Privacy Policy

1. Scope and controller

This policy describes how Iris (“we,” “our”) collects, uses, and protects your information when you use our planning and productivity service. Iris is the data controller for the personal data we process in connection with the service. If you have questions, contact us via the link in the footer.

2. Information we collect

We collect only what is necessary to provide and improve the service:

• Account data: Email, name, and profile information from your sign-in provider (e.g. Google).
• Calendar and tasks: Events and task data from Google Calendar and Google Tasks that you choose to connect, used to display and manage your schedule.
• Usage and product data: How you use the product (e.g. features used, errors) to operate and improve the service.
• Communications: Messages you send to us (e.g. support or contact forms).

3. How we use your information

We use your information to:

• Provide, maintain, and secure the service (including syncing and displaying your calendar and tasks).
• Operate AI and assistant features (e.g. planning and scheduling) in accordance with your choices.
• Send you service-related or legally required notices.
• Improve the product, fix issues, and develop new features.
• Respond to your requests and comply with applicable law.

4. Legal basis

Where required by law (e.g. in the EEA/UK), we rely on: (a) performance of a contract to provide the service you requested; (b) your consent where we ask for it (e.g. optional features); (c) legitimate interests to operate, secure, and improve the service; and (d) legal obligations where we must process or retain data.

5. Data retention

We retain your data for as long as your account is active or as needed to provide the service, comply with law, resolve disputes, and enforce our agreements. You can request deletion of your account and associated data; we will delete or anonymize it except where we must retain it by law.

6. Sharing and third parties

We do not sell your personal data. We share data only: (a) with service providers that help us run the product (e.g. hosting, analytics, AI providers) under strict confidentiality and data-processing terms; (b) when required by law or to protect rights and safety; or (c) in connection with a merger, sale, or other transfer of assets, with notice where required. Our use of Google APIs is also subject to the Google API Services User Data Policy, including the Limited Use requirements.

7. International transfer

Your data may be processed in the United States or other countries where we or our providers operate. We use appropriate safeguards (e.g. standard contractual clauses, adequacy decisions) where required by law for such transfers.

8. Your rights

Depending on where you live, you may have the right to:

• Access and receive a copy of your personal data.
• Correct or update inaccurate data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Data portability (e.g. export in a machine-readable format).
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.

You can disconnect Google Calendar and Google Tasks at any time in the app. To exercise other rights or ask questions, use our contact link in the footer.

9. Security

We use technical and organizational measures (e.g. encryption, access controls, secure development practices) to protect your data. No system is completely secure; we will notify you and regulators where required if a breach affects your personal data.

10. Children

The service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us and we will delete it.

11. Changes

We may update this policy from time to time. We will post the updated policy here and change the “Last updated” date. For material changes, we may notify you by email or in-product notice. Continued use after the effective date constitutes acceptance of the updated policy.

12. Contact

For privacy-related requests or questions, contact us via the Contact page.