Privacy Policy

1. Introduction

Welcome to AimUp ("AimUp," "we," "us," or "our"). AimUp is an AI-powered productivity application that helps you capture, organize, prioritize, and schedule goals and tasks ("Aims" and "Moves"), including optional calendar integration.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our websites, applications, and services (collectively, the "Services").

By using AimUp, you agree to this policy. If you do not agree, please do not use the Services.

2. Key Principles

3. Information We Collect

We collect information to provide, secure, and improve the Services.

3.1 Account and Profile Information

• Email address (required) – account creation, authentication, support communications
• Name / display name (optional) – personalization
• Authentication credentials – if you use email/password, we store a hashed password; if you use OAuth, we store OAuth identifiers and tokens as described below

3.2 Content You Provide in AimUp

AimUp is designed to store and work with your productivity content, including:

• Goals, Aims, AimTargets, Projects, Moves
• Notes, reflections, preferences, priorities
• Optional "Inner Drive" content such as values, inspirations, motivations, and other personal context you choose to enter

Sensitive personal content: Some information you choose to provide may be deeply personal. You control what you enter. We use this information only to provide the Services (including personalization and AI-assisted features) and do not sell it.

3.3 Google Calendar Integration Data (Optional)

If you connect your Google Calendar, we access and process Google Calendar data as authorized by you via Google OAuth.

Depending on your settings and the permissions you grant, this may include:

• Calendar list data (calendar IDs and related metadata, such as names)
• Event data (such as event titles/summaries, start/end times, time zones, recurrence information, and free/busy/availability)
• Other event fields that may exist in the calendar feed (for example, location, description, attendees) to the extent included in Google's API responses for the scopes you authorize

What we write to your calendar (only when you choose to use scheduling/sync features):

• Create events that represent scheduled Aims/Moves (time blocks you schedule)
• Update those events when you reschedule/edit them in AimUp
• Delete those events when you delete/unschedule them in AimUp (or if you choose to remove them)

3.4 Voice and Audio (Optional)

If you use voice capture features:

• Audio may be processed by our speech-to-text provider to generate a transcript.
• We display the transcript to you and only save it to your account if you choose to convert it into an Aim/Move or otherwise save it.

3.5 Payment and Subscription Information (If Applicable)

If you subscribe to a paid plan, payments are processed by third-party payment processors (e.g., Stripe). We generally do not store full payment card numbers ourselves; the payment processor handles that data under its own policies.

3.6 Usage, Device, and Log Data

When you use the Services, we may automatically collect:

• IP address, device type, browser type, operating system
• Pages/screens viewed, actions taken, timestamps
• Crash reports and error logs
• Security-related logs (e.g., suspicious login attempts)

3.7 Cookies and Similar Technologies

We use cookies and similar technologies primarily for:

• Authentication/session management
• Security (e.g., CSRF protections)
• Preferences (e.g., theme, settings)

We do not use cookies for third-party advertising.

4. How We Use Your Information

We use information for the following purposes:

4.1 Provide and Operate the Services

• Create and manage your account
• Store and display your Aims/Moves and related content
• Provide core workflows: capture, prioritize, commit, schedule, complete

4.2 Calendar Sync and Scheduling Features (If Enabled)

• Show your schedule inside AimUp
• Detect conflicts and identify available time
• Create/update/delete calendar events you schedule through AimUp
• Maintain a two-way sync where enabled

4.3 AI-Powered Features (If Enabled)

AimUp may use AI to:

• Convert natural-language input into structured tasks
• Suggest prioritization or time estimates
• Recommend scheduling options based on your preferences and availability

We apply data minimization and send only what's reasonably needed for the requested feature.

4.4 Communications

• Transactional emails (e.g., password resets, security alerts, important service notices)
• Marketing emails only if you opt in (you can opt out any time)

4.5 Security, Fraud Prevention, and Compliance

• Protect accounts and prevent abuse
• Monitor and investigate suspected fraud or security incidents
• Comply with legal obligations and enforce our terms

4.6 Product Improvement

• Understand feature performance and reliability
• Improve UX, stability, and accuracy
• Analyze aggregated or de-identified usage trends

5. AI and Model Providers

AimUp may use third-party AI providers (e.g., OpenAI, Anthropic) and speech-to-text providers (e.g., Deepgram) to power features.

