Privacy you can actually read

TL;DR

The short version

• We use your account, planner, goal, reflection, and settings data to run the service you asked us to provide.
• Task predictions shown in your workspace are built from your own account data, and we do not intentionally show another person’s planner items in your workspace.
• If you connect Google Calendar or Outlook, we use the calendar data you choose to show those events in your planner.
• If you subscribe to Pro, payments and subscription administration are handled through Stripe.
• Newsletter emails and optional marketing analytics rely on your consent, and you can opt out at any time.

Controller

Cavatim is operated by Your legal entity or controller name.
Address: Replace with your registered business address before publishing.
Privacy contact: support@cavatim.com
DPO (if applicable): Not appointed

Data we collect and where it comes from

• Account data such as your email address, login identifiers, and authentication session details.
• Your workspace data, including goals, planner items, recurring work, habits, notes, reflections, journal entries, workflows, and settings.
• Connected calendar data from Google or Microsoft when you choose to connect those services and select calendars to sync.
• Billing and subscription data such as plan, subscription status, customer IDs, and trial or renewal dates. Card data is handled by Stripe rather than stored by Cavatim.
• Support and communications data, including messages you send us and newsletter signups.
• Technical and security data such as IP address, browser metadata, crash logs, API logs, and optional marketing analytics or cookie-like storage choices.

How we use your data

• Provide the free and Pro planning features, including weekly planning, goal mapping, reflections, recurring work, voice planning, and AI support when enabled.
• Sync your workspace across devices, maintain the server copy of synced data, and create backups and recovery points.
• Show connected Google or Outlook events inside the planner when you choose to connect them.
• Process checkout, subscription, renewal, cancellation, and billing support requests.
• Respond to support requests, diagnose issues, and maintain the security and reliability of the service.
• Send the monthly newsletter if you sign up for it, and keep an unsubscribe record if you opt out.

AI recommendations

AI features use the goals, deadlines, availability, reflections, journal entries, and planner context you choose to provide in order to suggest next steps, summaries, or patterns. AI outputs are assistive only and are not professional, medical, legal, or financial advice.

Current task prediction features are trained on planner history within your own account. Candidate tasks shown in your workspace are intended to come from your own goals, planner items, recurring tasks, workflows, and settings. We do not intentionally show another person's planner items, titles, or task identifiers in your workspace.

If we use shared or aggregate models to improve prediction quality, those models are designed to use de-identified or aggregated behavioural patterns rather than another customer's raw planner items. Any prediction returned to your account should still be selected from your own account's candidate items.

If you choose to add health-related goals, habits, or reflections, that may amount to special category data. Cavatim includes a consent control for that in Settings, and you can withdraw that consent and delete the information at any time.

Legal bases

• Contract: to provide your account, planner, sync, backup, and paid subscription features.
• Legitimate interests: to secure, maintain, improve, and support the service, prevent abuse, and keep audit and reliability records.
• Legal obligation: where we need to keep records for tax, accounting, fraud prevention, or to comply with lawful requests.
• Consent: for the monthly newsletter, optional marketing analytics, and health-related special category data where you choose to enable that processing.

Processors, sharing, and international transfers

We do not sell personal data. We share data only where it is needed to operate the service, take payment, send communications, provide connected integrations, or comply with the law.

• Stripe processes payment details, subscriptions, and billing events for paid plans.
• Email transport providers or server-side mail infrastructure process support and newsletter messages we send.
• Google and Microsoft process calendar data when you choose to connect those services.
• AI providers process prompts and outputs for AI-assisted features when you use them.
• Professional advisers, regulators, or law enforcement may receive information where we are legally required to share it.

Some processors may handle data outside the UK. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK addendum to the SCCs, or another lawful transfer mechanism.

Marketing analytics, cookies, and newsletter signups

We use essential cookies and browser storage to sign you in, keep the product working, remember planner state, and secure the service. Separate optional marketing analytics on marketing pages only run if you opt in.

If you sign up for the newsletter, we use your email address to send the monthly Cavatim note, record the source and time of signup, and maintain an unsubscribe record if you opt out. We do not add you to the newsletter unless you submit the form yourself.

Marketing emails must include a valid opt-out route. You can unsubscribe by following the method in the message or by contacting support@cavatim.com.

Retention

Account and workspace data stay in the service while your account is active, unless you delete specific content sooner. Synced server copies and backups are kept on a rolling basis to support recovery and continuity, with retention periods that vary by environment and backup type.

Billing and accounting records may be kept for longer where tax or legal requirements apply. Newsletter records are kept until you unsubscribe or ask us to remove them, unless we need a minimal suppression record to respect your opt-out.

Your rights

• Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent where processing is based on consent.
• You can export a copy of your workspace from Settings at any time.
• If you are unhappy with how we handle your data, you can complain to the ICO.

In the UK, the ICO is the Information Commissioner's Office. More information is at ico.org.uk/make-a-complaint.

Contact

Email us at support@cavatim.com if you have questions about this notice or want to exercise a privacy right. Please use a subject line such as "Privacy request" so we can route it quickly.