Privacy Policy

Last updated: 24 September 2025

Clariia (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. If you do not agree with this policy, please do not use the Service.

Contact: donna.odonoghue@gmail.com • Address: 86 Lorna Street, New Plymouth, New Zealand


1) Scope

This policy applies to the websites, apps, and services we operate that link to it (the “Service”), including our integrations with Google services (e.g., Google Calendar). It does not cover third-party services that we do not control.

2) Information We Collect

2.1 Information you provide to us

2.2 Information we obtain from Google when you connect your account

When you opt in, we request the narrowest Google OAuth scopes needed for the features you use (for example, read-only access to calendar events or permission to create events). We do not request full access unless necessary for a feature you explicitly use.

Google Calendar data. We access only the minimum data required to perform the feature you invoke (e.g., listing your events or creating an event you confirm). We do not store full event bodies or calendar contents on our servers. We may store minimal operational metadata such as event or calendar IDs and timestamps needed to deliver the feature reliably.

2.3 Automatically collected information

3) How We Use Information

4) Google User Data — Limited Use & Human Access

We use Google user data only to provide and improve user-facing features that you request or to comply with law. We do not sell Google user data or use it for ads. We do not transfer Google user data except (a) to service providers acting on our behalf under strict confidentiality and security obligations and only to operate the Service or (b) as required by law.

Human access to Google user data does not occur unless you explicitly ask for support that requires it, we obtain your consent, or access is required by law. We log such access where legally permitted.

Tokens: We use OAuth access tokens from Google to perform actions you request. We do not store Google refresh tokens for users of the consumer Google Identity Provider via Firebase Auth. Server-side tokens (if any) are stored securely and rotated regularly.

5) Firestore and Other Firebase Services

6) Data Retention & Deletion

Disconnect / revoke: You can revoke our access at any time at myaccount.google.com/permissions. When you revoke, we stop accessing your Google data immediately and purge cached tokens as above.

Deletion requests: You may request deletion of your account data by emailing donna.odonoghue@gmail.com. We will complete account-level deletion within 30 days unless retention is required by law or to resolve active disputes.

7) Legal Bases (EEA/UK only)

Where GDPR/UK GDPR applies, we process:

8) Sharing & Transfers

We share information only with:

International transfers: Data may be processed in countries other than your own. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses). Hosting region: [Specify your Firebase/Cloud region here].

9) Security

Incident response: If we learn of a data breach affecting your personal information, we will notify you and relevant authorities as required by law.

10) Cookies, SDKs & Analytics

We use essential cookies/SDKs for authentication and session management. If we use analytics, it is to understand feature usage and improve the Service; analytics data is de-identified or aggregated where feasible. You can opt out of non-essential analytics where offered in-app or via your browser settings.

11) Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, email donna.odonoghue@gmail.com. We may verify your request and may be unable to comply where an exception applies (e.g., legal obligations).

12) Children’s Privacy

The Service is not directed to children. We do not knowingly collect personal information from children under [choose: 13 or 16]. If you believe a child has provided us information, contact us and we will delete it.

13) Third-Party Links

The Service may contain links to third-party sites/services. Their privacy practices are governed by their own policies.

14) Changes to This Policy

We may update this policy from time to time. Material changes will be notified via in-app notice or email. The “Last updated” date above reflects the latest version.


Appendix: Google Integration Disclosures

OAuth scopes we request & purposes

We request only the minimum scopes needed for the features you choose to use. We do not sell Google user data, use it for ads, or allow human access without your request (support) or where required by law. You can revoke access anytime at myaccount.google.com/permissions.

If you have questions about this policy or our data practices, contact donna.odonoghue@gmail.com.