Back to Sign In
Privacy PolicyTerms of ServiceBeta Waiver

Privacy Policy

Last updated: 22 October 2026 • Version 1.0

Subprocessor Transparency & Due Diligence

In accordance with Article 28 of the UK GDPR and EU GDPR, Perrymore Calendar maintains a strict, vetted directory of third-party service providers (“subprocessors”) that may process household data solely to deliver our features. We do not sell, barter, or transfer data to advertising brokers.

Authorised Infrastructure & API Subprocessors

Google LLC

Google Cloud & Gemini Generative AI (gemini-3.8-flash, gemini-3.6-flash, gemini-3.5-flash-lite multi-tiered failover pool with real-time model discovery) & Cloud Text-to-Speech (Enterprise API)

Privacy Documentation

Function: Anonymised natural-language scheduling (Smart Add & Ask & Add with live Google Search Grounding for public dates), Daily Morning and Evening AI Briefing synthesis, voice speech synthesis for spoken audio dispatches, interactive Context-Aware AI Help Assistant, and ephemeral fridge/food/document multimodal vision analysis. Operates in strict conformity with Google Cloud Platform Service Specific Terms (SST), Generative AI Prohibited Use Policy, and the Google Cloud Agentic AI Responsible Use Guidelines (effective October 12, 2026), incorporating deterministic runtime policy enforcement (scoped tools, strictly non-autonomous execution, and mandatory human confirmation gates before committing calendar actions). Family names, emails, and contact details are tokenised before transit. Uploaded food photos and physical documents (hospital letters, party invitations, school notices downsampled client-side) are processed ephemerally in server RAM with recipient address disregard, automated sensitive health identifier scrubbers, and strict zero-persistence guarantees (never stored on disk, database, or S3, and never used for foundation AI model training).

Processing Location: United States & European Union
Safeguards: EU Standard Contractual Clauses (SCCs), UK IDTA & Google Cloud Enterprise DPA

Google LLC (Workspace APIs)

Google Calendar API & Gmail API (OAuth 2.0)

Privacy Documentation

Function: Displaying family calendar timelines and parsing incoming school/club email headers strictly per user-defined filter rules. Adheres to Google Limited Use requirements. Personal correspondence outside defined rules is never ingested.

Processing Location: Regional Google Data Centres (UK/EU/US)
Safeguards: Google Cloud Data Processing Addendum & User OAuth Consent

Apple Inc.

iCloud CalDAV Calendar Synchronisation Infrastructure

Privacy Documentation

Function: Retrieving user-authorised personal and shared iCloud family calendar schedules via the RFC 4791 CalDAV protocol. App-Specific Passwords are encrypted at rest with AES-256-GCM vault security. Master Apple account passwords are never accepted, requested, or stored.

Processing Location: Regional Apple Data Centres (UK/EU/US)
Safeguards: EU Standard Contractual Clauses (SCCs) & User CalDAV Authentication

Stripe Payments Europe Ltd / Stripe Inc.

Stripe Billing & Payment Processing (PCI-DSS Level 1)

Privacy Documentation

Function: Processing subscription payments, managing free trial periods, securely tokenising payment methods, and handling customer billing portal sessions. Perrymore never receives or stores raw payment card numbers.

Processing Location: Dublin, Ireland / United States
Safeguards: EU Standard Contractual Clauses (SCCs) & UK IDTA

Railway Corp.

Application Cloud Compute & Managed PostgreSQL Hosting

Privacy Documentation

Function: Hosting the Next.js server execution environment and running our private, managed PostgreSQL database with AES-256 disk encryption at rest, automated backups, and private VPC isolation.

Processing Location: London, United Kingdom / Frankfurt, Germany
Safeguards: Enterprise Data Processing Addendum & UK Adequacy

Resend Inc.

Transactional Email Delivery Infrastructure

Privacy Documentation

Function: Dispatching essential transactional communications including registration verification codes, household member invitations, password recovery links, and billing status notifications. Email content is processed in Ireland (EU) and TLS-encrypted in transit.

Processing Location: Ireland (European Union) / United States
Safeguards: EU Standard Contractual Clauses (SCCs) & UK IDTA

Open-Meteo GmbH

Weather & Meteorological Forecast API

Privacy Documentation

Function: Retrieving daily temperatures, hourly rain probabilities, and forecast summaries using broad regional geographic coordinates. No device identifiers, IP addresses, or personal data are stored.

Processing Location: Germany (European Union)
Safeguards: EU GDPR Native (No Personal Data Transmitted)

OpenStreetMap Foundation / Komoot (Photon) & Postcodes.io

Geocoding, Address Autocomplete & Public Road Routing API

Privacy Documentation

Function: Providing real-time predictive venue and address search across calendar event creation/editing, domestic routines, and settings, and calculating time-of-day commute distances. Query strings and coordinates are transmitted ephemerally without user IDs or household profile association.

Processing Location: Germany / United Kingdom (European Union & UK)
Safeguards: GDPR Native / Public Open Data (Zero Personal Identity Association)

Transport for London (TfL Open Data) & National Rail

Unified Public Transport Disruption, Rail Strike Feeds & Planned Streetworks API

Privacy Documentation

Function: Retrieving scheduled streetworks, lane closures, live rail strike alerts, and network suspensions along commute corridors or for central city event destinations. Spatial checks and disruption queries are performed ephemerally on public open data without transmitting personal identities, addresses, or household account records.

Processing Location: London, United Kingdom
Safeguards: UK Open Government Licence (OGL) v3.0 / GDPR Native (Zero Personal Data Transmitted)

UK Government Digital Service (gov.uk)

Official UK Bank Holidays Open Data API

Privacy Documentation

Function: Retrieving official UK bank holiday schedules to calculate live council waste collection shifts and holiday date adjustments. Queries are anonymous, read-only requests for public government schedules.

Processing Location: United Kingdom
Safeguards: UK Open Government Licence (OGL) v3.0 / GDPR Native (Zero Personal Data Transmitted)

UK Local Authority Waste Platforms (e.g. iTouchVision / Epsom & Ewell Borough Council)

Council Waste Management & Collection Schedule API

Privacy Documentation

Function: Resolving property Unique Property Reference Numbers (UPRNs) and retrieving official, verified household waste and recycling collection schedules and live bank holiday shift adjustments. Inquiries are encrypted via AES-256 in transit and transmit only property postcodes and reference numbers without household member names or personal profile details.

Processing Location: United Kingdom
Safeguards: UK GDPR Native / Local Government Open Data Contract

Perrymore Calendar • Dedicated to private, secure family coordination

Privacy PolicyCookiesSubprocessorsTermsBeta WaiverReturn to Sign In