Privacy Policy

This service collects the following personal information for schedule management and calendar synchronization.

1. Information We Collect

Basic Information

Email address
Username and profile information

Google Calendar Data

Event titles, descriptions, start/end times
Attendee information
Event location information
Recurring event settings

✓

2. Purpose of Collection

Schedule viewing and calendar synchronization
AI-powered schedule recommendations and automatic creation
Schedule coordination and sharing with friends
Service improvement and user experience enhancement

3. Google Data Usage and Sharing

Scope of Data Use

Collected Google data is used only for the purposes stated above and is processed solely to provide the features you request.

Third-Party Sharing Policy

Jabas does not share Google user data with third parties.

Exceptions include:

When users explicitly consent (e.g., sharing schedules with friends)
When required by law
Infrastructure providers essential for service delivery (Supabase, Vercel, etc.) - these providers comply with data processing agreements and security obligations

Limited Use Compliance

Important Notice:

• Jabas does not sell Google user data.
• Google Calendar data is not used to develop, improve, or train AI/ML models.
• AI schedule recommendation features only use your own data and do not store it as training data.

Jabas's use of Google user data complies with the Google API Services User Data Policy, including Limited Use requirements.

4. Data Security Measures

Protection During Transmission

All data is securely transmitted using TLS/SSL encryption
Uses Google OAuth 2.0 standard protocol

Protection During Storage

Google access tokens are encrypted and stored in Supabase Vault
Row Level Security (RLS) applied so only you can access your data
Sensitive API keys are managed as environment variables (not included in source code)

Access Control

Principle of least privilege applied
Users can revoke Jabas access permissions from Google Account settings at any time
Tokens automatically expire and re-authentication is requested only when necessary

Security Management

Regular security audits and vulnerability management
Immediate response and user notification in case of security incidents

5. Personal Information Retention and Deletion

Retention Period

Retained during service use
Google Calendar data is cached only for synchronization purposes

Deletion Procedures

Related tokens immediately deleted when Google connection is removed in app settings
All data immediately deleted when account is deleted
Exceptionally retained only when there is a legal obligation to retain

6. User Rights

You have the following rights and can exercise them by contacting us below:

Right to Access and Data Portability

You can check how your personal information is being used or request a copy of your stored data.

Right to Rectification

You can request correction of inaccurate or incorrect personal information.

Right to Deletion

You can delete your account directly in app settings
If you request deletion via email, we will process it immediately

Right to Restriction of Processing

You can request temporary suspension of personal information processing.

Right to Revoke Google Connection

Disconnect Google connection in app settings
Google Account settings

How to Exercise Your Rights:

To exercise the above rights, please contact us via email below and we will process your request without delay. We may need to verify your account information to confirm your identity.

7. Contact

For inquiries about personal information processing or to exercise your rights, please contact:

Email: jjunyseo@krunchmallow.com

We will respond within 3 business days.

Effective Date: 2026-02-12