Privacy Principles — draft

Draft principles, not a complete privacy notice. Before launch, disclose actual vendors, retention periods, rights procedures, contact details, and lawful processing practices.

Data we may need

Account identifiers, contact details, organization and Circle membership, event signups, communications, preferences, and connected calendar data only when authorized.

Data boundaries

Personal calendars are not shared with organization administrators by default. Private Circle information is restricted to authorized participants. Children should not have public profiles in the initial product.

AI and external services

Only context required for a requested feature should be processed. External email, calendar, maps, messaging and AI providers must be disclosed and subject to appropriate contractual and technical protections.

Control and deletion

Provide access, correction, export, consent revocation, and deletion workflows, subject to legitimate retention obligations. Never sell private family schedules or member directories.

Security

Use encryption, access controls, audit trails, incident response, retention limits, and organization isolation. No internet service can guarantee absolute security.