• Account and preferences: stored in your Calmian account (Google Firebase). Shared with no one. Kept until you delete your account.
• Journal text, mood check-ins and activity notes: stored in your account and synced to your devices. Shared with no one. Kept until you delete them or your account.
• Journal voice notes: stored only on the device that recorded them. Never uploaded. Removed when you delete the entry's audio, the app or your account on that device.
• Conversation audio and text: sent to OpenAI to transcribe and reply. Not stored by Calmian during the session. OpenAI may keep it for up to 30 days for abuse monitoring under its API data policy.
• Conversation transcripts and AI summaries: stored in your account while Conversation Memory is on. Summaries are generated by OpenAI. Kept for 30 days per session, then removed.
• My Voice sample: stored in your account's cloud storage (Firebase Cloud Storage) and sent to our speech server at the start of each session, where a temporary copy is kept until the server shuts down. Kept until you delete your voice or your account.
• My Voice bookings and session balance, Talk It Out voice minutes and trial use: stored in your account and changed only by our servers. Booking and purchase records are kept after deletion for bookkeeping, without your name or email.
• Approximate location: converted into a country code on your device with Apple's location service. Only the country code is kept, on the device, for one day. Never uploaded.
• Usage analytics: feature usage events, a device identifier (identifier for vendor), IP address, device and app version, sent to Tenjin. No content, no name, no email. Retained by Tenjin under its policy.
• Reminders: scheduled locally on your device. No push tokens are collected.
• Purchases: processed by Apple. We store the transaction ID and product of subscriptions and session packs to credit minutes and sessions once.
• Server logs: user ID, timings and errors, kept for a limited period on Google Cloud.

• Birth date or age
• Precise location, contacts, photos or camera images
• Advertising identifiers or cross-app tracking
• Crash reports
• Any biometric data other than the voice sample you choose to record for My Voice

Our servers run on Google Cloud and Firebase. OpenAI and Tenjin process data in the United States. Apple handles sign-in, payments and the location lookup. Your data may therefore be transferred outside your country under the safeguards these providers offer.

• TLS encryption for every connection
• Encryption at rest for all cloud data
• Per-account access rules on the database and storage
• AI service keys held only on our servers, never inside the app
• iOS file protection on the device and a local encryption key stored in the Keychain

• Turn Conversation Memory off, or delete summaries, in Profile > Conversation Memory
• Delete your voice in My Voice
• Delete your account and personal data in Profile
• Change location and notification permissions in iOS Settings
• Request a copy of your data at privacy@calmian.app

We choose our providers carefully, but we do not control them. Beyond what the law requires, we are not responsible for outages, policy changes or security incidents at OpenAI, Google, Tenjin or Apple, and their own terms govern the data they process.

For questions, contact: data@calmian.app