Privacy policy

In short

• Caluminate reads your Google Calendar only to give you the readings and timing features you ask for. It changes or removes an event on your calendar only when you ask Lilly to and then approve that specific change.
• It keeps the minimum: event timing and a sanitised title. It does not keep event descriptions, locations or attendee lists.
• Readings are composed with the help of an AI model provider, which receives only the limited context a reading needs.
• Your data is never sold, never used for advertising and never used to train generalised AI models.
• You can withdraw Google access and delete your account and data at any time, from Settings in the application.

1. Who is responsible

Caluminate, based in Ireland, is the data controller for the personal information described in this policy. For any privacy question or request, write to info@caluminate.com.

2. Information Caluminate collects

Information from your Google Account

When you sign in with Google, Caluminate receives your name, email address and profile picture through Google’s standard sign-in scopes (openid, email, profile). These identify your account and personalise it. Caluminate never sees or stores your Google password.

Information from Google Calendar

When you connect your calendar, Caluminate receives calendar data under the scope described in section 3.

Information you provide

Your birth date, birth time and birth location, your timezone and current location where you supply it, the questions and messages you send to Lilly, and any items you add to your Caluminate diary.

Information created by the service

Chart calculations and chart versions, issued readings, your conversation history with Lilly, subscription and entitlement status, and operational logs needed to run and secure the service.

Payment information

Payments are handled by Stripe. Caluminate receives confirmation of your plan and payment status but never receives or stores complete card numbers.

3. Google Calendar access and scopes

Caluminate requests one Google Calendar scope, https://www.googleapis.com/auth/calendar, and uses it for four things only.

• Reading your diary. Caluminate reads your list of calendars to identify your primary calendar, and reads that calendar’s events so Lilly can produce readings that reflect the week you are actually living and keep them current when your diary changes.
• Keeping the astrology in its own calendar. Caluminate creates and manages one separate Google calendar, named Caluminate, for Lilly’s readings, so you can show or hide them all at once.
• Keeping your diary on your own calendar. What you add to your diary in Caluminate, what you ask Lilly to add, and the times and moments you approve are written to your own Google calendar, so they sit with the rest of your life. If you then change or remove one of them in Google Calendar, the same change is made in Caluminate.
• Changing or removing an event when you approve it. When you ask Lilly to move something already in your diary, to make it longer or shorter, or to remove it, she sets out the change and writes it to your Google Calendar only after you confirm it. Where an event repeats, only the one occurrence you asked about is changed. If the event has guests, Google notifies them, as it would if you made the change yourself. An event removed this way goes to the bin in Google Calendar, where Google holds it for a limited time; while it is there you can restore it yourself, or ask Lilly to put it back. Lilly does not change or remove an event that someone else organised.

Google describes this scope broadly, as permission to see, edit, share and permanently delete your calendars. Caluminate uses far less than that: it removes an event of yours only when you ask Lilly to and then approve that removal, does not delete or share your calendars, does not change sharing settings, and makes no change to an event of yours without your confirmation of that specific change. You can hide or delete the separate Caluminate calendar in Google Calendar at any time.

4. What Caluminate keeps from your calendar

Caluminate synchronises your primary Google calendar over a bounded window around the period needed for current and forward readings. For each event it stores only:

• the event’s identifier and revision, so changes and cancellations can be recognised;
• a sanitised title, with the titles of events marked private replaced by a generic private-event label;
• start and end timing, all-day status, timezone and recurrence identity;
• a small set of derived facts used to judge how movable an event is: whether you are the organiser, whether it includes guests from outside the organiser’s domain, and your own response status.

Caluminate does not store event descriptions, event locations, attendee names or attendee email addresses. Guest and organiser details are read only in passing to derive the facts above and are then discarded. Declined and cancelled events are excluded from readings.

5. How the information is used

Caluminate uses personal information to:

• calculate your chart and the astrological conditions for your dates;
• understand the practical context around a date and compose personal readings and timing guidance;
• keep readings current when your diary changes, so stale context is never presented as current;
• answer the questions you put to Lilly and remember the conversation;
• manage your account, trial and subscription, and send service messages;
• secure the service, prevent abuse and meet legal obligations.

Google user data is used only to provide and improve the user-facing features of Caluminate that are visible to you. It is not used for advertising, profiling for third parties, credit assessment or any purpose unrelated to those features.

Optional feedback and shared moments. Once, after Lilly has first been useful to you, the app may ask what that moment was. Answering is optional. An answer is kept without your name, email or account, with contact details and anything matching your calendar removed, alongside only whether you were in your free week or a member, roughly how long you had been using Caluminate and the week it was given. If you answer, you may also choose to let one of Lilly’s replies be published as an anonymised case on the journal and in Caluminate’s posts. You see the exact words first; they are Lilly’s reply only, never your message, with every calendar title and any name in one removed. Nothing is published unless you agree, you can withdraw it at any time in Settings under Privacy, and deleting your account removes it.

6. AI processing

Lilly’s readings and replies are composed with a large language model provided by Anthropic. To compose a reading, Caluminate sends Anthropic a bounded, task-specific context: the relevant calculated astrology, your chart context, your question or message where there is one, and the sanitised calendar titles and times needed for that reading. Google credentials, event descriptions, locations, attendee details and unrestricted calendar history are never included.

