations required to mirror tasks to your calendar. We do not store your external provider passwords. Google access is via OAuth with scopes you grant.

Google user data, and why we request it

When you connect Google Calendar, ClaroCal requests these scopes and uses them only for the purposes below:

• https://www.googleapis.com/auth/calendar.events: read your existing calendar events and write your ClaroCal tasks back to your calendar as time blocks. This is what powers two-way sync, so a change made in either place is reflected in the other.
• https://www.googleapis.com/auth/calendar.events.freebusy: see which times you are already booked, without reading the contents of those events, so that ClaroCal does not schedule a task over an existing commitment.
• openid, email, and profile: create your ClaroCal account, identify you, and sign you in.

We use Google user data only to provide the scheduling and sync features described above. We do not sell it, we do not use it for advertising, and we do not use it to train AI or machine learning models. We share it only with the processors listed below, or where required by law. ClaroCal’s access to, and use of, information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke ClaroCal’s access at any time from your Google account permissions page, or by disconnecting your calendar in ClaroCal settings.

• Usage metrics: operation names, durations, success/failure, and timestamps to help us operate the Service reliably.

• Billing information: subscription and payment status is processed by Stripe; we do not store full payment details on our servers.

• Cookies: session and CSRF cookies for authentication and security. We also set two cookies of our own that carry no personal information and are never used for advertising or shared with anyone:

  • claro_ab (60 days): remembers which version of our marketing pages you were shown, so the page does not change appearance between visits and so we can tell which version people find clearer. It holds a design variant name, nothing about you.
  • claro_ref (90 days): remembers that you arrived through a referral or affiliate link, so the person who recommended ClaroCal is credited if you later create an account. It holds only that referral code.
  • claro_day (about 30 minutes): set only when you press “Keep this day” in the planner on our site. It holds the task list you typed there, so your tasks are waiting for you when your account is created. It is deleted the moment your first plan is made, and it is never sent to anyone else. The planner itself runs entirely in your browser: until you press that button, nothing you type into it is stored, sent, or seen by us at all.

  Both are set on clarocal.com and app.clarocal.com. You can clear or block them in your browser at any time; nothing on the site stops working if you do.

• Website analytics: our marketing pages at clarocal.com use Google Analytics 4 to count page views and to record which call-to-action buttons people click. It sets Google’s _ga and _ga_* cookies (up to 2 years), which hold a randomly generated identifier for the browser. We use it to understand which pages help people plan their day. We do not use it for advertising, we do not send it your name, email address, calendar data, or task data, and we have not enabled Google Signals or ads personalisation.

  If you are in the European Economic Area, the United Kingdom, or Switzerland, we ask before setting these cookies, and until you accept, Google receives only a cookieless measurement signal. Everywhere else the cookies are set by default and you can opt out with the Google Analytics opt-out add-on, your browser’s cookie controls, or any tracker blocker. The signed-in app at app.clarocal.com carries no Google Analytics at all.

How we use information

• Provide and improve the Service, including sync and mirroring.
• Authenticate you and maintain secure sessions.
• Operate subscriptions and billing (via Stripe).
• Monitor reliability, performance, and abuse.
• Communicate with you about the Service.

SMS and text messaging

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Phone numbers, message contents, and text-message consent are never sold, rented, or shared for anyone else’s marketing. The only parties that see this information are the service providers listed under Processors and sharing below, who deliver and interpret the messages on our behalf and may not use the data for their own purposes.

Linking a phone number is optional, and the Service works fully without one. If you choose to link one, you are opting in to receive text messages from ClaroCal daily planning alerts, operated by Victoria Garland Creative Inc.

