Privacy Policy

Meezyo LLC

This Privacy Policy explains how Meezyo LLC collects, uses, discloses, retains, and protects information when you use our mobile applications, websites, backend services, purchase features, support channels, and related services that link to this policy.

Last updated: August 20, 2026 Current published version

Privacy contact: [email protected]

• Scope
• Information We Collect
• Feature-Specific Data
• Device Permissions
• Google Calendar and Google User Data
• How We Use Information
• Legal Bases
• AI and Automated Processing
• Human Access to Your Content
• Local Processing
• How We Share Information
• Advertising and Attribution
• Retention and Deletion
• Your Choices and Rights
• Children's Privacy
• Security
• International Processing
• App Store and Google Play Disclosures
• Changes to This Policy
• Contact

1. Scope

This policy applies to mobile applications and related services published by Meezyo LLC, including Onit, our to-do, planning, and notes application. It covers information processed through the relevant app, app settings, app stores, in-app purchases, subscriptions, credits or coins, content generation features, uploads, connected accounts, support messages, diagnostics, analytics, security systems, and account or app profile management.

The exact information processed depends on the app you use, your device platform, your region, your settings, permissions you grant, connected accounts you authorize, and the features you choose. If an app or feature displays an additional notice, that notice should be read together with this policy.

Because this policy covers more than one application, some sections describe features that are not present in every app. Sections that apply specifically to Onit are labeled as such. Sections 5 (Google Calendar and Google User Data), 8 (AI and Automated Processing), and 9 (Human Access to Your Content) contain the commitments that apply to Onit's connected-account and AI features.

2. Information We Collect

Depending on the relevant app and features you use, we may collect, create, receive, or process the categories of information below.

• Account, authentication, and identifiers: internal user IDs, anonymous account IDs, Firebase or similar authentication IDs, app instance IDs, device or vendor identifiers, RevenueCat or purchase-management IDs, authentication tokens, account status, sign-in state, app profile state, support IDs, and related security records.
• Contact and support information: email address, message content, screenshots, attachments, support request details, and information needed to respond to privacy, account, purchase, refund, or technical requests.
• User content and inputs: text, prompts, instructions, documents, files, images, photos, uploads, profile details, preferences, notes, generated outputs, saved history, edits, exports, ratings, summaries, recommendations, and other content you choose to submit, create, store, or process.
• Tasks, planning, and scheduling content (Onit): task titles, descriptions, notes, subtasks and steps, categories and lists, priority, status, dates, start and end times, estimated and actual durations, reminder and alarm settings, locations you attach to a task, travel-time estimates, attachments you add to a task, generated outputs saved to a task, notes you write in the Notes tab, and your history of completing, editing, rescheduling, or deleting these items.
• Connected calendar and reminder data (Onit): calendar and reminder information you authorize Onit to read or write, including event titles, descriptions, dates, times, time zones, recurrence, locations, busy or free status, calendar names and identifiers, event identifiers, organizer and participant details contained in those events, and the account identifier of the calendar you connected. See Section 5 for Google-specific detail.
• Voice and audio input, where you use it (Onit): the audio you record when you press to speak, the resulting transcript, and related processing metadata.
• Location information, where you allow it (Onit): approximate or precise device location used to estimate travel time, suggest nearby places, or check the weather window for a task you are planning.
• Purchase, subscription, credit, and coin information: product identifiers, transaction identifiers, purchase dates, renewal, expiration, trial, entitlement, refund, restore-purchase, premium status, credit or coin balance, credit or coin usage, chargeback, fraud-prevention, and accounting records. We do not receive your full payment card number from Apple or Google.
• Device, app, usage, diagnostics, and network data: device model, operating system, app version, build number, language, timezone, approximate region, app launches, screen views, taps, feature usage, session activity, permission status, crash logs, error logs, stack traces, performance data, request time, endpoint, status code, IP address, headers needed to operate and secure the service, and related technical metadata.
• Advertising, attribution, and tracking data, if enabled: advertising identifiers, App Tracking Transparency status, tracking preference, campaign attribution, ad impressions, ad interactions, conversion events, and related measurement data, subject to applicable consent and platform rules.