Caluminate does not use Google user data to develop, improve or train generalised or non-personalised AI or machine-learning models, and does not permit its providers to do so. Calendar text is treated as untrusted data: it cannot alter Lilly’s instructions or permissions.

7. Who information is shared with

Caluminate does not sell personal information and does not transfer it to advertisers or data brokers. Information is shared only with the service providers that operate Caluminate, each receiving only what its function requires:

• Supabase — database, authentication and storage;
• Netlify — website and application hosting;
• Anthropic — composing readings and Lilly’s replies, as described in section 6;
• Stripe — payment processing. Stripe receives no Google Calendar content from Caluminate;
• Resend — delivery of account and service email;
• Plausible — privacy-focused, cookieless website analytics. Plausible receives no Google user data.

Information may also be disclosed where the law requires it, to protect the rights and safety of users or the service, or as part of a business transfer, in which case this policy’s commitments continue to apply to the data.

8. Google API Services User Data Policy

Caluminate’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google user data is used only to provide and improve the user-facing features described in this policy;
• it is transferred to others only as necessary to provide those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users;
• it is not used or transferred for advertising, including personalised, retargeted or interest-based advertising;
• it is not read by humans except with your specific consent, where necessary for security or to comply with applicable law, or where the data has been aggregated and anonymised for internal operations.

9. Human access

People at Caluminate do not routinely read your calendar content. If support or case review would require someone to look at it, Caluminate will first ask for your documented, specific consent. Access needed for security, abuse investigation or legal obligations is restricted to authorised operators.

10. Storage and security

Data is held in secure hosted infrastructure and encrypted in transit. Google access and refresh tokens are encrypted by the application using authenticated encryption before they are stored. Access is controlled by application permissions and database row-level security, and privileged access is limited to server-side functions and authorised administration.

No internet service can promise absolute security. Caluminate reduces the risk by keeping as few calendar fields as possible and by separating calendar context, chart data, issued readings and operational credentials.

11. Retention

• Calendar events are held for a bounded window around the period needed for current and forward readings.
• Diary snapshots used to compose readings are configured to expire after 90 days.
• Issued readings keep minimal provenance and the evidence they cite, not a permanent copy of your diary.
• Conversations with Lilly are kept for 13 months by default, or longer if you choose to archive them. You can erase your conversation history in the application at any time.
• Google tokens are deleted when the Google connection is revoked.
• Account, billing and operational records are kept for as long as the account is open and afterwards only as required for security, accounting and legal obligations.

12. Withdrawing access and deleting your data

You can disconnect Google Calendar at any time from the settings inside the Caluminate application. Disconnecting withdraws Caluminate’s authorisation at Google, deletes the stored Google tokens and stops synchronisation. You can also withdraw access directly from your Google Account permissions.

You can delete your account yourself at any time under Settings, Data controls, in the application; any subscription is cancelled at the same moment. You can also ask us to do it, or ask for a copy of your data, by emailing info@caluminate.com from the address on your account. Account deletion removes your calendar records, diary snapshots, readings, conversations and derived personal data from the active database. Copies in time-limited backups are removed on the backup retention schedule, and records Caluminate is legally required to keep are retained only for that purpose.

13. Your rights

Under data-protection law, including the GDPR, you have the right to access your personal information, have it corrected or erased, restrict or object to its processing, receive it in a portable form, and withdraw consent at any time. Caluminate processes personal information on the basis of your consent (for Google Calendar access), the performance of its contract with you (to provide the service) and its legitimate interests in securing and operating the service.

To exercise any right, email info@caluminate.com. You also have the right to complain to your local supervisory authority; in Ireland this is the Data Protection Commission.

14. International transfers

Some of the providers listed in section 7 process data outside the European Economic Area. Where they do, Caluminate relies on the safeguards recognised by data-protection law, such as the European Commission’s standard contractual clauses.

15. Cookies and analytics

Caluminate uses only the storage that is essential to keep you signed in and remember your preferences. Website analytics are provided by Plausible, which uses no cookies and builds no advertising profile. Caluminate carries no third-party advertising trackers.

If you arrive through a friend’s invitation link, Caluminate keeps that invitation’s code in a first-party cookie for 90 days, so the friend can be credited with a free month if you later subscribe. The cookie names the invitation, not you, and is read only by Caluminate.

If you reach Caluminate through a link carrying campaign tags, your browser keeps the tags of the first such visit and of the latest one (the source and campaign named in the link, an invitation or partner code, the site that linked here and the page you landed on). When you start a trial they are sent with your setup to Caluminate’s own server, together with your answer to “How did you hear about Caluminate?” if you gave one. Caluminate also records the steps of your trial and subscription — connecting a calendar, finishing setup, opening a reading, a first question to Lilly, a payment — under a random identifier kept apart from your account. These records never hold your calendar events, birth details, readings, messages or email address, are never shared with advertising networks, and are deleted with your account.

16. Children

Caluminate is intended for adults and is not directed at anyone under 18. Caluminate does not knowingly collect personal information from children.

17. Changes to this policy

If this policy changes, the revised version will be published here with a new date. Where a change materially affects how Google user data is used, Caluminate will tell you and ask for your consent before the change applies to your data.

18. Contact

For privacy, access or deletion requests, email info@caluminate.com.