Privacy Policy

1. Introduction

Scolly AI Labs (“we,” “us,” or “our”) operates the Scolly AI platform at scolly.ai (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and, if you sign in with Google, your name and profile photo as provided by Google OAuth.

Conversation Data

We store the messages you send and the responses generated by our AI so that your conversation history is available across sessions. You can delete any conversation at any time.

Memories

Scolly may suggest saving personal preferences or facts as “memories.” Memories are only saved with your explicit approval. You can view, edit, and delete your memories at any time.

Images

If you upload images for analysis, the image data is sent to our AI provider for processing. Uploaded images are saved with the conversation they belong to and are deleted when you delete that conversation or your account.

Usage Data

We collect standard usage data such as IP addresses, browser type, and pages visited to maintain security and improve the Service. We use Google Analytics to understand usage patterns.

Diagnostic Data

When something goes wrong, we collect technical information such as device and app version details and an account identifier, so we can fix it. This never includes the content of your conversations, notes, memories, or calendar.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To personalize your experience through memories you approve
• To generate AI responses to your messages
• To connect to third-party services you authorize (e.g., Google Calendar)
• To send push notifications you opt into
• To detect and prevent abuse
• To improve the Service and fix bugs

4. Third-Party Services

We use third-party services to operate and improve the Service, including:

• AI providers — Your messages are sent to third-party AI services to generate responses.
• Authentication providers — If you sign in with Google, we receive only the profile information you authorize.
• Connected services — If you connect Google Calendar, we access your data only with your explicit permission and as described in Google User Data. You can disconnect at any time.
• Analytics — We use analytics tools to understand how the Service is used.
• Error monitoring — We use an error monitoring service to receive the diagnostic data described above.
• Email delivery — We use an email provider to send account emails and, if you turn on daily briefings, your briefing emails.
• Infrastructure providers — We use third-party cloud services to host and operate the Service.

5. Google User Data

If you connect Google Calendar, Scolly AI accesses your Google data only as described in this section.

What we access

• Calendar events on the calendars you have visible in Google Calendar: each event’s title, start and end time, location, and description.
• Your calendar list: the names and colors of your calendars, and which ones you have visible, so Scolly shows the same calendars you see in Google Calendar.
• Creating events: Scolly adds an event to your calendar only when you ask it to.

We do not access your Gmail, Google Drive, or contacts.

How we use it

We use your calendar data only to provide features you can see in Scolly AI: showing today’s events on your home screen, answering your questions about your schedule, including your schedule in your daily briefing, and creating events you request.

How we store it

We do not keep a copy of your calendar. Events are fetched from Google when a feature needs them. The access tokens that let Scolly reach your calendar are encrypted at rest. When a reply or daily briefing mentions your events, that text is saved in your conversation history like any other message, and it is deleted when you delete the conversation or your account.

How we share it

We share your calendar data only with the service providers that deliver these features:

• Google Cloud’s Vertex AI (Gemini) generates Scolly’s replies and daily briefings.
• Google Cloud text-to-speech creates an audio version of your daily briefing, which is stored in our Google Cloud storage.
• If you turn on daily briefings, our email provider delivers each briefing to your own email address.

We do not sell your Google user data, use it for advertising, or transfer it to anyone else, except as required by law. People at Scolly AI do not read your calendar data unless you ask us to (for example, in a support request), it is needed for security or to investigate abuse, or the law requires it.

No AI model training

We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.

Limited Use

Scolly AI’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

You can disconnect Google Calendar at any time in Settings. This deletes your stored access tokens right away. You can also remove Scolly AI’s access from your Google Account. Deleting your Scolly AI account deletes all of your data, including any saved conversations that mention your events.

6. Data Storage & Security

Your data is stored securely on servers located in the United States. We use encryption in transit (TLS/SSL) and follow industry-standard security practices to protect your information. Access to production data is restricted to authorized personnel only.

7. Cookies & Local Storage

We use cookies and similar browser storage to keep you signed in and to remember your preferences, such as dark mode. Google Analytics may set cookies for usage tracking. We do not use cookies for advertising.

8. What We Don't Do

• We do not sell your personal data to third parties
• We do not display advertisements
• We do not use your conversations or connected-service data to train AI models
• We do not share your data with data brokers

9. Your Rights

You have the right to:

• Access and review the data we hold about you
• Delete your conversations, memories, and account
• Export your conversation data
• Revoke third-party service connections (e.g., Google Calendar)
• Opt out of push notifications

To delete your account and all associated data, go to Settings in the app or contact us at the email below.

10. Data Retention

We retain your data for as long as your account is active. When you delete a conversation or memory, it is permanently removed from our database. If you delete your account, all associated data is permanently deleted within 30 days.

11. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at info@scolly.ai.