Privacy policy

Information we collect

We collect information you provide directly or create while using Carousel, including:

• Account information, such as your email address or Apple or Google sign-in identifier.
• Profile and couple workspace details, such as partner names and member roles.
• Loop content, including titles, notes, owners, dates, priorities, costs, attachments, and status.
• Partner invite information, such as invite tokens, inviter details, and acceptance status.
• Notification settings, push tokens, device platform, app version, and delivery status.
• Calendar connection information, including the provider you select and credentials needed to keep Google Calendar connected.
• Subscription and access information, such as App Store product identifiers, purchase and expiration dates, trial or promotional status, renewal state, and a Carousel account identifier used to match access to the correct user and workspace. Carousel does not receive your full payment-card details.
• Basic analytics and diagnostic information, such as app screens, website visits, feature events, crash data, and device context.

How we use information

We use this information to operate and improve Carousel, including to:

• Create and maintain your account and shared couple workspace.
• Sync loops, history, partner activity, invites, and reminders across devices.
• Send authentication emails, push notifications, and reminder notifications.
• Turn your Create text into shared Loops, using built-in text rules and AI when those rules need help, following your onboarding acceptance.
• Understand reliability, website and app usage, crashes, and product quality.
• Respond to support requests, protect Carousel from misuse, and comply with legal obligations.

Website information

When you visit Carousel’s public website, hosting providers may process standard technical information such as IP address, browser type, requested pages, and timestamps for security, reliability, and aggregate traffic measurement. If Carousel adds optional analytics, forms, or email updates, this policy will be updated to identify the information collected and the providers involved.

Service providers

Carousel uses service providers to run the app and website. These currently include Supabase for authentication, database, storage, and serverless functions; Resend for authentication-email delivery; Expo for builds and push notification delivery; PostHog for product analytics; Sentry for crash reporting; OpenAI for AI-assisted loop interpretation; Apple and Google for account sign-in and optional calendar connections; Apple for TestFlight and App Store subscription billing; RevenueCat for subscription status, purchase restoration, and paywall delivery; and Vercel for public web pages and universal link files.

Service providers that receive personal information from Carousel must provide protection at least equivalent to the commitments in this policy and the applicable App Store privacy requirements. They may process that information only for the disclosed services and purposes, subject to applicable legal obligations.

AI processing and your permission

Carousel turns what you write into shared Loops. We first use built-in text rules to recognize the details in your request. When those rules cannot interpret it, AI helps us understand your wording and create a more accurate Loop.

When AI is needed, we send the full text you submit in Create, including any clarifications, to OpenAI, our AI provider. We also include the shared planning context needed to understand who the Loop is for and when it should happen. That can include personal information about you, your partner, or anyone mentioned in your request.

Carousel does not send information obtained through Google Calendar APIs to OpenAI. AI interpretation uses the Create text and planning context described above, not events or other information from your Google Calendar. If a request needs information from the web, OpenAI may search using terms based on your text.

AI processing is part of using Carousel. Each partner must accept the AI disclosure during onboarding before using AI-assisted creation. Reading the details, creating an account, or buying a subscription does not by itself record that acceptance.

After you agree, AI remains enabled while you use Carousel. There is no setting to turn AI off. You can read this policy through Settings > Privacy Policy. If you no longer want to use Carousel with AI processing, you can stop using the app or request account deletion in Settings. Deleting your account does not cancel an Apple subscription; manage billing through Apple.

We ask OpenAI not to store response history. Some data may still be retained under its data policies, including for abuse monitoring. OpenAI API data is not used for model training by default. See OpenAI data controls for retention periods and exceptions. Permission to interpret your request is not permission to train models.

Deleting your Carousel account does not immediately erase information already held in provider logs. Those records follow the provider's retention rules. Contact us using the address below about deleting information sent through Carousel.

We keep a record of your AI acceptance and its history while your account exists, and delete that record when you delete your account. It records which disclosure you agreed to and when acceptance was recorded, without storing Loop text or partner names. If we change the AI provider, the information shared, or its purpose in a way that requires new permission, we will explain the change and ask you to agree before processing under it. Editing the wording alone does not reset your permission.

Calendar and notifications

Carousel connects to Apple Calendar or Google Calendar only when you choose that feature, and only one calendar provider can be active at a time. Calendar access is used to add, update, find, or remove events associated with Carousel Loops. Carousel does not import or use your other calendar events. Apple Calendar changes happen on your device. For Google Calendar, Carousel stores an encrypted refresh token and the event identifiers and sync information needed to keep Carousel events up to date. Notification access is used to register your device and deliver reminders or partner activity notifications.

Carousel’s use of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Carousel does not sell Google Calendar data, use it for advertising, send it to OpenAI, or use it to train or improve artificial intelligence or machine-learning models.

Sharing

Carousel is built for shared couple workspaces. Content in a shared workspace can be visible to the other partner in that workspace. We do not sell your personal information.

Retention and deletion

We keep information for as long as needed to provide Carousel, maintain security, resolve issues, or meet legal obligations. You can request account deletion in the app settings. Deletion removes your profile, membership, Loops you created, older Loops without a recorded creator, and your uploaded attachments. Your partner keeps Loops they created, including shared edits. When the last partner leaves, the remaining workspace is removed. Contact us about personal information in a retained partner Loop. Account access ends when a deletion request is accepted; you are signed out to the welcome page while cleanup continues separately. See the account deletion guide for instructions.

We retain the minimum working information needed to retry incomplete deletion tasks. Those tasks can include file removal, calendar authorization, analytics erasure, and subscription-provider cleanup. Completing account deletion does not cancel Apple billing. Deleting the paying account ends shared subscription access immediately. The remaining partner can subscribe to regain access to their existing account. Deleting a non-paying account leaves the payer’s access unchanged. Limited subscription evidence may remain to prevent reuse of a consumed promotional approval.

Copies already made by another person, calendar copies on disconnected devices, provider security logs, support correspondence, and backup copies may not disappear at the same time as active account data. Contact us for the retention and deletion status of a specific record. We do not restore deleted personal content to an active account when recovering service from a backup.

Your choices

You can read this policy in Settings > Privacy Policy. AI processing remains enabled after onboarding acceptance. You can turn notifications on or off in Carousel and in your device settings. You can revoke Apple Calendar access in iOS Settings, disconnect Google Calendar in Carousel, or revoke Carousel from your Google Account permissions. You can sign out or request account deletion from Carousel settings.

Children

Carousel is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this policy as Carousel changes. When we do, we will update the effective date above and provide additional notice when required by law.

Contact

For privacy questions, contact matthew@tryspindle.app.