3. Feature-Specific Data

Some apps include optional features that process additional information only when you choose to use those features.

• Document, career, and profile features: name, email address, phone number, city, country, public profile links, job title, professional summary, work experience, education, skills, achievements, certifications, projects, languages, resume or CV content, formatting choices, generated document versions, and related metadata.
• Photo, image, and analysis features: selected or captured photos, image files, generated image URLs, file metadata, content type, file size, original file name if provided by the device, upload timestamps, image-analysis requests, scores, summaries, recommendations, and history. Some features may use on-device checks, such as verifying that a selected image contains a face, before upload. Face-related processing is used to validate or analyze the content you choose to submit and is not intended to identify who you are.
• Personalization and entertainment features: birth date, birth time, birth city, birth country, gender, relationship status, occupation, life focus areas, personal notes, preferred tone, dream descriptions, partner details, selected language, selected reading or analysis type, generated text, status, and timestamps.
• Device utility features: battery, device, or system information shown inside an app may stay on your device where the feature is designed for local display. If such information is not transmitted to us, we do not receive it as personal information.

Tasks, Notes, and Everyday Life Details (Onit)

Onit is a to-do, planning, and notes application. By its nature, it receives ordinary details about how you spend your time. Depending entirely on what you choose to write, this can include when you wake up and go to sleep, when and what you eat, when you exercise, when you travel and where, who you are meeting, what you are studying, what you are buying, when you have appointments, and what you intend to do for your family, your household, or your work.

We treat this content as your private content. Specifically, for Onit:

• We do not sell it, and we do not share it for cross-context behavioral advertising.
• We do not use it for advertising, ad targeting, ad measurement, or to build advertising or marketing profiles about you.
• We do not use it to train or improve generalized artificial intelligence or machine learning models, whether our own or a provider's.
• We do not make it visible to other users. Onit has no social feed, public profile, or content-sharing surface. Content leaves your account only when you personally choose to copy, export, share, or send it.
• We do not read it manually except in the narrow circumstances described in Section 9.

Sensitive Details Inside Your Own Content (Onit)

Because you decide what to write, a task, reminder, note, calendar entry, or attachment may reveal information that privacy laws treat as sensitive or as a special category — for example, health or medical appointments, medication, therapy or counseling, pregnancy, religious observance, political activity, trade union activity, sex life or sexual orientation, racial or ethnic origin, immigration matters, financial difficulty, or information about your children.

We do not ask you for this information, we do not require it in order to use Onit, and we do not use it to categorize, score, segment, or profile you. Where such information is processed because you placed it in your own content, and applicable law treats it as a special category, we rely on your explicit consent, given by choosing to enter that content into the app for the purpose of the feature you are using. You may withdraw that consent at any time by deleting the content, deleting your account, or turning off the relevant feature.

If you would prefer not to store a particular detail with us, you can write a neutral title instead, keep the detail off the task, or use Onit's manual features without AI processing.

Information About Other People (Onit)

Your tasks, notes, attachments, and connected calendar events may contain information about people other than you — for example, the names and email addresses of people invited to a meeting, a colleague named in a note, a family member's appointment, a client's details inside a document you attach, or a contact you plan to follow up with.

We process that information only to display it back to you and to operate the feature you asked for. We do not use it to build standalone profiles of those individuals, we do not add them to any marketing list or contact database, we do not market to them, and we do not sell or license it. You are responsible for having an appropriate basis to enter another person's information into the app, and for complying with any confidentiality or employment obligations you owe to others.

Voice Input and Transcription (Onit)

Onit lets you capture a task or a note by speaking. Audio is recorded only while you actively hold or activate the voice control. The recording is sent to a speech-to-text provider to convert it into text so that Onit can build the task or note you asked for.

