Privacy Policy

Privacy Policy

Last updated: July 31, 2026

FleckLabs ("we", "us", or "our") operates the FleckCal calendar and event management application (the "App"). This Privacy Policy explains how we collect, use, share, and protect your data when you use the App. By using the App, you agree to the practices described in this policy.

1. Data We Collect

Information you provide:

  • Account information: Name and email address when you register or log in.
  • Event data: Event titles, descriptions, dates, times, locations, and any notes you create.
  • Invitee data: Names, phone numbers, and email addresses of people you invite to events.
  • Contact data: Names, phone numbers, email addresses, and notes you save in your contacts list.

Calendar data:

When you connect your Google Calendar or Microsoft Outlook calendar, we access your calendar events to display and sync them within the App. We only access event data (title, time, location, description) and do not access or store your calendar credentials.

Usage data:

We may automatically collect information about how you interact with the App, including device type, browser type, and usage patterns, to improve the App's functionality.

2. Device Permissions and iOS Access

FleckCal is a calendar and productivity app. To provide its core features, the App may request the following device permissions on iOS. Each permission is used only for the specific purpose described below:

  • Notifications: Used to send you reminders and alerts about your upcoming events, such as a notification that an event is about to start. We do not use notifications for advertising.
  • Calendar (via webcal subscription): FleckCal generates a personal webcal feed URL that you can subscribe to in Apple Calendar so your FleckCal events appear there. This uses iOS's built-in calendar subscription feature — FleckCal does not directly read or modify your on-device Apple Calendar data.

FleckCal does not request and does not access: Camera, Microphone, Photo Library, Contacts, Location, HealthKit, Face ID, Bluetooth, HomeKit, Motion, or Siri. The App does not use HealthKit and does not collect health or fitness data.

When you connect a third-party calendar (Google Calendar or Microsoft Outlook), the connection is made through secure OAuth 2.0 authorization in your browser — the App never reads your device's local calendar database and never stores your calendar account passwords.

3. How We Use Your Data

  • To create, manage, and display your events and calendar.
  • To send event invitations to your invitees via SMS, WhatsApp, or email on your behalf.
  • To sync events between the App and your connected Google or Outlook calendars.
  • To generate meeting links (Google Meet or Microsoft Teams) for your events.
  • To provide RSVP tracking and invitee management.
  • To maintain and improve the App's features and performance.
  • To communicate with you about your account and the App.

AI-Powered Features:

FleckCal uses third-party AI services to power features such as smart scheduling assistance, schedule insights and suggestions, email summaries and smart replies, and weather lookup.

How we collect this data: We collect the data described below directly from the events, tasks, and emails you have already created or connected within the App. It is gathered at the moment you use an AI feature and is sent only to process that specific request.

What data is sent: Depending on the feature, this may include your event titles, descriptions, dates, times, locations, task names, email subjects and body text, and your timezone. Your account password is never sent to the AI service.

Who it is sent to: Your data is transmitted to Base44, Inc., the platform that hosts FleckCal, which sends it to one of the following third-party AI model providers to generate your AI response:

How the data is used: The AI providers use the transmitted data solely to generate the AI response returned to you (for example, a suggested schedule, a summary, or a smart reply). Your data is not used by these providers to train their AI models.

Permission: The first time you use an AI feature, the App shows a clear in-app disclosure identifying what data is sent and who it is sent to, and asks for your explicit permission before sending any data to the AI service. You can revoke this permission at any time in Settings → AI Features. When permission is revoked, no data is sent to the AI service and AI features are disabled.

Data protection: Each AI provider listed above is contractually obligated to provide the same or equal protection of your data as described in this Privacy Policy, and to process your data only for the purpose of generating your AI response.

4. How We Share Your Data

We do not sell your personal data. We share data only in the following circumstances:

  • Calendar providers: When you sync events, data is shared with Google Calendar or Microsoft Outlook as needed to create or update events on your calendar.
  • Messaging providers: When you send an invite, the invitee's phone number or email and your event details are sent to the applicable messaging service (SMS, WhatsApp, or email) to deliver the invitation.
  • Invitees: Information you include in event invitations (title, date, location, meeting link) is shared with the people you invite.
  • Service providers: We use third-party infrastructure and API providers (including hosting, authentication, and data storage) that process data on our behalf under appropriate data protection agreements.
  • Legal compliance: We may disclose data if required by law, court order, or to protect our rights and safety.

5. WhatsApp Data Usage

If you use the WhatsApp invite feature, we use the WhatsApp Business API to send invitation messages on your behalf. Phone numbers and message content are transmitted to Meta Platforms, Inc. for delivery. We do not use WhatsApp data for advertising or marketing purposes. Message content is limited to the event invitation details you choose to send.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the App's services. Event data, invitee data, and contact data are stored until you delete them within the App or delete your account. Calendar sync data is removed when you disconnect a calendar.

7. Your Rights and Data Deletion

You have the following rights regarding your data:

  • Access: You can view your data within the App at any time.
  • Deletion: You can delete individual events, invitees, and contacts at any time from within the App.
  • Account deletion: You can request full deletion of your account and all associated data by contacting us at the email below or by using the in-app account deletion option in Settings. We will process deletion requests within 30 days.
  • Data portability: You may request an export of your data in a machine-readable format.
  • Opt-out: Invitees who receive invitations via WhatsApp or SMS can opt out of future messages by replying "STOP" or contacting us directly.

8. Data Security

We use industry-standard security measures to protect your data, including encrypted data transmission (HTTPS), secure authentication, and access controls. Calendar and messaging integrations use OAuth 2.0 authorization — we never store your calendar or messaging passwords. While we strive to protect your data, no method of transmission or storage is completely secure.

9. Third-Party Services

The App integrates with the following third-party services, each governed by their own privacy policies:

10. Children's Privacy

The App is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the App and updating the "Last updated" date above. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights (including account deletion), please contact us at:

FleckLabs Support
support@flecklabs.com