Legal
Privacy policy
Last updated [DATE]
On this page
In short
- We use your data to plan your time and run your account. Nothing else.
- We don’t sell your data and we don’t show ads.
- The AI only reads what you type or say to build a draft. It can’t change your calendar; you confirm every change.
- Delete your account from Account settings and your data is deleted with it.
Who we are
Tawzy is operated by [COMPANY LEGAL NAME] (“Sage Analytix”, “we”), [REGISTERED ADDRESS]. We are responsible for the personal data described here. Questions go to [PRIVACY EMAIL].
What we collect
When you create an account
Your name, email address and password. We store the password only as a one-way hash; nobody at Tawzy can read it. We also keep your time zone and the preferences you set, such as working hours, lunch, buffers and reminder timings.
When you plan
The tasks, plans, events and reminders you create, and the text you type or dictate to describe your day.
When you dictate
In Chrome, Edge and Safari, dictation uses your browser’s own speech service, run by Google, Microsoft or Apple, which hears the audio. In other browsers the audio goes to Tawzy’s own speech server, which turns it into text and keeps no recording. Text you type or dictate, and the custom words you save, are sent to our AI provider to turn into tasks or to tidy up; we don’t keep a copy of the audio.
When you connect a calendar
If you connect Google Calendar, we read events from the calendars you choose so we can plan around them, and we write the events you confirm. We store the access tokens Google gives us so the sync keeps working. You can disconnect at any time.
When someone books you
People using your booking link give us their name and email, the names and emails of anyone they add, their time zone, and an optional message. We use these to show you the request and to email everyone the outcome.
Automatically
Your IP address and browser details in our server logs, a session cookie that keeps you signed in, and, if you allow notifications on the mobile app, a push token for your device.
How we use it
- To build plan drafts, keep your calendar in sync, and send the reminders and daily prompts you’ve turned on.
- To run booking links: show requests, check your availability, and email participants.
- To send account emails: confirming your address, resetting your password, and important service notices.
- To keep Tawzy secure, prevent abuse, and fix problems.
We don’t use your data for advertising and we don’t build profiles to sell.
AI and your plans
When you describe what you need to do, that text is sent to Google’s Gemini API, which turns it into a structured list of tasks and constraints. The AI never decides where things go and can’t write to your calendar: our own planner builds the draft, and nothing changes until you confirm it.
[CONFIRM BEFORE LAUNCH: we use a paid Gemini tier, under which Google does not use your prompts to improve its products]
Who we share it with
Only with the services that run Tawzy for us, and only what each needs:
| Service | What for | What it sees |
|---|---|---|
| Calendar sync; Gemini AI | Calendar events you connect; the text of plan requests | |
| [EMAIL PROVIDER] | Sending email | Recipient address and the email content |
| InterServer | Hosting our servers and database | All stored data, encrypted in transit |
| Cloudflare | Network security and delivery | Traffic to the site, including IP addresses |
| Expo | Mobile push notifications | Device push token and the notification text |
We may also disclose data when the law requires it, or to protect people’s safety or our rights.
Cookies and storage
We use one essential cookie, tawzy_session, which keeps you signed in. Your browser also remembers your light or dark theme choice. We use no advertising or third-party tracking cookies, so there’s nothing to opt out of.
How long we keep it
- Account and planning data: for as long as your account is open. Deleting your account deletes it.
- Backups: deleted data leaves our backups within [BACKUP RETENTION, e.g. 14 days].
- Server logs: [LOG RETENTION, e.g. 30 days].
- Booking requests: kept in the host’s history until the host deletes their account. Guests can ask us to remove their details sooner.
Your rights
You can ask to see, correct, export or delete your personal data, or object to how we use it. Most of this you can do yourself in Account settings; for anything else, write to [PRIVACY EMAIL] and we’ll respond within [30 days]. If you’re unhappy with our answer, you can complain to [DATA PROTECTION AUTHORITY].
Security
Every connection uses HTTPS. Passwords and sign-in sessions are stored as hashes, reset and confirmation links expire and work once, and sign-in attempts are rate-limited. No system is perfect: if you find a weakness, please tell us at [SECURITY EMAIL].
Children
Tawzy isn’t meant for anyone under [MINIMUM AGE], and we don’t knowingly collect their data.
Changes to this policy
If we change this policy in a way that matters, we’ll email you before it takes effect. The date at the top always shows the latest version.