We do not create voiceprints, voice templates, or other biometric identifiers from your audio. We do not use audio to identify you, to authenticate you, or to determine who is speaking. Audio is used only to produce the transcript for the request you made. Unless the relevant feature clearly states otherwise, the audio recording is deleted after transcription completes and only the resulting text is retained as part of your content.

Location, Travel Time, and Weather (Onit)

Where you grant location permission, Onit may use your approximate or precise location to estimate travel time to a place attached to a task, to suggest a nearby location, or to check the weather window for an outdoor task you are planning.

Location is used at the time you plan or open the relevant task. Onit does not run continuous background location tracking, does not build a location history for advertising, and does not sell location information. You can deny or later revoke location permission in your device settings; the affected features will simply not appear.

Reminders, Notifications, and Your Lock Screen (Onit)

If you enable notifications, reminder text you wrote may be displayed on your device's lock screen or in notification previews. Onit does not control how your device displays previews. If a reminder would reveal something you would rather keep private, you can change notification previews in your device settings, or write a less specific reminder title.

Attachments and Uploaded Documents (Onit)

You may attach documents, photos, or audio to a task or a note so that Onit can work on them. Attachments may contain information belonging to your employer, your school, a client, or another person. Only attach material you are permitted to share and process, and remove material you are not permitted to upload.

Photos and Face-Related Content

Some Meezyo apps may allow users to take or upload photos for app features such as photo feedback, image analysis, AI-generated results, or personalized recommendations.

When an app uses face-related photo features, the app may process a selected photo to check whether it contains a face or to generate the feature requested by the user. This processing is used only to provide the app feature selected by the user.

Unless clearly stated in the app, Meezyo does not use face-related content for identity verification, face recognition, authentication, surveillance, advertising, tracking, or data brokerage.

Data by Feature

The table below summarizes common data practices across our mobile applications. A specific app may use only some of these categories, depending on the features available and the features you choose to use.

Do not submit sensitive information unless it is necessary for the feature you choose to use and you understand that it will be processed to provide that feature. Depending on your location and context, photos, face-related content, birth details, relationship details, dreams, personal notes, professional history, health information, financial information, government identifiers, precise home address, political or religious views, union membership, biometric data, or similar information may be sensitive.

4. Device Permissions

Some apps may request device permissions only when needed for a feature. Permissions may include camera, photo library or gallery, files, notifications, microphone, speech recognition, calendar, reminders, location, tracking permission, or similar platform-controlled access.

Camera and photo permissions are used when you choose to capture or select media. Microphone and speech-recognition permissions are used only while you are actively recording a voice input. Calendar and reminder permissions are used to display your existing schedule inside the app and, where you ask for it, to write an event or reminder you created. Location permission is used to estimate travel time, suggest a nearby place, or check a weather window. Notification permissions are used only if you allow reminders, updates, offers, or service messages. Tracking permission is requested where required before accessing identifiers or using data for tracking.

You can allow, deny, or later change permissions in your device settings. Some features may not work if a required permission is denied. Onit's manual to-do, calendar view, and notes features do not require you to grant calendar, location, microphone, or tracking permission.

5. Google Calendar and Google User Data

This section applies to Onit and describes how Onit accesses, uses, stores, shares, and deletes data obtained through Google APIs.

5.1 Limited Use affirmation

Onit's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

5.2 The connection is optional and off by default

Google Calendar sync is an optional feature. It is switched off until you turn it on from Onit's settings and complete Google's own authorization screen. Onit's to-do list, calendar view, notes, and reminders all work without connecting any Google account. You are never required to sign in with Google to create an account or to use Onit.

Before Google's authorization screen appears, Onit shows you an in-app notice that names the data Onit will request and explains what it will be used for. You must actively accept that notice. Continuing to use the app, dismissing the notice, or navigating away is not treated as consent.

5.3 What Google data Onit requests, and why

Onit requests no other Google scopes. Onit does not request access to Gmail, Google Drive, Google Contacts, Google Photos, Google Chat, Google Meet, Google Tasks, or any other Google service.

