Privacy policy
Last updated 28 August 2026. Kendal is operated by Volveron LLC.
This policy describes how the Kendal app and service access, use, store and share your information — including data from your Google Account. It is written to be read, not to be survived. If anything here is unclear, email support@kendalapp.com and we will explain it.
The short version
- Kendal reads your calendar so she can plan around what you have already committed to, and writes your schedule back so it appears where you already look.
- We do not sell your data. We do not share it with advertisers. We do not use it to train AI or machine-learning models.
- You can disconnect at any time. Doing so revokes our access immediately and leaves the events in your calendar untouched.
What we collect
| Category | What it is | Why |
|---|---|---|
| Account | An identifier from Sign in with Apple, and the name and email address you choose to share with us through it. | To know which account is yours, and to contact you about the service. |
| Google Calendar data | Events on the calendars you select: titles, descriptions, start and end times, time zones, locations, attendee response status, event type, and free/busy status. | To know which hours are already committed, and to write your schedule back. |
| What you tell Kendal | Voice recordings and their transcripts, and text messages you send her. | To understand what you are asking for and act on it. |
| Your schedule | The goals, routines, commitments and blocks Kendal builds and maintains for you. | This is the product. |
| Operational logs | Timestamps, error records, and coarse usage events. Authentication tokens and message content are redacted before a log is written. | To keep the service working and to diagnose failures. |
Google user data, specifically
When you connect a Google Account, Kendal requests one permission:
See, edit, share, and permanently delete all the calendars you can access using Google
Calendar (https://www.googleapis.com/auth/calendar).
We use it to do exactly three things:
- Read events from the calendars you select, so Kendal can plan around your existing commitments.
- Create one calendar in your Google Account to hold the blocks Kendal authors, so her plan stays visually separate from your own events and can be hidden or deleted independently.
- Write, update and remove events Kendal created, so your plan stays current as it changes.
Kendal does not modify or delete events she did not create. Each event Kendal writes is recorded against an internal provenance record; changes are made only to those events, and only when the copy in Google still matches the version Kendal last saw. If you have edited an event yourself in the meantime, your change wins and Kendal re-plans around it.
We asked for this permission rather than a narrower one because creating a dedicated calendar requires calendar-management access, which the read-only and events-only permissions do not grant. Without it, Kendal’s suggestions would be indistinguishable from your real commitments in your own calendar.
Limited Use. Kendal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, we do not transfer Google user data to third parties except as necessary to provide or improve Kendal’s user-facing features, to comply with applicable law, or as part of a merger or acquisition; we do not use it for advertising; we do not sell it; and we do not use it to develop, improve or train generalised AI or machine-learning models.
How your data is stored and protected
- Data is held on servers in the United States, in an encrypted database.
- All traffic between your device, our service and Google is encrypted in transit (TLS).
- Google authentication tokens are individually encrypted at rest with AES-256-GCM before they are written to the database, using a key held separately from it.
- Authentication tokens and message content are redacted from operational logs at the point the log line is created, not afterwards.
No system is perfectly secure, and we will not claim otherwise. If we become aware of a breach affecting your data, we will tell you.
Who else sees your data
We do not sell your data and we do not share it for advertising. We use a small number of service providers to run Kendal, each of which processes only what it needs:
| Provider | What it handles |
|---|---|
| Fly.io | Application hosting and the database. |
| Anthropic | Understands what you asked for and produces your schedule. Receives the relevant parts of your conversation and calendar. Does not train on it. |
| Deepgram | Converts your speech to text. |
| Cartesia | Converts Kendal’s replies to speech. |
| Daily | Carries the live audio connection during a conversation. |
| Cloudflare | Stores operational logs. |
| Apple | Provides sign-in. Apple does not receive your calendar data. |
We may also disclose information where we are legally required to, or to protect the rights and safety of our users. If Kendal is ever acquired, your data may transfer as part of that transaction, and this policy will continue to apply until you are told otherwise.
Keeping and deleting your data
- Disconnecting Google revokes our access token with Google immediately and deletes the stored credentials. Events already in your calendar are not touched — including ones Kendal created. Removing them is your choice, and you can delete the whole Kendal calendar in Google in one action.
- Deleting your account deletes your schedule, your transcripts and your connection records from our systems.
- Operational logs are retained for up to 90 days and then discarded.
- You can also revoke Kendal’s access to your Google Account at any time, without using the app, at myaccount.google.com/permissions.
Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Email support@kendalapp.com and we will respond within 30 days. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA; we will honour those requests regardless of where you live.
Children
Kendal is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us their information, email us and we will delete it.
Changes to this policy
If we change how we handle your data, we will update this page and change the date at the top. If the change is significant, we will tell you in the app or by email before it takes effect.
Contact
Volveron LLC — support@kendalapp.com