• Account: your email address, display name, sign-in method (email and password, Sign in with Apple or Google), a user ID and the date you joined. Used to create and secure your account, verify your email and reset your password.
• Preferences: language, appearance, reminder settings and conversation memory settings. Used to run the app the way you set it.
• Journal and mood: journal entries, mood check-ins, tags and activity notes such as gratitude or worry entries. Stored in your account so they sync between your devices and power your insights and streaks.
• Journal voice notes: audio you record in the journal stays only on the device that recorded it and is never uploaded. Your account keeps only a reference to the file, so voice notes do not sync to other devices. They may be included in your device backups.
• Conversations: what you say or type in Talk It Out and My Voice, the AI's replies, and after each session a full transcript and an AI-generated summary (summary, key themes, emotional state and progress note). Used to run the conversation and, when Conversation Memory is on, to let later sessions remember what matters to you.
• My Voice: a voice sample you record (10 to 60 seconds), your session bookings, your device time zone for scheduling and booking emails, and your purchased session balance. Used to create your synthetic voice and to schedule and bill sessions.
• Voice minutes and trials: your subscription plan, the voice minutes used and left in the current period, the start and end times of each spoken session, and whether you have used the free trials. Kept on our servers so limits are applied fairly and cannot be changed from the device.
• Approximate location (optional): if you allow it, the app checks your approximate location for up to ten seconds each time it opens and keeps only the resulting country code on your device for one day. Used solely to show the crisis line and emergency number for the country you are in. It is never uploaded.
• Usage analytics: which features you use and technical events, collected through Tenjin. This includes a device identifier (the identifier for vendor), your IP address, device model, operating system, app version and language. It never includes journal, mood, conversation or voice content, your name or your email. Used to understand which features help people and to measure where installs come from.
• Purchases: the App Store transaction ID and product of subscriptions and My Voice session packs, so minutes and sessions are credited once. Apple handles payment and we never receive your card details.
• Technical logs: our servers record your user ID, request timings and errors to keep the service reliable. If a request fails, a log may temporarily include a fragment of the affected message.

We do not collect your birth date, precise location, contacts, photos, health records from other apps, advertising identifiers or crash reports, and we do not use Face ID or the camera.

• OpenAI (USA) generates AI replies and transcribes your speech. Your messages, recent conversation history and memory summaries reach OpenAI through our servers, and live voice audio streams directly from your device during voice sessions. Under OpenAI's API data policy, this data is not used to train OpenAI's models and may be kept by OpenAI for up to 30 days to detect abuse before it is deleted.
• Google Firebase (Google LLC, USA) hosts your account, database, voice samples and our server functions.
• Our own speech server (Chatterbox, hosted on Google Cloud) turns AI replies into your synthetic voice. During a session it receives your voice sample and the reply text, keeps a temporary copy of the sample until the server shuts down, and does not log the text.
• Tenjin (Tenjin, Inc., USA) receives the usage analytics described above.
• Apple provides sign-in, payments, local notifications and the location service that converts your position into a country.

These providers act on our instructions and may process data in the United States and other countries. We do not sell your personal data and never share it with advertisers or data brokers.

The app compares what you say with a list of crisis-related words on your device. If it finds a match, the AI is instructed to point you to crisis resources, and OpenAI's safety systems may end a voice session; the app then shows local crisis numbers. Crisis checks are not recorded on our servers.

• Account, journal and mood data: until you delete them or your account.
• Conversation transcripts and summaries: 30 days after each session; the app removes expired ones the next time it loads your account. Turn off 'Save conversation history' to stop new transcripts and summaries from being saved.
• Voice samples: until you delete your voice or your account.
• Session bookings and purchase records: kept after account deletion for bookkeeping and to prevent misuse, without your name or email.
• Server logs: a limited period set by our hosting provider.
• Country code from location: one day on your device.

Data travels over encrypted connections (TLS) and is stored encrypted at rest by Google. Access rules ensure only your signed-in session can read or write your account data. On your device, files are protected by iOS encryption while the device is locked, and locally stored exercise data is encrypted with a key kept in the device Keychain.

• Delete: remove your account and personal data from Profile at any time. This deletes your profile, journal, moods, conversations, summaries and voice samples, and unlinks your Apple sign-in.
• Conversation memory: turn saving off, or delete individual summaries, in Profile > Conversation Memory.
• Location and notifications: change permissions at any time in iOS Settings.
• Copy of your data: email privacy@calmian.app and we will send you a copy of the data we hold.

Depending on where you live, you may also have the right to correct or restrict processing, to object, to data portability and to complain to a data protection authority. Contact us and we will help.

Calmian is for adults only. It is not directed at anyone under 18 and we do not knowingly collect their data. If you believe a person under 18 has an account, contact us and we will delete it.

We may update this policy. The date at the top shows the latest version, and we will tell you in the app about significant changes.

privacy@calmian.app