5.4 The specific Google data Onit receives

From the calendars you authorize, Onit may receive: event titles and descriptions; start and end times; time zones; all-day flags; recurrence rules; event locations; busy or free status; calendar names, colors, and identifiers; event identifiers; the organizer of an event; the names and email addresses of people invited to an event; response status; reminder settings attached to the event; and the email address of the connected Google Account.

5.5 How Onit uses Google user data

Onit uses Google user data only to provide and improve the user-facing features that are visible and prominent in the app:

• Displaying your existing events in Onit's Calendar view alongside your Onit tasks.
• Showing your real availability so that Onit does not suggest a time when you are already booked, and so that scheduling suggestions are realistic.
• Where you ask for it, creating, updating, or deleting a calendar event that corresponds to an Onit task, and keeping that event in step with the task.
• Where you use Onit's AI planning features and have consented to AI processing, using the relevant calendar context to answer a scheduling question you asked or to propose a time for a task you are planning. This is described in Section 8.

All other uses of Google user data are prohibited and are not carried out.

5.6 What Onit never does with Google user data

• We do not sell Google user data, and we do not transfer it to advertising platforms, data brokers, or information resellers.
• We do not use or transfer Google user data to serve advertising of any kind, including retargeting, personalized, or interest-based advertising.
• We do not use Google user data to determine credit-worthiness or for lending purposes.
• We do not use or transfer Google user data to create, train, or improve any machine learning or artificial intelligence model, other than a model personalized to you for the specific user-facing feature you are using. Google user data is never included in a training corpus, a fine-tuning dataset, or a generalized model of any kind, whether ours or a provider's.
• We do not build a separate database, archive, index, or permanent copy of your Google calendar, and we do not scrape Google services.
• We do not allow our staff to read your Google user data, except in the limited circumstances described in Section 9.
• We do not use Google user data to profile the other people named in your events.

5.7 How Onit stores Google user data

Onit keeps the minimum event data needed to render your Calendar view and to run the scheduling features you use. That data is refreshed from Google rather than retained as an independent archive, and cached copies are not kept beyond what is needed to display the current view. Onit does not maintain a long-term historical copy of your Google calendar.

Google user data is encrypted in transit using modern secure protocols and encrypted at rest on our systems. OAuth access tokens and refresh tokens are encrypted at rest and are held in a dedicated credential store with restricted access. Keys and key material are managed through a hardware security module or an equivalent-strength key management system.

5.8 How Onit shares Google user data

Onit shares Google user data only where the Limited Use requirements permit it:

• With infrastructure providers acting on our behalf, strictly to operate the user-facing calendar features described above, under written agreements that limit their use of the data to providing the service to us and that require protections the same as or equal to those in this policy.
• Where you have enabled AI features and consented to AI processing, with the AI provider that produces the specific output you requested, only to the extent needed to generate that output, and under terms that prohibit the provider from using the data to train or improve its models. See Section 8.
• For security purposes, such as investigating abuse.
• To comply with applicable laws and regulations.
• As part of a merger, acquisition, or sale of assets, only after obtaining your explicit prior consent.

Google user data is not transferred for any other purpose.

5.9 How to disconnect, and what happens when you do

You can disconnect Google Calendar at any time from Settings → Calendar & Reminder sync inside Onit, and you can revoke Onit's access at any time from your Google Account at myaccount.google.com/permissions.

When you disconnect or revoke access:

• Onit stops requesting data from Google immediately.
• Stored OAuth tokens are deleted immediately.
• Cached Google event data is deleted from active systems within 7 days, and from routine backups within 30 days.
• Events that Onit previously wrote to your Google Calendar at your request remain in your Google Calendar, because they are yours. You can delete them in Google Calendar.
• Tasks you created inside Onit remain in Onit, because they are your Onit content, not Google user data.

Deleting your Onit account deletes stored Google user data on the same schedule.

5.10 Information about other people in your calendar

Google calendar events often contain other people's names and email addresses. Onit displays those details back to you as part of the event and uses them for nothing else. Onit does not extract them into a contact list, does not build profiles of those people, does not contact them, and does not sell or transfer that information. You are responsible for having an appropriate basis to connect a calendar that contains other people's information, including any obligations you owe to an employer or organization whose calendar you connect.