5.1 No Training on Your Data (Without Explicit Opt-In)

We will not use, and will not allow our AI providers to use, your personal data (including your calendar data and productivity content) to train generative AI models unless you explicitly opt in.

5.2 Data Minimization

We aim to:

• Send only the minimum necessary information to fulfill your request
• Avoid sending unnecessary identifiers where feasible

5.3 Embeddings / Semantic Search (If Used)

We may generate embeddings (vector representations) of certain text you save to support features like semantic search or similarity matching. Embeddings are not designed to be human-readable. While no technique is perfect, embeddings are generally not a practical way to reconstruct your original text without additional context.

6. How We Share Information

We do not sell your personal data.

We share information only in limited situations:

• Service providers (subprocessors): to host the app, store data, send emails, process payments, power AI features, and provide analytics/security monitoring—only as needed to operate AimUp
• Legal and safety: to comply with law or protect rights/safety
• Business transfers: if we are involved in a merger/acquisition/asset sale (we will provide notice as required)

7. Data Retention

We retain personal data as follows (unless a longer period is required by law):

• Active account data: retained while your account is active
• After account deletion: we delete or de-identify your personal data within a reasonable period, generally within 30 days, except where retention is required for legal, tax, fraud prevention, or backup integrity purposes
• Backups: may persist for a limited period before being overwritten or purged on a rolling schedule

Google Calendar integration data:

If you disconnect Google Calendar, we stop ongoing access and will delete or de-identify stored sync data associated with the integration within a reasonable period, except where required for security, compliance, or dispute resolution.

8. Google API Services Disclosure & Limited Use

AimUp's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8.1 How We Use Google Calendar Data

We use Google Calendar data only to provide or improve user-facing features that are prominent in the AimUp user interface, such as:

• Showing your calendar schedule inside AimUp
• Finding available time for scheduling
• Creating, updating, and deleting time blocks you choose to schedule
• Conflict detection and sync reliability

8.2 No Ads / No Sale

We do not use Google Calendar data for advertising, and we do not sell Google user data.

8.3 Sharing / Transfers

We do not transfer Google Calendar data to third parties except:

• As necessary to provide the Services you request (e.g., hosting and secure storage providers acting on our instructions), or
• For security purposes, legal compliance, or business transfers as described in this Privacy Policy

8.4 Human Access Restrictions

We do not allow humans to read your Google Calendar data except:

• With your affirmative consent (for example, if you ask support to troubleshoot a specific issue and you explicitly authorize access),
• As necessary for security purposes (for example, investigating abuse), or
• To comply with applicable law

8.5 Revoking Access

You can stop AimUp's access to Google Calendar any time by:

1. Disconnecting Google Calendar from within AimUp settings (recommended), and/or
2. Revoking AimUp's access in your Google Account permissions page

9. Your Rights and Choices

9.1 Account Controls

You can generally:

• Access and update your profile information
• Export your data (where available)
• Delete your account (self-service where available, or by contacting us)

9.2 Data Deletion Requests

You may request deletion by:

• Using in-app deletion controls (if available), or
• Emailing us at privacy@aimuplife.com with the subject "Data Deletion Request"

9.3 Marketing Opt-Out

You can unsubscribe from marketing emails at any time using the unsubscribe link in the email.

9.4 Regional Rights (GDPR / UK / Switzerland)

If you are in the EEA/UK/Switzerland, you may have rights including access, correction, deletion, portability, restriction, and objection. You may also lodge a complaint with your local supervisory authority.

9.5 California Rights (CCPA/CPRA)

California residents may have rights to know, access, delete, and correct personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

10. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect your information (for example: encryption in transit, access controls, and monitoring). No method of transmission or storage is 100% secure.

If you believe you have discovered a security vulnerability, please email security@aimuplife.com.

11. Children's Privacy

AimUp is not intended for children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child provided personal information, contact privacy@aimuplife.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date and may provide additional notice (e.g., email or in-app notice).

13. Contact Us

If you have questions or requests related to privacy, contact:

We aim to respond to privacy inquiries within 30 days.