Privacy Policy

Who we are

KalendarKid (kalendarkid.com) is operated by Outcome.work. You can reach us at kidsync-support@outcome.work.

What we collect and why

• Google account information (name, email, profile photo) — used to identify your account and display your name in the app.
• Google Calendar access — we request two granular scopes: calendar.events (create and view events) and calendar.calendarlist.readonly (see your list of calendars). We use them to list your calendars (so you can choose which one to add events to), create events you have approved, check for duplicates before creating them, and verify events KalendarKid created. We never modify or delete events KalendarKid did not create, and we cannot delete or share your calendars.
• Uploaded files (PDFs and images) — used to extract calendar events. Files are stored temporarily and deleted automatically after 7 days (or sooner if our storage limit is reached). We do not use your files to train AI models.
• Extracted event data — the structured event list we extract from your documents is stored in our database so you can view your upload history. This data persists beyond the 7-day file window.

Google user data — access, use, sharing, and retention

• What we access: your Google profile (name, email, photo), the names and IDs of your calendars, and — on calendars you choose — event titles, dates, and times, read only to detect duplicates and verify events KalendarKid created.
• How we use it:solely to provide KalendarKid's user-facing features — signing you in, letting you pick a target calendar, creating the events you approve, warning you about duplicates, and alerting you if a KalendarKid-created event changes. We do not use Google user data for advertising or any unrelated purpose.
• What we share: Google user data is never sold and never shared with third parties, with one class of exception: infrastructure processors (Supabase for our database, Vercel for hosting) that store or transmit it on our behalf under their data processing agreements. Google user data is never sent to Anthropic or any other AI service. Only the documents you upload or forward are processed by AI.
• How it's protected: all data is encrypted in transit (TLS) and at rest (our database and file storage provider, Supabase, encrypts data at rest). Google OAuth tokens are stored server-side only and are never exposed to the browser or to third parties.
• Retention and deletion:Google user data is kept only while your account exists. Revoke KalendarKid's access at any time via Google Account Permissions — this immediately invalidates our tokens. To delete your account and all associated data (profile, tokens, event records), email kidsync-support@outcome.work and we will complete deletion within 30 days.

Limited Use compliance

KalendarKid's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. Google user data is not used to develop, improve, or train generalized AI or machine-learning models.

File retention

Uploaded files (PDFs and images) are automatically deleted 7 days after upload, or sooner if total stored files exceed our capacity threshold. Extracted event records (the text data we pull from your documents) are kept until you delete your account.

AI processing

We use the Anthropic Claude API to read your uploaded documents and extract event information. Your documents are sent to Anthropic for processing and are subject to Anthropic's Privacy Policy. Anthropic does not use API inputs to train their models.

Data sharing

We do not sell your data. We share data only with the service providers necessary to operate KalendarKid: Supabase (database and file storage), Vercel (hosting), Anthropic (AI processing), and Google (authentication and calendar). Each of these providers is bound by their own privacy policies and data processing agreements.

Children's data

KalendarKid is intended for use by parents and guardians (adults). Documents you upload may contain information about your children. We treat all uploaded content as sensitive and apply the retention and security practices described in this policy. KalendarKid is not directed at children under 13.

Your rights

You can revoke KalendarKid's access to your Google account at any time via Google Account Permissions. To delete your KalendarKid account and all associated data, email us at kidsync-support@outcome.work.

Changes to this policy

We'll update the "Last updated" date above if this policy changes. Material changes will be communicated via the app.