5.11 If our use of Google user data changes

If we want to access a type of Google user data that this policy does not already describe, or to use it for a purpose this policy does not already describe, we will update this policy and ask you to consent to the change before we access or use the data in that new way.

5.12 Questions about Google data

For questions specifically about Onit's handling of Google user data, or to request deletion of Google user data we hold, contact [email protected] with the subject line "Google data request."

6. How We Use Information

We use information to:

• Provide, operate, maintain, localize, and secure our apps.
• Authenticate app sessions and connect saved content, purchases, subscriptions, credits, coins, settings, and entitlements to the correct app profile.
• Create, process, upload, store, display, generate, analyze, summarize, edit, export, or restore content requested by you.
• Store, organize, and display your tasks, steps, lists, notes, reminders, and calendar view; deliver reminders and notifications you set; estimate realistic durations and travel times; and keep your content in step across your own devices.
• Operate optional connected-account features, including calendar and reminder synchronization, strictly as described in Section 5.
• Manage subscriptions, in-app purchases, premium access, credit or coin balances, restore purchases, refunds, chargebacks, entitlement checks, and refund-support evidence.
• Understand app usage, diagnose crashes, fix bugs, measure performance, improve flows, paywalls, templates, generation quality, reliability, and future features.
• Send support responses, service messages, security notices, purchase-related notices, legal updates, and operational communications.
• Detect, prevent, and respond to fraud, abuse, unauthorized access, refund misuse, policy violations, security incidents, or technical issues.
• Comply with legal, tax, accounting, app store, regulatory, consumer-protection, and dispute-resolution obligations.

What we do not use your content for

For clarity, and in addition to the specific commitments in Sections 3, 5, and 8, we do not use your tasks, notes, calendar data, attachments, voice input, or generated outputs to:

• Sell to any third party, or share for cross-context behavioral advertising.
• Serve, target, retarget, or measure advertising.
• Build advertising, marketing, or interest profiles about you or about other people named in your content.
• Train or improve generalized artificial intelligence or machine learning models.
• Determine credit-worthiness, eligibility, insurance, or employment outcomes.
• Make decisions about you that produce legal effects or similarly significant effects.

7. Legal Bases Where Required

Where applicable law requires a legal basis, we process personal information under one or more of the following bases: contract, to provide the relevant app and paid features; consent, for optional permissions, connected accounts, AI processing, tracking, notifications, or certain communications where required; legitimate interests, to operate, analyze, improve, secure, and protect our apps; and legal obligation, to comply with laws, app store requirements, accounting, tax, refund, audit, and regulatory duties.

Where your own content includes information that applicable law treats as a special category — for example health, religious belief, political opinion, trade union membership, or sex life or sexual orientation — we rely on your explicit consent, given by choosing to enter that content for the feature you are using. You can withdraw that consent by deleting the content, turning off the relevant feature, or deleting your account. Withdrawal does not affect processing that already took place.

8. AI and Automated Processing

Some apps may use automated systems, artificial intelligence, or machine learning providers to generate, analyze, edit, summarize, classify, translate, format, score, or recommend content based on information you submit.

8.1 AI is optional and requires your permission

In Onit, AI processing is optional. Creating, editing, completing, and organizing tasks manually, viewing your calendar, writing notes, and setting reminders do not send your content to any AI provider.

Before Onit sends your content to a third-party AI provider for the first time, it shows you an in-app notice that names the categories of data that will be sent and names the third parties that will receive it, and asks for your permission. The consent control is not pre-selected, and continuing to use the app is not treated as permission. You can withdraw that permission at any time in Onit's settings, after which Onit's AI features stop sending your content and the manual features continue to work.

8.2 What is sent, and to whom

When you use an AI feature, Onit may send the relevant parts of the following to a third-party AI provider: the text of the task or note you are working on, its dates and times, the instruction or question you typed or spoke, documents, images, or audio you attached, the transcript of a voice input, prior messages in that task's AI conversation, and — where you have connected a calendar and asked a scheduling question — the relevant calendar context.

