Privacy Policy

Introduction

Welcome to Almanac. We're an AI-powered calendar app designed to help college students manage their academic schedules. This Privacy Policy explains how we collect, use, protect, and share your information when you use our service.

By using Almanac, you agree to the collection and use of information in accordance with this policy. We take your privacy seriously and are committed to transparency about our data practices.

Information We Collect

Google Account Information

When you sign in with Google, we collect:

• Your email address
• Your name
• Your profile picture
• Google OAuth tokens (access and refresh tokens) to authenticate your account

We request the following Google API scopes:openid email profile calendar.events

Google Calendar Data

With your explicit permission, we access your Google Calendar to:

• Read existing calendar events
• Create new events based on deadlines extracted from your syllabi
• Sync changes between Almanac and your Google Calendar

Syllabus and Course Data

When you upload a syllabus PDF, we collect:

• The PDF file you upload
• Text content extracted from the PDF for processing (course name, deadlines, assignments, exam dates)
• Events and courses you create or modify through the app

Chat and Interaction Data

When you use our AI chat assistant, we collect:

• Your queries and messages to the AI assistant
• Actions you take through the chat (creating, editing, deleting events)
• Usage patterns to improve the service

Automatically Collected Information

We automatically collect:

• Browser type and version
• Device information
• Timestamps of your interactions
• Session data managed by NextAuth

How We Use Your Information

We use the information we collect to:

• Authenticate your account - Verify your identity and maintain secure sessions
• Extract academic deadlines - Use AI to parse your syllabus PDFs and identify important dates
• Sync with Google Calendar - Create, update, and delete events in your Google Calendar
• Provide AI assistance - Answer questions and help you manage events through natural language
• Improve our service - Analyze usage patterns to fix bugs and add features
• Communicate with you - Send service-related notifications and respond to support requests

Data Sharing and Third-Party Services

We never sell your personal data to third parties.

However, we share your data with the following service providers to operate Almanac:

Google APIs

We use Google OAuth for authentication and Google Calendar API for calendar synchronization. Your use of these services is governed by Google's Privacy Policy.

Almanac's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google Gemini AI

Important: When you upload a syllabus PDF, the text content is sent to Google's Gemini AI for processing.

We use Gemini Vision API to extract course information, deadlines, and assignments from your syllabi. This data is processed by Google's AI infrastructure. For more information, see Gemini API Terms of Service.

Groq AI

Important: Chat queries you send to our AI assistant are processed by Groq's infrastructure.

We use Groq's API with the Llama 3.3 model to power our chat assistant. Your queries and calendar data may be sent to Groq for processing natural language requests. For more information, see Groq Privacy Policy.

Supabase (Database Hosting)

We use Supabase to host our PostgreSQL database. Your account information, events, and courses are stored on Supabase's secure infrastructure. Data is encrypted in transit and at rest. See Supabase Privacy Policy.

Vercel (Application Hosting)

Our application is hosted on Vercel's platform. Vercel may collect anonymous analytics and performance data. See Vercel Privacy Policy.

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights or property
• Prevent fraud or abuse
• Protect the safety of users or the public

Data Retention

We retain your data as follows:

• Account data - Stored until you delete your account
• Events and courses - Stored until you delete them or delete your account
• OAuth tokens - Refreshed automatically and stored until you revoke access or delete your account
• Uploaded PDFs - Processed in memory and not stored permanently (only extracted event data is saved)
• Chat history - Not permanently stored; processed in real-time

When you delete your account, all associated data is permanently removed from our database within 30 days.

Your Rights (GDPR & CCPA)

You have the following rights regarding your personal data:

Right to Access

You can view all your data within the app (events, courses, profile). You can also request a complete export of your data by visiting the Settings page.

Right to Deletion

You can delete your account and all associated data at any time through the Settings page. This action is permanent and cannot be undone.

Right to Export (Data Portability)

You can export your data as a JSON file from the Settings page. This includes your profile, events, and courses.

Right to Opt-Out (CCPA)

California residents have the right to opt-out of the "sale" of personal information. We do not sell your personal information.

Right to Rectification

You can edit your events, courses, and profile information at any time through the app interface.

How to Exercise Your Rights

To exercise any of these rights or if you have privacy concerns, contact us at: almanac123@googlegroups.com

Security Measures

We protect your data through:

• Encrypted connections - All data transmitted over HTTPS
• Secure authentication - OAuth 2.0 tokens managed by NextAuth
• User-scoped data - All database queries are scoped by user ID to prevent unauthorized access
• Token encryption - OAuth tokens are encrypted before storage
• Regular security updates - We keep dependencies and infrastructure up to date

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

Almanac is designed for college students aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use this service.

If we discover that we have collected personal information from a child under 18, we will delete that information immediately. If you believe we have collected information from a minor, please contact us at almanac123@googlegroups.com.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

By using Almanac, you consent to the transfer of your data to:

• United States (Vercel, Supabase, Google, Groq)
• Other countries where our service providers operate their infrastructure

We ensure that such transfers comply with applicable data protection laws and use appropriate safeguards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email for material changes (if you have provided an email address)
• Display a notice in the app for significant changes that affect your rights

Your continued use of Almanac after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the service and delete your account.

Cookie Policy

Almanac uses minimal cookies for essential functionality only. We use NextAuth session cookies to maintain your login state. These cookies are:

• Strictly necessary - Required for authentication
• Secure - Transmitted only over HTTPS
• HttpOnly - Not accessible via JavaScript
• Session-based - Expire when you close your browser or log out

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Your Consent

By using Almanac, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. You consent to our collection, use, and sharing of your information as described in this policy.

If you do not agree with this policy, please do not use Almanac and delete your account if you have already created one.