Privacy policy

Last updated: 4 October 2026

AICal is published by Stichting Le@f, the data controller for the account data described below.

Calendar contents and health data stay on the device.

What stays on your device

• Calendar. Events are read and written through Apple Calendar on this iPhone or iPad. AICal does not upload events, event titles, times, attendees, or calendar identifiers.
• Health. This version of AICal does not read or write Apple Health. Health data is not collected.

Nothing is added to your calendar unless you confirm it.

Account data we store

When you sign in, AICal stores an account with Supabase in the eu-west-1 (Ireland) region:

• email address
• user ID
• name, only when Apple or Google shares it at the first sign-in
• the preferences you choose during setup (goals, working hours, focus and break lengths)
• focus items you save in the app

We do not store a second copy of your email beyond the account. We do not store calendar identifiers in the cloud.

What is sent to OpenAI

When you use Ask, the sentence you type is sent to OpenAI so it can be turned into a structured request (what to plan, how long, which day). The calendar is not included, and health data is not included. This happens only after you tap Agree.

AICal does not keep that sentence. OpenAI processes it in the United States. That is a transfer outside the European Economic Area, under OpenAI's data processing terms, including standard contractual clauses. OpenAI's API default is that customer content is not used to train models. OpenAI may keep the API request for up to 30 days to monitor abuse. The reply is checked on our server and then discarded. We do store that a request happened: the time, whether it succeeded, and token counts. We do not store the text. The moment you tap Agree is stored on your profile.

Why we may use this data

• Account, preferences and focus items. To provide the app you signed up for (contract, AVG article 6(1)(b)).
• The sentence you send to Ask. Only after you tap Agree (consent, AVG article 6(1)(a)). You can withdraw that consent by deleting your account, or by not using Ask.
• How often Ask is used. Counts and times of requests, without the sentence, so the daily limit can be applied and abuse can be limited (legitimate interest, AVG article 6(1)(f)).

Your rights

You can ask for access, correction, or deletion, and you can object to processing that is based on legitimate interest. You can also ask us to restrict processing. To use these rights, email privacy@stichtingleaf.nl. You can lodge a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

What we do not do

• No advertising, and no tracking across other companies' apps or websites.
• No sale of personal data.
• No analytics that include calendar values or health values.

How long we keep it

Account data stays until you delete the account. You can delete it in the app: Settings → Delete account. That removes the account, preferences, and focus items. Events already in Apple Calendar stay there, because they were never copied to us.

If you used Sign in with Apple, the app asks Apple to revoke the token as part of deletion.

Children

AICal is not directed at children under 16.

Contact

Stichting Le@f
Ampèrestraat 9
1976 BE Velsen
KVK 34140586
BTW NL815590921B01
Privacy: privacy@stichtingleaf.nl

The publisher's site is stichtingleaf.nl. Account deletion is available in the app, as described on the support page.