The third-party providers that may receive this content are:

Onit does not send your content to any AI provider other than those listed here. If we add or change a provider, we will update this policy and ask for your permission before sending your content to the new provider.

8.3 Our commitments on AI processing

• No training. We instruct each AI provider not to use your inputs or the resulting outputs to train, fine-tune, or improve its models, and we use the API configurations and written terms available to us that are designed to enforce this. We do not use your content to train models of our own.
• Equal protection. We require every third party that processes personal information on our behalf, including each AI provider, to provide protections that are the same as or equal to those described in this policy, through written agreements that limit their use of the information to providing the service to us.
• Purpose limitation. Content is sent only to produce the specific output you requested, and only the parts needed for that request.
• No advertising use. Content sent to AI providers is never used for advertising or ad measurement.
• Google data. Where the request involves Google user data, the additional restrictions in Section 5 apply and take precedence.

8.4 Accuracy and your review

AI-generated results may be inaccurate, incomplete, unexpected, subjective, or unsuitable for your circumstances. You are responsible for reviewing them before relying on or sharing them. Onit's AI may also propose changes inside the app — for example proposing a task, a step, a reminder, or a calendar event. Proposals are shown to you for confirmation, and actions taken on your behalf can be reviewed and undone.

We do not use automated processing to make decisions about you that produce legal effects or similarly significant effects.

8.5 Content that tries to manipulate the AI

Material you add to a task — including uploaded documents, calendar event text, transcripts, and content retrieved from the web — may contain hidden or embedded instructions intended to manipulate an AI system into behaving in a way you did not ask for. We apply filtering, isolation, and other controls designed to prevent content of this kind from causing Onit to take actions you did not request or to disclose your information. No control of this type is perfect, which is one reason Onit asks you to confirm actions rather than performing them silently.

8.6 Identity and biometrics

Unless a specific app feature clearly states otherwise, we do not use uploaded photos, face-related content, audio, documents, or prompts to identify you, authenticate your identity, create biometric identity templates or voiceprints, or determine a real-world identity. Face-related processing, where used, is for validation, generation, analysis, safety, or quality checks related to the feature you requested.

9. Human Access to Your Content

We design our systems so that your tasks, notes, calendar data, attachments, and generated outputs are processed automatically and are not read by people.

Our personnel and our service providers' personnel do not read your content, except where:

• You ask us to. For example, you send us a support request and give us specific permission to look at a particular task, note, file, or error so that we can help you.
• It is necessary for security. For example, investigating a suspected security incident, abuse, fraud, or a specific bug that we cannot reproduce otherwise.
• It is necessary to comply with applicable law, including responding to valid legal process.
• The information is aggregated and anonymized and used for internal operations, in accordance with applicable privacy and other legal requirements.

Access in these cases is limited to the personnel who need it, is limited to the data needed, and is logged. For Google user data, these are the only permitted circumstances under the Google API Services User Data Policy, and we apply them as written above.

10. Local Processing and No-Collection Features

Some features may process information locally on your device and may not transmit that information to us. For example, an app may display device or battery-related information locally, validate an image before upload, or keep certain preferences on your device. Where data stays on your device and is not sent to us or our service providers, we do not collect that data.

Local processing does not prevent app stores, operating systems, or third-party services from processing their own account, device, purchase, diagnostic, or security information under their own terms and privacy policies.

11. How We Share Information

We do not sell personal information. We do not share your tasks, notes, calendar data, attachments, or voice input for advertising, tracking, or data brokerage. We do not share uploaded photos or face-related content for advertising, tracking, or data brokerage. We may use service providers only as needed to operate our apps.

We require every third party that processes personal information on our behalf to provide protections that are the same as or equal to those described in this policy, through written agreements that limit their use of the information to providing the service to us and that prohibit any independent use of your content.

We may share information with the categories of recipients below when needed for the purposes described in this policy.