• How we collect consent: only inside your own signed-in account, at Settings, then Phone, where you enter your own mobile number and tick a consent box that is never pre-ticked. We then text a one-time code you must enter before any other message is sent. We never obtain numbers or consent from any other source. Our SMS opt-in page shows exactly what that screen says.
• What we send: a one-time 6-digit verification code when you link your number, your morning briefing, and replies to messages you send us.
• Message frequency: message frequency varies and depends on your settings and how often you text us. Morning briefings are at most once per day, and you can set your proactivity level to “quiet” or unlink your number at any time.
• Cost: message and data rates may apply. ClaroCal does not charge for text messages, but your mobile carrier may.
• Opting out: reply STOP to any message to stop all texts, and START to resubscribe. Reply HELP for support information, or MENU for the list of things you can do by text. You can also unlink your number in ClaroCal settings.
• Content: messages you text us are processed to understand your request, for example to add a task or read back your day.

We do not send marketing or promotional text messages. Your phone number is used only to operate the messaging features described above.

Processors and sharing

• Google: calendar data access and sync via OAuth scopes you approve.
• Google Analytics: page-view and call-to-action measurement on our marketing pages at clarocal.com only. It never receives your calendar data, task data, or account details, and it is not present in the signed-in app.
• Stripe: subscription management and payment processing.
• Twilio: delivery of text messages to and from your phone number, where you have linked one.
• OpenAI: interpreting the text messages you send us so we can act on them. Your messages are not used to train models.

We do not sell your personal information. We share data only with processors necessary to provide the Service, or when required by law. None of these providers is permitted to use your information, including your mobile number or message contents, for their own marketing or promotional purposes.

Text messaging originator opt-in data and consent are not shared with any third parties, excluding aggregators and providers of the text message services. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. The processors named above receive only what is needed to deliver or interpret a message you asked for, act solely on our instructions, and may not reuse, resell, or market from it. The full messaging disclosures are under SMS and text messaging above.

Google Workspace data and AI/ML

ClaroCal’s use of information received from Google Workspace APIs (including the Google Calendar API) complies with the Google API Services User Data Policy, including its Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements.

ClaroCal does not use Google Workspace API data, whether raw, aggregated, or derived, to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models, including any foundational or large language models. Any AI-assisted feature processes your data only to produce a result you have requested in the moment (for example, interpreting a text message you send us so we can add a task, or drafting your daily briefing), and the data is not retained or used to train any model. We do not transfer Google user data to third parties to build or improve such models. Humans do not read your Google user data except with your affirmative consent (for example, to resolve a support request you file), as needed for security, or to comply with the law.

ClaroCal for iPhone

The iOS app handles data as follows:

• Sign in with Apple: when you choose Sign in with Apple, we receive your name and email address (or Apple’s private relay email if you choose to hide it). We use these only to create and identify your account. We never use a private relay address for advertising or tracking.
• On-device storage: your tasks and daily plan are stored locally on your iPhone (in the app’s private database) so the app works offline. This local copy is removed when you sign out or delete the app.
• Microphone and speech: if you capture a task by voice, speech is transcribed on your device using Apple’s on-device speech recognition. The audio is not uploaded to our servers; only the resulting task text is saved and synced.
• Notifications: if you enable notifications, we store a push token for your device so we can send your daily plan. You can turn notifications off at any time in iOS Settings.
• On-device assistant: the optional on-device AI model runs entirely on your iPhone. Its inputs and outputs do not leave your device.
• No tracking: the app contains no third-party advertising or tracking SDKs and does not use the Advertising Identifier (IDFA). Usage analytics are first-party and used only to operate and improve the app.

You can delete your account and all associated data at any time from the app: Settings > Delete account. This permanently deletes your account (it is not a temporary deactivation).

Data retention

We retain account, subscription, and minimal sync metadata for as long as your account is active. You may request deletion at any time.

Security

We use industry-standard measures to protect your data in transit and at rest. No method of transmission or storage is 100% secure.

Your rights

You may request access to, export of, or deletion of your data. To make a request, email support@victoriagarland.ca from the email associated with your account. We will verify your identity before fulfilling requests.

International transfers

Our processors may store or process data in jurisdictions outside your own. When we transfer data, we do so using appropriate safeguards.

Changes

We may update this policy from time to time. We will post any changes on this page with an updated “Last updated” date.

Contact

For privacy questions, contact Victoria Garland Creative Inc. at support@victoriagarland.ca. Looking for our terms? Read the Terms of Service.