Privacy Policy

Operator and contact

Calingoo is operated by NAYDU (Pty) Ltd. Registration number: 2026/813982/07. Business address: 48 HIGHWATER CRESCENT GENAZZANO GENAZZANO KWA-ZULU NATAL 439. Address for service: 48 HIGHWATER CRESCENT GENAZZANO GENAZZANO KWA-ZULU NATAL 439. Place of registration: Republic of South Africa. Information Officer: Savithree Naidu. Contact privacy@calingoo.com for privacy requests or support@calingoo.com for help. Telephone: +27 76 230 0925.

Eligibility and accounts

Calingoo is for adults aged 18 or older. No under-18 or parental-permission route is offered. During onboarding, swipe the day, month and year wheels to select your own date of birth. Choosing Continue confirms that it is your date of birth for the age eligibility check. Your full date of birth is checked only on your device, stays in temporary memory during the flow, and is not saved or sent to Calingoo or Clerk. An adult attestation, policy version and timestamp are stored. This is self-attestation, not independent age verification.

Clerk handles email, name, credentials, verification and sessions. Calingoo links your authenticated identity to your records. Account-access records include your declared country and Terms version, content hash and acceptance timestamp. A country declaration is not proof of physical location.

Required account information enables account features. You choose planning content and optional AI/weather. Without required information, account features cannot operate; declining optional processing leaves that feature unavailable.

Planning and synchronization

Account synchronization processes work patterns, schedules, events, tasks, notes/trash, reminders, preferences, searches, Ask Lingoo history/proposals, notification records and a selected weather location. Private wallpaper files serve as app/calendar backgrounds. Technical records include device/client identifiers, revisions, conflicts, offline queues and deletion metadata.

Device/browser storage retains account copies, offline edits and recovery information. Some interface settings and operating-system reminders stay on-device. Other users cannot browse your private workspace through Calingoo. Free text may contain sensitive information; include only what you want processed.

Ask Lingoo

Ask Lingoo is optional and requires separate in-app permission. Requests pass through Convex to OpenAI. They can include your prompt, up to eight recent chat messages, current time/time zone, and relevant shifts, events, tasks and holidays from your selected 7-, 30-, 90- or 365-day window; seven days is the default. Saved notes and wallpapers are not attached. Relevant weather context is included when needed. Information you type into a prompt can also be processed.

Requests use store:false. This is not Zero Data Retention and does not disable abuse-monitoring logs. OpenAI's standard API controls describe abuse-monitoring logs held for up to 30 days, subject to exceptions and account settings. Withdrawing AI permission stops future requests without erasing history or provider records. Proposals are saved only when you confirm.

Reports and correspondence

When you confirm a reply report, the selected reply, optional explanation, account identifier and reply identifier pass through Convex and Spacemail SMTP to support@calingoo.com. Other messages and separate calendar context are not attached, although the selected reply can contain personal information. Reports are not stored in a separate report-content table. A successful send means SMTP acceptance, not human review. If automated sending is unavailable, contact support directly.

Spacemail/Spaceship processes mail, with inbound filtering by Jellyfish/Namecheap. Filtering may examine content, addresses, links, attachments and metadata. Correspondence and provider mail records are separate from calendar storage.

Weather, holidays and reminders

Weather uses a chosen place or an authorized foreground device-location lookup; background tracking is not used. Coordinates are reduced to two decimal places before saving or requesting MET Norway forecasts through Convex. Shared forecasts are scheduled for cleanup after the 24-hour freshness window.

Public holidays are generated offline using the Python holidays library and served as static Vercel files. Requests do not add account IDs or calendar content, but the host receives ordinary web metadata, including IP address and selected dataset path. Reminders run on-device with operating-system permission. Remote push is not offered at launch.

Purposes and processing grounds

We use information to provide requested account/planning features, sync and recover records, provide optional AI/weather, handle support and rights requests, prevent abuse, secure the service and meet legal duties. Depending on processing and applicable law, the basis is performance of our agreement, specific permission, a legal obligation or a proportionate legitimate interest in operating/protecting the service. Terms acceptance is separate from optional-processing permission.

There is no advertising, in-app analytics SDK, crash-reporting SDK or payment integration at launch. Providers can still keep operational/security records. We do not sell calendar content or use it for targeted advertising.

Providers and overseas processing

Providers are Clerk for authentication; Convex for server functions, database, sync and private files; OpenAI for AI; MET Norway for weather; Vercel for web/static hosting; Spacemail/Spaceship and Jellyfish/Namecheap for mail/filtering.

Providers may process information outside your country, including the United States. Production Convex is in US East; the OpenAI project uses Global residency. Provider agreements, safeguards and applicable legal transfer requirements govern overseas processing. Ask privacy@calingoo.com for relevant transfer information. Provider logs and email records have separate retention periods under their terms, account settings and legal duties. Contact privacy@calingoo.com about your records.

Retention, deletion and backups

We keep content while needed for your active account/service, subject to legal duties. Delete supported items or request account deletion. A verified Clerk deletion event starts bounded cleanup of account-scoped cloud records and private wallpapers. The active-system target is 30 calendar days, sooner where law requires. A minimal receipt/stale-session fence may remain for up to 30 days.

Deletion cannot remotely erase offline device/browser copies, sent email, provider logs or historical backups. Clearing local data does not delete cloud records. Remove legacy recovery snapshots separately in Settings → Data & Privacy. An account-derived marker remains on-device to prevent reassignment/import of old records; it contains no calendar content.

Manual snapshots are owner-operated on a weekly schedule. Convex Free/Starter dashboard snapshots expire after seven days, with at most two stored snapshots. No 28-day archive, daily backup or continuous coverage is promised. Restores remain isolated until later account deletions are reconciled. Automated inactivity deletion is disabled at launch.

Choices, rights and complaints

Applicable rights may include access, correction, deletion, recipient information, restriction/objection, withdrawal of consent and other legal rights. Contact privacy@calingoo.com. We aim to acknowledge within five business days, sooner where required. This is separate from the final response and does not extend a legal deadline. Identity checks must be proportionate; never send passwords or one-time codes.

Self-service account export is unavailable at launch; request access through the privacy contact. If unreachable, contact support for the Information Officer. Complaints may go to South Africa's Information Regulator via POPIAComplaints@inforegulator.org.za, +27 10 023 5200 or inforegulator.org.za, or another competent regulator.

Security and changes

Authenticated access, ownership checks, verified deletion events and service limits protect records. Absolute security cannot be promised. We investigate incidents and issue notices where required. We explain material policy changes and seek renewed permission where required. The displayed version and effective date identify the published policy.