• Service providers and processors: hosting, backend infrastructure, databases, cloud storage, Cloudflare R2 or similar object storage, Firebase and Google services, authentication, analytics, Crashlytics or crash reporting, Remote Config or configuration tools, RevenueCat or purchase management, receipt validation, AI providers as named in Section 8, speech-to-text providers, monitoring, security, email, and support providers.
• App stores and payment providers: Apple App Store, Google Play, and related purchase or subscription systems for billing, purchases, refunds, restores, entitlement management, fraud prevention, and store compliance.
• Connected services you authorize: where you connect a calendar or reminder account, the relevant provider, strictly as described in Section 5.
• Advertising and attribution partners, if enabled: ad networks, attribution providers, analytics tools, or campaign measurement providers used to measure campaigns or show ads, subject to applicable consent and platform requirements. Your tasks, notes, calendar data, attachments, and voice input are never shared with these partners.
• Legal, safety, and compliance recipients: authorities, advisors, app stores, payment providers, or other parties where reasonably necessary to comply with law, respond to legal process, enforce terms, protect rights and safety, investigate fraud or abuse, or respond to lawful requests.
• Business transfers: information may be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction, subject to appropriate protections. Where the information includes Google user data, we will obtain your explicit prior consent.

Service Providers and Platform Partners

12. Advertising and Attribution

Some apps may display ads, measure advertising performance, or use attribution tools. Where required, the app will request platform permission before accessing identifiers or using data for tracking. You can manage tracking, advertising, and related privacy choices through your device settings and any in-app controls that are available.

Onit does not display advertising inside the app, and Onit's tasks, notes, calendar data, attachments, voice input, and generated outputs are never used for advertising, ad targeting, ad measurement, or profile building, and are never shared with advertising or attribution partners. Where campaign measurement is used for app installs, it operates on install and campaign signals only.

If a particular app does not include advertising, ad attribution, or tracking features, this section applies only if those features are later enabled and disclosed as required by the applicable app store and privacy rules.

13. Retention and Deletion

We retain information for as long as reasonably necessary to provide the relevant app, maintain saved content and app state, support purchases and refunds, prevent fraud and abuse, resolve disputes, comply with law, keep business records, maintain security, and enforce our terms.

• Your tasks, notes, steps, reminders, attachments, and generated outputs are retained while your app profile or account remains active. Deleting an item in the app removes it from your account. Deleting your account removes this content on the schedule below.
• Connected calendar data is retained only while the connection is active, and is deleted on the schedule described in Section 5.9.
• Voice recordings are deleted after transcription. The resulting transcript is retained as part of your content until you delete it.
• Some uploads or generated files may be deleted after processing when the relevant feature is designed for temporary processing. Other uploads, generated outputs, history records, ratings, summaries, or document libraries may be retained to provide saved history, continuity, downloads, or account features unless deletion is requested or product policy changes.
• Purchase, subscription, entitlement, refund, accounting, tax, audit, app store, and fraud-prevention records may be retained for the period required or permitted for legal, store, security, and business purposes.
• Analytics, diagnostics, crash, performance, remote configuration, and security records may be retained according to operational needs and provider settings.
• Support messages may be retained as needed to respond to your request and maintain support records.
• Backup copies may remain for a limited period before being overwritten according to normal backup cycles, and in any event no longer than 30 days for content deleted at your request.

How to delete your data

You can delete your account and its associated content from inside the app, at Settings → Account & Subscription → Delete account. Deletion removes your tasks, notes, attachments, generated outputs, and any stored connected-calendar data from active systems, and from routine backups within 30 days.

You can also request deletion by contacting [email protected]. Include enough information for us to identify the relevant app profile, such as the app name, platform, support identifier, user ID, or purchase information if available. Deleting an app from your device does not delete server-side information and does not cancel an active subscription.

Limited information may be retained where legally required or permitted, such as purchase and tax records, fraud-prevention signals, and records needed to resolve a dispute.

