Privacy Policy — Calico
Timelab Inc. (the “Company”) hereby establishes the following privacy policy (this “Policy”) with respect to its handling of the personal information of customers (each, a “User”) who use “Calico”, a calendar application developed and operated by the Company for Apple platforms (macOS, iOS, and iPadOS) (the “Application,” which term includes any test or beta version thereof).
Scope of Application
This Policy sets forth how the Company collects, uses, discloses, and otherwise processes the personal information of Users in connection with their use of the Company’s website and the Application (collectively, the “Service”).
1. Basic Principles
The Company affords the utmost respect to the privacy of its Users and complies with the Act on the Protection of Personal Information of Japan (the “APPI”), all other applicable laws and regulations, and the guidelines promulgated thereunder. Data created and managed by a User in the Application, including calendar entries, is stored solely within the User’s device and is not transmitted to the Company’s servers.
Notwithstanding the foregoing, the Company may collect email addresses, device information, access history, and similar information for the purposes of providing and improving the Service and of communicating with, and responding to inquiries from, Users. All such information shall be managed appropriately in accordance with this Policy.
2. Overview of Information Collected
The categories of information that the Company may collect in connection with the Service, together with the principal circumstances of collection and the principal purposes of use corresponding thereto, are as follows:
| Information the Company may collect | Principal circumstances of collection | Principal purposes of use |
|---|---|---|
| Email address | Inquiry form; the Company’s website; distribution of test versions of the Application | Provision of information regarding the Service; correspondence with Users; response to inquiries |
| Payment information | Purchase of paid features of the Service | Billing and payment processing |
| Device information and connection information | Use of the Service | Remediation of defects; assurance of quality and security |
| Access history, usage status, and logs within the Service | Use of the Service | Improvement of quality; remediation of defects; assurance of security |
| Calendar entries and related data | Use of the Application | Provision of the functions of the Application |
3. Information Collected and the Handling Thereof
3.1 Information Managed Within the Device
Information that a User registers or edits in the Application, including calendar entries, titles, dates and times, and notes, is under no circumstances transmitted to the Company’s servers.
The Application accesses the native calendar functionality of the Apple operating system in order to read and write the User’s calendar entries and events. Such access is effected only after the operating system’s permission dialog has been presented to the User upon first use and only upon the User’s grant of permission. Calendar information obtained through the native calendar functionality is likewise not transmitted to the Company’s servers. A User may modify or revoke such calendar access permission at any time through the “Settings” function of the device.
3.2 Email Addresses
The Company may collect a User’s email address for the following purposes:
- provision of the Service;
- distribution of test versions of the Application;
- transmission of notices concerning updates to, and defect corrections in, the Application; and
- response to, and handling of, inquiries submitted by the User.
Email addresses are collected only where voluntarily provided to the Company by the User, whether through the inquiry form or through the website. The Company shall use email addresses so collected solely within the scope of the purposes enumerated above and shall manage them appropriately on the Company’s servers.
3.3 Payment Information
Where a User elects to purchase access to paid features or services, the Company shall collect the payment information necessary to effect such purchase.
In the case of a purchase made by way of in-application billing through the App Store, payment is processed by Apple, and payment credentials such as credit card numbers are administered by Apple. The Company may receive information incidental to such settlement, including the fact of the purchase or charge and receipt information.
3.4 Device Information, Connection Information, and Access History
The Company may collect the following information for the purposes of providing, maintaining, and improving the Service:
- device information (including device type, operating system and version thereof, device language settings, and device identifiers);
- connection information (including connection status and information relating to communications); and
- access history with respect to information within the Service (including dates and times of access, operational and usage status, and log information).
Such information shall be used for the purposes of analyzing and correcting defects, enhancing quality and usability, and ensuring security.
3.5 Third-Party Services
The Application makes use of the App Analytics function of App Store Connect provided by Apple, as well as TestFlight during the development and beta-distribution phases. Through these services, the Company may receive from Apple information concerning application usage, performance, and crashes. Such information is, where the User has consented to the applicable Apple settings, provided in principle as aggregated and anonymized usage and diagnostic data, and is governed by Apple’s privacy policy and the settings of the User’s Apple account. Such information is not ordinarily provided in a form that permits the identification of any specific individual.
3.6 Use of Cookies and Similar Technologies (Company Website)
The Company’s website (including the inquiry form and similar features) may use cookies and other similar technologies for the purposes of the proper display and operation of the site and the ascertainment and improvement of usage conditions. Information obtained by means of cookies may include browser type, referral source, pages viewed, and dates and times of access; such information does not, standing alone, identify any User individually.
A User may refuse the acceptance of cookies, or delete cookies already stored, by adjusting the settings of the browser in use. In such event, however, certain functions of the Company’s website may not operate properly.
Neither the Application nor any component thereof employs cookie-based analytics tools.
4. Purposes of Use of Information
The Company shall use information collected in connection with the Service for the following purposes:
- to provide the functions of the Application;
- to communicate with the User (including the delivery of notices regarding updates and defect corrections);
- to conduct surveys;
- to develop new services and new features;
- to respond to inquiries;
- to maintain systems and address defects; and
- to invoice usage fees.
Where the Company intends to handle personal information beyond the scope necessary to achieve the purposes of use set forth above, the Company shall obtain the prior consent of the individual concerned.
5. Provision to Third Parties
Except as provided below, the Company shall not provide personal information to any third party without first obtaining the consent of the User. The Company does not sell personal information. As stated above, the Company does not collect the contents of a User’s calendar entries and accordingly is not in a position to provide such contents to any third party.
The Company may provide personal information to a third party in the following circumstances:
- where required by applicable law;
- where necessary for the protection of the life, body, or property of an individual and it is difficult to obtain the User’s consent;
- where specially necessary for the improvement of public health or the promotion of the sound upbringing of children and it is difficult to obtain the User’s consent;
- where disclosure of personal information is requested by a court, a public prosecutors office, the police, a bar association, a consumer affairs center, or any comparable authority;
- where the User has expressly requested disclosure or provision to a third party;
- where the Company entrusts all or part of the handling of personal information to a third party within the scope necessary to achieve the purposes of use; or
- where personal information is transferred in connection with a business succession arising from a merger or other cause.
The handling of personal information entrusted to external service providers (including email distribution systems, cloud service providers, and analytics and crash-reporting services) shall be governed by Section 6 (Entrustment of the Handling of Personal Information).
6. Entrustment of the Handling of Personal Information
The Company may entrust all or part of the handling of the personal information it collects to a third party within the scope necessary to achieve the purposes of use. In such event, the Company shall select the entrustee on the condition that the entrustee has established and maintains a management framework capable of protecting personal information appropriately, shall stipulate by contract or otherwise the matters necessary for the protection of the User’s personal information, and shall exercise appropriate supervision to ensure that such personal information is managed securely.
7. Security Control of Personal Information
The Company shall implement such measures as are necessary and appropriate to prevent the leakage, loss, or damage of personal information, and shall exercise such supervision over its employees as is necessary and appropriate with respect to the handling of personal information. The selection and supervision of entrustees in the event that the handling of personal information is entrusted to an external service provider shall be governed by Section 6 (Entrustment of the Handling of Personal Information).
8. Location and Period of Data Storage; Deletion
Calendar entries and other information created in the Application are stored within the User’s device. Where a User uninstalls the Application, or deletes data within the Application, such data is deleted from the device. Because such data does not reside on the Company’s servers, no retention thereof is effected by the Company.
Email addresses provided by Users and other information collected by the Company, by contrast, are retained on the Company’s servers. The Company shall retain such information only for the period necessary to achieve the purposes of use or for such period as is prescribed by applicable law, and shall delete it appropriately when it is no longer required.
A User may at any time, through the contact point specified in Section 12, request the cessation of use and the deletion of information concerning such User (including the User’s email address) and withdraw any consent previously given. The Company shall respond to any such request within a reasonable period in accordance with applicable law.
9. Use of Statistical Data
The Company may create statistical data processed so as not to permit the identification of any individual on the basis of the personal information it has collected. The Company may use statistical data that does not permit the identification of any individual without restriction.
10. Procedures for Requests for Disclosure, Correction, Cessation of Use, and the Like
A User may request that the Company notify the User of the purposes of use of, disclose, correct, add to, or delete the contents of, cease using or erase, or cease providing to third parties, the User’s own personal information (retained personal data). Any such request should be directed to the contact point specified in Section 12. The Company shall, upon verifying the identity of the requesting individual, respond within a reasonable period in accordance with applicable law.
11. Governing Law and Covered Regions
This Policy shall be governed by the laws of Japan. The Service is intended principally for provision in Japan, Asia, and North America. Provision of the Service to residents of the European Union is not contemplated.
The laws of certain jurisdictions, including the State of California in the United States (the CCPA/CPRA and similar statutes), afford consumers certain rights with respect to their personal information, including the right to know, the right to request deletion, and the right to opt out of the sale or sharing of personal information. The Company does not sell the personal information of its Users. Inquiries concerning such rights should be directed to the contact point specified in Section 12.
12. Business Operator Information and Contact Point
Inquiries concerning this Policy, requests for disclosure and the like, and complaints regarding the handling of personal information should be directed as follows. The Company shall endeavor to respond appropriately and promptly.
- Name of business operator (personal information handling business operator): Timelab Inc.
- Address: Osaka Ekimae Dai-2 Building 12-12, 1-2-2 Umeda, Kita-ku, Osaka-shi, Osaka, Japan
- Representative: Yusuke Hozumi, Representative Director
- Personal Information Protection Administrator: Yusuke Hozumi
- Contact: Timelab Inc. — info@timelab.jp
13. Amendments to this Policy
Except as otherwise provided by applicable law, the Company may amend this Policy from time to time. In the event of any such amendment, the Company shall post or otherwise give notice of the amended provisions on the Company’s website or within the services provided by the Company. A User shall be deemed to have consented to any such amendment by continuing to use the Service.
Date of Enactment: August 4, 2026Prior to August 4, 2026, the handling of personal information in connection with Calico was governed by the Company’s “Timelab Inc. Privacy Policy” On and from that date, the handling of personal information in connection with Calico shall be governed by this Policy. The handling of personal information in contexts other than Calico shall continue to be governed by the Timelab Inc. Privacy Policy.