Calmplot Privacy Policy

1. What Calmplot is

Calmplot is a journaling app with an AI coach. You write about your life; we help you reflect, see patterns in different life areas, and choose small next steps.

2. What we collect

We collect:

We only collect data that is needed to run Calmplot, improve it, and manage payments.

3. How we use your data

We use your data to:

• Show you your journal entries, garden, and AI reflections
• Generate AI-based reflections and reviews when you ask for them
• Keep your account secure and manage your subscription
• Understand how people use Calmplot so we can improve it
• Fix bugs and prevent abuse

4. How we use AI and third parties

We use OpenAI as our AI provider. When you request a reflection or weekly review, we send your text and related metadata to their API, receive generated text back, and show it to you in the app.

We choose reputable cloud providers for hosting, databases, and analytics, and we try to minimise the amount of personal data they see.

We'll keep our list of key subprocessors (like hosting and AI providers) up to date and can share it on request or on our website.

Learn more about how we use AI →

5. Legal basis and location

Calmplot is built in South Africa and operated with the principles of POPIA and GDPR in mind: minimal data collection, clear purposes, and your rights to access and delete your data.

We process your data:

• To provide the service you signed up for (contractual necessity)
• With your consent where required (for example, optional communications)
• To improve and protect Calmplot (legitimate interest)

6. How long we keep your data

We keep:

• Your journal entries and AI reflections until you delete them or delete your account.
• Your account data while your account is active.
• Some aggregated analytics that don't identify you personally for longer.

If you delete your account, we will remove your personal entries and account data from our active systems within a reasonable period, except for data we are required to keep for legal or accounting reasons.

7. Your rights and choices

You can:

• View your entries and reflections inside Calmplot.
• Edit or delete individual entries.
• Download a copy of your journal (basic export) from Settings.
• Delete your entire account and data (from inside the app).
• Control how often you write and which AI features you use.

If you believe we have data about you that is incorrect or you want more detailed access beyond what the app provides, you can contact us and we'll try to help in line with applicable laws.

8. Security

We take reasonable steps to protect your data, including:

• Using HTTPS to encrypt data in transit between your device and our servers.
• Using reputable hosting and database providers with encryption at rest.
• Limiting access to production data to a small number of people who need it to operate the service.
• Avoiding logging raw journal content in our system logs.

No online service can be perfectly secure, but we aim to make Calmplot a safe and respectful place for your data.

9. Changes to this policy

We may update this Privacy Policy as Calmplot evolves. When we do, we'll update the "Last updated" date and may notify you in the app or by email for significant changes.