14. Your Choices and Rights

Depending on your location and applicable law, including U.S. state privacy laws, California-style privacy rights, the EEA, the UK, Switzerland, or similar regions, you may have the right to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or opt out of certain sale, sharing, targeted advertising, analytics, marketing, or tracking activities. You may also have the right to appeal a decision or lodge a complaint with a data protection authority.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising.

Inside Onit you can, at any time:

• Turn AI features off, which stops your content being sent to any AI provider.
• Disconnect a connected calendar, and separately revoke access from your Google Account.
• Turn off location, microphone, notification, calendar, and reminder permissions in your device settings.
• Delete an individual task, note, attachment, or generated output.
• Export your content.
• Delete your account and its content.

You can manage many other choices through your device, platform, or app store settings, including permissions, tracking, notifications, subscriptions, purchase history, and advertising preferences. To submit a privacy request, contact [email protected]. We may need to verify your request before acting on it, and we may retain limited information where legally permitted or required for security, fraud prevention, purchases, accounting, dispute resolution, or compliance.

15. Children's Privacy

Our mobile applications are not directed to children under 13. If the law in your location requires a higher minimum age for digital services, you must meet that higher age requirement. We do not knowingly collect personal information from children under 13.

Onit is a general-audience productivity application. It does not use Google Sign-In or any Google API Service as a child-directed feature, and it does not require any user to sign in to a Google Account in order to use the app.

Adults using Onit may write tasks or notes that mention a child, for example a school pickup or a family appointment. That content is treated as the adult account holder's own content under this policy, is not used to build a profile of the child, and is not shared or sold.

If you believe a child has provided personal information to us, contact [email protected] and we will take appropriate steps to review and delete the information where required.

16. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These measures include:

• Encryption of data in transit using modern secure protocols.
• Encryption of user data at rest on our systems.
• Encryption at rest of authentication credentials, including OAuth access tokens and refresh tokens for connected accounts, held in a credential store with restricted access.
• Key and key-material management through a hardware security module or an equivalent-strength key management system.
• Role-based access controls, least-privilege access, and logging of access to production systems.
• Controls designed to detect and mitigate prompt-injection and similar attempts to manipulate AI processing using content supplied to the app.
• Monitoring, provider security controls, and internal review of data handling practices.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You should only upload content or enter information that you are comfortable sharing for the app feature you choose to use.

If we become aware of a security incident affecting data obtained from a connected Google Account, we will notify Google at [email protected] and cooperate as required by the Google API Services User Data Policy, in addition to any notification we owe you or a regulator.

17. International Processing

We and our service providers may process information in countries or regions other than where you live, including in the United States. Privacy laws may differ across locations. Where required, we use appropriate safeguards for international processing and transfers, including standard contractual clauses where applicable.

18. App Store and Google Play Disclosures

Apple and Google require developers to provide accurate privacy and data safety information for each app. The disclosures shown in App Store Connect, on the App Store product page, in Google Play Console, and on Google Play should reflect the actual data practices of the specific app, including data processed by third-party SDKs and service providers.

Purchases, subscriptions, refunds, account settings, app store account data, and payment details may also be processed by Apple or Google under their own terms and privacy policies. We receive only the limited purchase and entitlement information needed to provide paid features, restore purchases, support refunds, and prevent fraud.

Because this policy is designed to cover multiple apps and feature combinations, the App Store privacy labels and Google Play Data safety answers for a particular app may be narrower or more specific than this policy. Those store disclosures should reflect the actual features, SDKs, permissions, data categories, purposes, sharing, and retention practices enabled for that app at the time they are submitted or updated.

19. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the Last updated date on this page. If changes are material, we may provide additional notice through the relevant app, store listing, or other reasonable channel.

If we change the way an app uses data obtained from a connected account such as Google Calendar, or add a new third-party AI provider, we will notify you and ask for your consent before the new use begins.

20. Contact

For privacy questions, requests, or concerns, contact:

Meezyo LLC [email protected]

For questions specifically about Onit's use of Google user data, use the subject line "Google data request."