Privacy Policy

1. About This Policy

Your events and tasks are personal. We aim to collect only what we need to run the Service and to process information on your device whenever we can. This policy also serves as our notice at collection under U.S. state privacy laws.

2. Information We Collect

Account information

• Your email address, or the phone number you use for SMS verification
• Your password, which is stored in encrypted form by our authentication provider; we cannot see it
• Your display name and profile photo
• An internal user ID that identifies you within the Service

Content you add

• Events (title, date and time, all-day setting, location, notes, participants, repeat settings, and reminder settings)
• Tasks (name, description, due date, importance, completion status, location, and reminder settings) and lists
• Calendar and member group settings, such as names and colors
• Comments on events
• Display and notification preferences

Sharing and connections

• The Shared Spaces you belong to, your permissions, and when you joined
• Invitation links you create and users you connect with through invitations
• Channels you follow
• A history of changes to events (used to show members of shared calendars who changed what and when)

Location

• If you set a location on a task and turn on location-based reminders, the app uses your device's location, with your permission, including when the app is not in use. Arrival and departure are detected on your device, and we do not send your current location to our servers or store it.
• When you search for a place, we may send a location near you to the place search provider so that nearby results appear first (only if you have allowed location access). This location is used only to return results and is not stored.
• The names, addresses, and coordinates of places you save to events or tasks are stored as part of your content.

Device and notification information

• Push notification tokens for your devices
• Operating system and version, app version, language, and time zone

Usage and log information

• Server access times, IP addresses, and error logs
• Daily usage counts for features with limits, such as the AI assistant and place search

Purchase information

• Your plan, purchase, renewal, and cancellation status, and expiration date
• Payment card details are handled by the Apple App Store or Google Play. We never receive them.

Advertising information

• When ads are shown on the free plan, our advertising partner collects device identifiers, device information, IP address, and ad impressions and clicks. See Section 5.

Connected AI services

• The name of each AI service you connect, the permissions you grant, and when you connected it
• Records of actions taken by connected AI services (time, type of action, affected calendars or lists, number of items, and a one-way hashed form of the IP address). We do not record the keywords used in searches.

Support requests

• Your name, contact details, and the content of your message when you contact us

The app does not include analytics tools that track how you use it. Our website does not use cookies for analytics or advertising.

3. How We Use Information

We use information to:

1. verify your identity, sign you in, and manage your account;
2. provide the Service, including storing, sharing, and syncing events and tasks and showing them in widgets;
3. send push notifications, such as event and task reminders, your daily agenda, and updates and comments in shared calendars;
4. provide the AI assistant, place search, and integrations with Third-Party Services;
5. check your subscription status and provide the features of your plan;
6. show ads on the free plan;
7. enforce usage limits and prevent, detect, and investigate fraud, abuse, and violations of our Terms;
8. troubleshoot problems, improve quality, and develop new features;
9. respond to your requests and send important notices, such as changes to our Terms or the end of the Service; and
10. comply with legal obligations.

We do not use your events, tasks, or other content to build advertising profiles.

4. How We Disclose Information

Service providers

We use the following providers to operate the Service. They receive information only as needed for the purposes below.

Services you choose to connect

• Google Calendar: when the Service writes events to your Google Calendar, event details (title, time, location, notes, and so on) are sent directly from your device to Google. The access credentials for the connection are stored on your device, not on our servers. See also Section 11.
• Third-party AI services: a connected AI service receives events, tasks, calendars, and lists within the permissions you grant, when it requests them. The AI service's own privacy policy governs what happens next.

Other users

• Members of a Shared Space can see your display name, profile photo, the events, tasks, and comments you add to it, and your change history in it.
• Anyone with an invitation link or invitation QR code can join the related Shared Space.
• Following a Channel does not reveal your display name or account information to the Channel Operator.

Other disclosures

• To comply with law, legal process, or lawful requests from public authorities
• To protect the rights, safety, or property of you, other users, us, or the public
• In connection with a merger, acquisition, financing, or sale of all or part of our business
• With your consent or at your direction

5. Advertising

1. On the free plan, the app shows ads from Google AdMob. AdMob may use device identifiers and other information to show ads, including ads personalized based on activity across apps and websites, and to measure ad performance.
2. On iPhone, we do not ask for App Tracking Transparency permission, so the app does not access your device's advertising identifier (IDFA).
3. We do not sell your personal information for money. However, allowing our advertising partner to collect device identifiers for personalized ads may be considered "selling," "sharing," or "targeted advertising" under some U.S. state laws. You can opt out as described in Section 10.
4. Paid plans do not show ads.

