# Privacy Policy ## Gemma AI Privacy Policy Last Updated: January 17, 2026 ### 1\. Introduction Welcome to Gemma AI ("Gemma", "we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered reminder service accessible through our website and mobile applications (collectively, the "Service"). Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of information in accordance with this policy. ### 2\. Information We Collect #### 2.1 Information You Provide Directly **Account Information:** - Name - Email address - Phone number (required for reminder calls) - Password (encrypted) - Timezone preference **Reminder Data:** - Reminder titles and descriptions - Scheduled dates and times - Notes and tags - List categories - Early reminder preferences **Communication Data:** - Support requests - Feedback and surveys - Email correspondence **Google Calendar Integration Data:** - OAuth 2.0 access and refresh tokens - Calendar events (titles, dates, times, locations) - Meeting attendees and participants - Video conferencing links (Zoom, Google Meet, etc.) - Event descriptions and notes - Calendar connection logs and import history #### 2.2 Information Collected Automatically **Usage Data:** - Reminder creation and completion patterns - Feature usage statistics - Call success rates - Device information (browser type, operating system) - IP address **Call Data:** - Call recordings (all calls with Gemma are recorded) - Call transcripts - Call duration and status - Voice interactions and response patterns #### 2.3 Information from Third Parties We may receive limited information from our service providers: - Call delivery status from Bland AI - Authentication status from authentication providers - Calendar data from Google Calendar API - OAuth authentication status from Google OAuth services #### 2.4 Consent to AI Voice Calls By providing your phone number and creating reminders, you expressly consent to receive automated and AI-generated voice calls from Gemma AI at the phone number you provide. These calls: - Are made by our AI assistant to deliver your scheduled reminders - May be initiated at times you specify when creating reminders - Include early reminder calls if you have configured this feature - Are recorded for quality assurance and AI improvement purposes You may revoke this consent at any time by: - Disabling AI calls in your account settings - Removing your phone number from your account - Deleting your account entirely Revoking consent will stop all future AI calls but will not affect reminders already processed. ### 3\. How We Use Your Information We use your information for the following purposes: #### 3.1 Service Delivery - To make reminder calls at scheduled times - To process early reminders as configured - To enable snooze and rescheduling features - To maintain your reminder lists and preferences - To import and sync calendar events from Google Calendar - To create reminders from calendar events - To provide meeting details and video links in calls #### 3.2 Communication - To send transactional emails (account confirmations, receipts) - To respond to support requests - To send important service updates - To send marketing communications (only with your consent) #### 3.3 Service Improvement & AI Training - To analyze usage patterns and improve features - To train and enhance our AI voice assistant using call recordings and transcripts - To improve speech recognition, natural language understanding, and response quality - To troubleshoot technical issues - To prevent fraud and abuse **Note on Call Recordings:** All calls with Gemma are recorded and may be used to improve our AI technology. These recordings help us enhance voice recognition accuracy, conversational quality, and overall user experience. Recordings are processed securely and access is strictly limited to authorized personnel involved in AI development. #### 3.4 Legal Compliance - To comply with applicable laws and regulations - To respond to legal requests when required - To protect our rights and the rights of others ### 4\. How We Share Your Information We do not sell, trade, or rent your personal information. We may share your information only in the following situations: #### 4.1 Service Providers We share necessary information with third-party service providers: - Bland AI: Phone number and reminder content for making calls - Supabase: All data storage and authentication - OpenAI: Reminder content for generating call scripts (anonymized) - n8n: Workflow automation for reminder processing - Google: Calendar access tokens and event data for synchronization #### 4.2 Legal Requirements We may disclose information if required by law or in response to: - Court orders or subpoenas - Government requests - To protect rights, privacy, safety, or property - To prevent illegal activities #### 4.3 Business Transfers If we merge with or are acquired by another company, your information may be transferred as part of that transaction. #### 4.4 Aggregated Information We may share aggregated, non-personally identifiable information publicly or with partners for analytics and research. ### 5\. Data Retention We retain your information for as long as necessary to provide our Service and fulfill the purposes described in this policy: - Active Account Data: Retained while your account is active - Call Recordings: Automatically deleted after 90 days - Call Logs: Retained for 1 year for analytics - Calendar Connection Data: Retained until connection is revoked - Calendar Import Logs: Retained for 1 year for troubleshooting - OAuth Tokens: Securely stored, automatically refreshed as needed - Deleted Account Data: Removed within 30 days of deletion request - Reminder Data: Deleted immediately upon request ### 6\. Data Security We implement appropriate technical and organizational security measures: - Encryption of data in transit and at rest - Secure password storage using industry-standard hashing - Regular security audits and updates - Limited access to personal data on a need-to-know basis - Secure data centers operated by our service providers However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. ### 7\. Your Rights and Choices #### 7.1 Access and Portability You can access and export your reminder data through your account settings. #### 7.2 Correction You can update your account information at any time through the Service. #### 7.3 Deletion You can request deletion of your account and associated data by contacting support@gemmaai.app. #### 7.4 Opt-Out - Marketing Emails: Unsubscribe link in every marketing email - Reminder Calls: Disable AI calls in your settings - AI Training: Contact us at support@gemmaai.app to request that your call recordings not be used for AI training purposes #### 7.5 GDPR Rights (EU/UK Residents) If you are in the EU or UK, you have additional rights: - Right to be informed about data processing - Right to restrict processing - Right to object to processing - Right to lodge a complaint with supervisory authorities ### 8\. Children's Privacy Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. ### 9\. International Data Transfers Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers in compliance with applicable law. ### 10\. Cookies and Tracking We use essential cookies for: - Authentication and security - Remembering your preferences - Ensuring the Service functions properly You can control cookies through your browser settings. Disabling cookies may limit some features of the Service. ### 11\. California Privacy Rights If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA): - Right to know what personal information we collect - Right to delete your personal information - Right to opt-out of the sale of personal information (we do not sell your data) - Right to non-discrimination for exercising your privacy rights ### 12\. Changes to This Privacy Policy We may update this Privacy Policy from time to time. We will notify you of any material changes by: - Posting the new Privacy Policy on this page - Updating the "Last Updated" date - Sending an email notification for significant changes Your continued use of the Service after changes constitutes acceptance of the updated policy. ### 13\. Contact Us If you have questions or concerns about this Privacy Policy or our data practices, please contact us: Email: support@gemmaai.app For GDPR-related inquiries, you may also contact the UK Information Commissioner's Office (ICO) at ico.org.uk. ### 14\. Legal Basis for Processing (GDPR) We process your personal data under the following legal bases: - Contract: To provide the Service you've requested - Consent: For marketing communications and optional features - Legitimate Interests: For service improvement and fraud prevention - Legal Obligation: To comply with applicable laws By using Gemma AI, you acknowledge that you have read and understood this Privacy Policy.