CalKok Privacy
Privacy Policy
Effective August 9, 2026
CalKok is an iOS app that helps you create event and reminder suggestions from images or screenshots you choose. Nothing is saved to your calendar or reminders until you review and confirm it. We do not collect your entire photo library or images you have not selected.
1. Overview
We process personal information only as needed to provide and protect CalKok. Before remote AI analysis, we explain that your selected images and OCR text may be sent to CalKok servers and the OpenAI API.
2. Who controls your data
CalKok is operated from the Republic of Korea. The CalKok service operator is the controller responsible for the account, usage, and service information described in this policy. Privacy requests can be sent to [email protected].
The service operator acts as CalKok's designated Privacy Lead, New Zealand Privacy Officer, and Singapore Data Protection Officer (DPO). The business contact for these roles is [email protected].
Where local law requires a representative, additional registration, or public trader contact details, those details are provided through the applicable App Store product page or upon request.
3. Information we process
| Category | Information | Purpose |
|---|---|---|
| Content you select | Images, screenshots, OCR text, and schedule suggestions | Create event and task suggestions |
| Account information | Sign in with Apple identifier, email address, and name | Authenticate your account and associate usage |
| Subscription information | StoreKit transaction identifiers, hashed transaction identifiers, and Pro status | Verify and synchronize Pro access |
| Service information | Request time, request ID, error details, usage count, and number of images | Security, reliability, support, and abuse prevention |
Images you choose may contain information about other people. Submit that information only when you are authorised to do so and it is reasonably necessary for creating your schedule. If you believe another person submitted your information to CalKok, contact us so we can investigate and take appropriate action.
4. Purposes and legal bases
| Purpose | Legal basis where applicable |
|---|---|
| Create event and reminder suggestions and save items you confirm | Performance of our contract with you and your explicit action to submit selected content |
| Send selected images and OCR text for remote AI analysis | Your consent, which you can withhold or withdraw; on-device alternatives remain available where supported |
| Authenticate accounts, verify subscriptions, and provide Pro features | Performance of our contract with you |
| Apply usage limits, secure the service, diagnose failures, and prevent abuse | Our legitimate interests in operating a reliable and secure service |
| Meet tax, accounting, consumer-protection, and lawful-request obligations | Compliance with legal obligations |
5. Retention and deletion
As a rule, CalKok does not store original images or OCR text in its database. Account information, Sign in with Apple connections, cached subscription status, account usage, and subscription synchronization records are retained while your account is active and deleted when your account is deleted.
To prevent account deletion and re-registration from resetting free monthly or Pro monthly credits in the same month, we may retain limited hashed forms of the Apple account identifier and StoreKit original transaction identifier, together with monthly free or Pro usage totals. Original Apple identifiers, email addresses, names, images, and OCR text are deleted when the account is deleted.
OpenAI API content is not used to train OpenAI models unless the API account owner explicitly opts in. Under OpenAI's API data controls, abuse-monitoring logs may retain customer content for up to 30 days by default, unless a longer period is required by law or needed to protect the service. CalKok sends Responses API requests with persistent response storage disabled.
Security and diagnostic logs are retained only for the period reasonably necessary to investigate incidents, maintain reliability, and meet legal obligations. Backup copies may remain until the applicable backup cycle completes.
6. Third-party services
CalKok may use OpenAI, Apple, Cloudflare, Amazon Web Services, and Discord to provide and operate the service. Each provider processes information only as needed for the purpose described below.
| Provider | Purpose | Information processed |
|---|---|---|
| OpenAI | Create schedule suggestions from images and OCR text | Selected images, OCR text, and analysis request information |
| Apple | Sign in with Apple, App Store payment, and subscription verification | Apple user identifier, email, name, transaction identifiers, hashed transaction identifiers, and subscription status |
| Cloudflare | Host the privacy policy, terms, and support pages | Minimal connection information generated when visiting the website |
| Amazon Web Services | Operate the CalKok API, database, backups, and security systems | Account, usage, subscription synchronization, and service log information |
| Discord | Notify operators of service incidents and OpenAI limits or errors | Environment name, error type, status code, request ID, and error summary |
7. International data transfers
CalKok is operated from the Republic of Korea, and service providers may process information in Korea, the United States, or other locations where they operate. This means personal information may be transferred outside your country, including outside Canada, the United Kingdom, or the European Economic Area.
Where required, we use written service-provider terms, data-protection terms, access controls, and other legally recognised safeguards intended to provide protection comparable to the law that applies in your region. We review the purpose, information categories, retention, security, and onward-processing terms before using a provider. You may contact us for information about the safeguards relevant to your region.
8. Your rights and choices
Depending on your location, you may request access, correction, deletion, restriction, objection, or portability, or withdraw consent. You may also complain to your local data-protection authority. We aim to respond to verified privacy requests within 30 days, unless local law permits or requires a different period.
Calendar, Reminders, Photos, and notification permissions can be changed in iOS Settings. You can withdraw remote AI consent in the app and use available on-device processing instead. Pro subscription cancellation and refund requests are managed through your App Store account or Apple Support.
Privacy complaints are reviewed by the Privacy Lead. Please describe the account, request, and concern without emailing screenshots or sensitive content unless we specifically ask for it. We will acknowledge the request, verify identity when necessary, investigate, and explain the outcome or available escalation path.
9. Regional information
Australia
If the Australian Privacy Act applies to CalKok, you may request access to or correction of personal information and submit a privacy complaint using the contact below. We will investigate and respond within a reasonable period. Nothing in this policy limits rights that cannot be excluded under Australian law.
New Zealand
Our Privacy Officer handles access, correction, and privacy complaints under the New Zealand Privacy Act 2020. Personal information processed by overseas service providers remains subject to contractual and operational safeguards, and CalKok remains responsible for providers acting on its behalf. You may raise unresolved concerns with the New Zealand Office of the Privacy Commissioner at privacy.org.nz.
Singapore
Our DPO oversees compliance with Singapore's Personal Data Protection Act, including consent, access and correction, protection, retention, complaints, and notifiable data-breach assessment. Overseas providers are subject to measures intended to provide protection comparable to the PDPA. DPO enquiries can be sent to [email protected].
10. Children
CalKok is a general-audience productivity service and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to CalKok, contact us so that we can investigate and delete it as appropriate.
11. Contact us
For privacy questions, complaints, access or correction requests, or account deletion support, use the account settings in the app or email the Privacy Lead / Privacy Officer / DPO at [email protected].