6. Information That Stays on Your Device

The following is processed or stored on your device and is not sent to our servers:

• Photos and camera: reading text from photos you take or choose to enter events is done on your device. The photos themselves are not sent. If you use the extracted text with the AI assistant, that text is sent as described in Section 4.
• Voice: voice input is converted to text by your operating system's speech recognition. We never receive your voice. Depending on your device settings, Apple or Google may process the audio on their servers.
• Device calendars: reading and writing events in Apple Calendar and other calendars on your device happens on your device.
• Current location: location-based task reminders are triggered on your device (see Section 2 for place search).
• Widgets: events and tasks shown in home screen widgets are stored in an area of your device reserved for the app.

7. Data Retention and Deletion

1. We keep information needed to provide the Service for as long as your account exists.
2. You can delete your account at any time from the app's settings. When you do, your account information, events, tasks, comments, profile photo, push tokens, and connections to Third-Party Services are promptly deleted. As described in our Terms, events and tasks you added to Shared Spaces with other members remain.
3. Records of actions taken by connected AI services are automatically deleted 90 days after they are recorded. They are kept for that period even after you delete your account, to help investigate abuse.
4. Server access logs and error logs are kept only as long as needed to troubleshoot problems and prevent abuse, and are then deleted.
5. Information stored on your device is removed when you delete the app.

8. Security

We use reasonable safeguards to protect information, including encryption in transit (HTTPS), database access rules that allow only you and the people you share with to read and write your data, restricted administrator access, and limited permissions, expiring access tokens, and usage limits for connected AI services. No method of transmission or storage is completely secure, however.

9. Your Choices

• Notifications: turn notifications off in the app's settings or your device settings.
• Device permissions: you can withdraw permission for location, camera, photos, microphone, and calendars at any time in your device settings. Related features will stop working.
• Connections: disconnect Google Calendar or third-party AI services at any time in the app's settings.
• Ads: reset or delete your advertising ID, or opt out of ad personalization, in your device settings. Paid plans do not show ads.
• Your content: view, edit, and delete your content in the app at any time.
• Do Not Track: our website does not track you across sites, so it does not respond differently to browser Do Not Track signals.

10. U.S. State Privacy Rights

Depending on where you live (for example, California, Colorado, Connecticut, Virginia, and other states with consumer privacy laws), you may have the rights described below. We extend these rights to all U.S. users, regardless of whether a particular law applies to us.

Categories of personal information

In the past 12 months, we have collected the following categories of personal information, from you, your device, other users (for shared content), the App Stores (for purchases), and services you connect:

We use and disclose these categories for the purposes in Section 3 and keep them for the periods in Section 7. The only category that may be "sold" or "shared" for targeted advertising is identifiers and internet activity collected by our advertising partner, as described in Section 5. We do not knowingly sell or share the personal information of consumers under 16.

Your rights

• Know and access: request the categories and specific pieces of personal information we hold about you.
• Portability: receive a copy of your personal information in a portable format.
• Correct: ask us to correct inaccurate information. You can also edit most information in the app.
• Delete: ask us to delete your information. You can also delete your account in the app.
• Opt out: opt out of the "sale" or "sharing" of your personal information and of targeted advertising. You can use your device's ad settings as described in Section 9, subscribe to a plan without ads, or contact us.
• Non-discrimination: we will not discriminate against you for exercising your rights.

How to make a request

1. Email us at the address in Section 15 from the email address or phone number linked to your account, or include it in your request. We will verify your identity before responding.
2. You may use an authorized agent. We may ask the agent for proof of authorization and ask you to verify your identity directly.
3. We will respond within 45 days, or tell you if we need more time as permitted by law.
4. If we deny your request, you may appeal by replying to our response with "Appeal" in the subject line. If you are not satisfied with the outcome of your appeal, you may contact your state attorney general.

California "Shine the Light"

We do not disclose personal information to third parties for their own direct marketing purposes.

11. Google API Services

If you connect Google Calendar, the app accesses your Google Calendar data only to show your Google events in the app and to write events from the Service to your Google Calendar, at your direction. This data is processed on your device and is not sent to our servers. OneCircle's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

12. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

13. International Data Transfers

We are based in Japan, and our service providers are located in the United States and other countries. Your information may be processed in Japan, the United States, and other countries whose data protection laws may differ from those of your state. We take reasonable steps to ensure that our providers protect your information.

14. Changes to This Policy

We may update this policy, for example to reflect changes in the Service or the law. We will post the updated policy with a new "Last updated" date and notify you in the Service of material changes. Where required by law, we will ask for your consent.

15. Contact Us

For questions about this policy or to exercise your rights, contact us: