Privacy Policy

Aylow stores the information needed to provide your account and productivity tools. This can include your profile, settings, tasks, notes, reminders, routines, plans, calendar events, memories, AI conversations and actions, direct messages, workspace content, uploaded files, and push-notification registrations.

For security and session management, Aylow may store device, browser, and platform details, sign-in activity, and an approximate city, region, and country derived from the request IP address. Aylow does not sell personal information.

Information is used to operate Aylow, synchronize signed-in devices, deliver notifications, provide AI-assisted features, support collaboration, protect accounts, and diagnose service problems. AI requests may be processed by the AI provider selected for the feature, including Gemini or Groq. Translation features may send text to Google Translate so the requested translation can be returned.

Notification content can include task, reminder, event, workspace, or message details and may be visible on a device lock screen depending on that device's settings.

Depending on where you live and the feature involved, Aylow processes information to perform its agreement with you, pursue legitimate interests such as security and service improvement, comply with legal obligations, or act on consent that you can withdraw. Optional marketing requires a separate choice and is not a condition of using the service.

Aylow and its providers may process information in countries outside your own. Where required, Aylow uses contractual and organizational safeguards intended to protect information transferred internationally.

Google Calendar access is optional and begins only after you select Connect Google Calendar and approve Google's consent screen. Aylow requests access to identify the connected Google account, read the calendar list, and read and manage calendar events for the calendar you connect.

Aylow uses this access to import Google events into Aylow and to create, update, or delete the corresponding Google event when you change a synchronized Aylow event. OAuth tokens are encrypted at rest. Disconnecting Google Calendar asks Google to revoke the token and removes Aylow's stored connection. Aylow never receives your Google password.

Aylow relies on service providers to run the product, including Supabase for authentication, database, and file storage; Vercel for application hosting; Firebase Cloud Messaging for push delivery; Google services for optional Calendar and translation features; and supported AI providers for AI requests.

Profile images may be publicly accessible when used on a public profile. Private message media and workspace data are limited by Aylow's access controls. Workspace information is shared with the members of that workspace according to their role and the workspace's features.

Most account content is kept until you remove it or delete your account. Some short-lived operational records can remain until routine cleanup. Workspace AI image cleanup is scheduled after 30 days. Aylow may retain limited records when required for security, legal compliance, or resolving abuse.

You can delete your account from Aylow. If you are the only owner of a shared workspace that still has other members, you must transfer ownership or delete that workspace first. Account deletion removes the account and associated personal data handled by Aylow, subject to limited required retention and data belonging to shared workspaces.

You can edit or delete content, control notification categories, manage signed-in sessions, disconnect Google Calendar, and delete your account using Aylow's settings. You are responsible for keeping your credentials and devices secure.

Aylow uses access controls and other safeguards designed to protect information, but no online service can guarantee absolute security. Contact Aylow promptly if you believe your account has been compromised.

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a portable copy of personal information. You may withdraw consent without affecting earlier lawful processing and may complain to your local data-protection authority.

Aylow may need to verify your identity before acting on a request. Authorized agents must also provide evidence of authority. Aylow will respond within the period required by applicable law and explain any lawful limitation or extension.

Aylow is not directed to children under 16 and does not knowingly allow them to create accounts. If you believe a child has provided personal information, contact the privacy address below so the account can be reviewed.