Privacy Policy

Last Updated: February 11, 2026

1. Introduction

Photocalia ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our AI-powered calendar conversion service.

By using Photocalia, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Authentication Information

When you sign in with Google, we collect:

  • Your Google account email address
  • Your name and profile picture (if publicly available)
  • Unique user identifier provided by Google

2.2 Uploaded Files

When you use our calendar conversion service, we temporarily process:

  • Images (JPG, PNG) and PDF files you upload
  • Content extracted from these files (dates, times, event details)

2.3 Technical Information

We automatically collect certain technical information:

  • Browser type and version
  • Device information and operating system
  • IP address (anonymized)
  • Usage statistics and interaction data

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To process your images and generate calendar events
  • Authentication: To verify your identity and manage your account
  • Service Improvement: To analyze usage patterns and improve our AI models
  • Communication: To send service-related notifications and updates
  • Security: To protect against fraud, abuse, and security threats

4. Third-Party Data Processing

4.1 OpenAI (GPT-4 Vision)

Your uploaded images are sent to OpenAI's GPT-4 Vision API for event extraction. OpenAI processes this data according to their Privacy Policy and Data Processing Addendum.

Important: OpenAI does not use data submitted via their API to train their models. Your images are only used to provide the calendar conversion service.

4.2 Firebase / Google Cloud

We use Firebase (Google Cloud Platform) for:

  • User authentication (Firebase Authentication)
  • Cloud functions for API processing
  • Application hosting

Google processes this data according to their Privacy Policy and Cloud Data Processing Addendum.

5. Data Retention and Deletion

5.1 Uploaded Files

Your uploaded images and PDFs are automatically deleted after processing is complete. Files are retained for a maximum of 24 hours to allow for troubleshooting, then permanently deleted from our servers.

5.2 Account Information

Your authentication information is retained as long as you maintain an active account. You can request account deletion at any time.

5.3 Usage Statistics

Anonymized usage statistics may be retained for service improvement purposes.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or UK, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restriction: Restrict processing of your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing of your personal data
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at: privacy@photocalia.com

7. Cookies and Tracking

Photocalia uses minimal cookies for essential functionality:

  • Authentication Cookies: To maintain your login session
  • Preference Cookies: To remember your settings (e.g., theme preference)

We use Google Analytics to collect anonymized usage statistics. You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

8. Data Security

We implement industry-standard security measures to protect your data:

  • HTTPS encryption for all data transmission
  • Secure cloud infrastructure (Firebase/Google Cloud)
  • Regular security audits and updates
  • Access controls and authentication

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) with data processors
  • EU-US Data Privacy Framework compliance (where applicable)
  • Google Cloud's and OpenAI's GDPR compliance commitments

10. Children's Privacy

Photocalia is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date
  • Sending an email notification (for significant changes)

Your continued use of Photocalia after changes are posted constitutes acceptance of the updated policy.

12. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

13. Supervisory Authority

If you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection authority: