Introduction

Golden Agendas ("we," "us," "our," or "the App") is an AI-powered voice assistant application designed to help seniors and their caregivers manage schedules, medications, and daily routines. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our App and related services.

By creating an account or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

Information We Collect

Account Information

Your email address (used as your login and to deliver medication reminders and briefing emails) and a password (stored in hashed/encrypted form). We also store your time zone so that reminders and briefings arrive at the correct local time.

Profile Information

Your preferred name or nickname, used to personalize voice greetings and briefings (e.g., "Good morning, Bob").

Schedule & Event Data

Events, appointments, and reminders you create or import, including titles, descriptions, dates, times, and recurrence settings.

Medication & Health-Related Information

Medication names, dosing schedules (e.g., morning/evening times), dose labels, and self-reported intake logs used to calculate adherence. This information is self-reported by you or your caregiver and is not connected to any pharmacy, medical provider, or health record system. We do not collect prescription details, diagnoses, or clinical records. See "Medication & Health Information" below for how this sensitive data is handled.

Contact & Caregiver Information

Names and phone numbers you enter for emergency contacts, doctors, pharmacists, caregivers, specialists, and family members. This information is stored for your convenience so you can reach these contacts from within the App. We do not contact these individuals, and we do not share your information with them. The contacts you add have no access to your account, schedule, medication, or any other data in the App.

Voice & AI Data

When you use voice features, your spoken words are converted to text using your device's built-in speech-to-text service (the Web Speech API, which on Chrome is provided by Google). The resulting text is then processed by our AI service to extract event or medication details (see "AI & Voice Processing" below). We do not record or permanently store audio of your voice. See "AI & Voice Processing" for details on retention, use, human review, and deletion.

Payment Information

Subscription payments are processed through Base44 Payments (powered by Wix) or, where applicable, through Apple App Store or Google Play in-app purchase. We do not store your full credit or debit card number, CVV, or other sensitive payment credentials on our servers. We retain a record of your subscription plan, billing status, and transaction identifier to manage your access and for tax/accounting compliance. See "Third-Party Service Providers" below.

Usage & Device Information

Basic, non-identifying information such as device type, browser type, operating system, and general app usage patterns, used to monitor performance, reliability, and security and to improve the App.

How We Use Your Information

• To create and manage your account and authenticate your identity, including two-factor verification by email.
• To schedule, display, and remind you of events and appointments.
• To send medication reminder emails and generate daily and weekly voice briefings.
• To calculate and display medication adherence summaries.
• To process subscription payments and manage your subscription.
• To provide customer support and respond to your inquiries and privacy requests.
• To monitor and improve the App's features, accessibility, performance, and reliability.
• To detect, prevent, and address fraud, abuse, and security issues.

We do not:

• Sell, rent, or trade your personal information to third parties.
• Use your personal data, voice data, or medication data to train AI or machine-learning models.
• Use your data for behavioral advertising or share it with advertisers.

AI & Voice Processing

Provider. Voice input is transcribed by your device's native speech-to-text service (the Web Speech API; on Google Chrome this is Google's speech service). The transcribed text is then interpreted by Base44's AI integration, which may route your text to third-party large language models (such as Google Gemini, OpenAI GPT, or Anthropic Claude) to extract event titles, dates, times, and medication names. Only the transcribed text (not audio) is sent for AI interpretation.

Retention. We do not record or store audio of your voice. The text transcript is used only to create your event or medication entry and is not retained separately as a transcript. The resulting event or medication record remains in your account until you edit or delete it.

Training & product development. Your voice data, transcripts, and personal information are not used to train AI models, improve third-party models, or for analytics-based product experimentation.

Human review. We do not have personnel review your voice audio or transcripts. In limited cases, an administrator may access your account records (including event or medication text) solely to resolve a support issue you have reported, and only as necessary to address that issue.

Deletion. You can delete any event or medication created by voice at any time from within the App. Deleting your account removes these records as described in "Data Retention & Deletion." To request deletion of any AI-processed data, contact us as described in "Your Privacy Rights."

Limitations. AI-generated interpretations may be incorrect — for example, a date, time, or medication name may be misheard or misinterpreted. Always review AI-created entries before relying on them, especially for medications.

Medication & Health Information

Because medication and health-related information is sensitive, we want to be clear about how it is handled:

• Collection: Medication names, dosing times, and dose labels are entered by you or your caregiver through voice or the App's interface. Intake logs are self-reported when you mark a dose as taken. We do not import data from pharmacies, insurers, or medical providers.
• Use: Used to send scheduled reminder emails, display today's doses, and calculate weekly adherence summaries for your reference. This information is for personal organization only and is not medical advice.
• Protection: Stored in your account under row-level access controls, so only you (and an administrator in the limited support circumstances described above) can access it. Data in transit is encrypted. See "Data Security" below.
• Sharing: We do not share your medication or health information with any third party except as required to deliver the reminders you request (email delivery), to comply with law, or as described in this policy.
• Deletion: You can delete individual medications at any time. Deleting your account removes all medication names, dosing schedules, and intake logs. See "Data Retention & Deletion."

Google Calendar Integration

The App offers an optional Google Calendar integration. If you choose to connect it:

• What we access: Your primary Google Calendar only. We read upcoming events (title, description, start/end times) for the next 365 days, and we can create, update, or delete events on that primary calendar.
• What we do not access: Other calendars in your account, your Google Contacts, your email, your Google account settings, or any data beyond calendar events.
• What we store: We store a copy of synced event details (title, description, times) in your account so they appear in your schedule and briefings. The Google event identifier is stored so edits stay in sync.
• How we use it: To display, remind, and brief you on upcoming events, alongside events you create directly in the App.
• How to disconnect: You can disconnect Google Calendar at any time from your account settings or through your Google account's security permissions. After disconnecting, we stop fetching new events. Events already synced into your account remain until you delete them.
• Google's role: Your use of Google Calendar is also governed by Google's Terms of Service and Privacy Policy.

Third-Party Service Providers

We use trusted third-party providers to operate the App. Each receives only the information necessary to perform its service, and is bound by its own privacy and security practices:

• AI processing (Base44 / Google / OpenAI / Anthropic): Receives the transcribed text of your voice input to extract event or medication details. Does not receive your audio, your password, or your payment data.
• Email delivery (Base44): Receives your email address and the content of medication reminder and briefing emails addressed to you.
• Payment processing (Base44 Payments / Wix; or Apple / Google for in-app purchases): Receives your payment credentials and billing details to process your transaction. We receive only confirmation of payment, your plan, and a transaction identifier — not your full card number.
• Cloud hosting & database (Base44): Stores your account data, events, medications, contacts, and settings.
• Google Calendar (Google): Receives your authorization to read and manage your primary calendar events, as described above.

Legal compliance: We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of Golden Agendas, our users, or others.

Business transfers: In the event of a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to the protections of this policy.

Data Retention & Deletion

We retain your information for as long as your account is active or as needed to provide the services.

• Account data (events, medications, intake logs, contacts, settings, profile name): Deleted promptly when you delete your account from the Profile page. Residual backup copies are purged within 30 days of deletion.
• Subscription & billing records: Retained for the period required by tax and accounting law, then deleted.
• Two-factor verification codes: Automatically expire 10 minutes after issue and are deleted once consumed.
• Google Calendar data: Remains in your account until you disconnect the integration or delete the events. We stop fetching new data immediately upon disconnection.
• Legal holds: We may retain specific records where retention is required by law or to respond to a legal matter, only for as long as necessary.

Data Security & Breach Response

Security measures. We use industry-standard practices to protect your information, including encrypted data transmission (TLS), hashed password storage, row-level access controls that limit each user to their own records, and restricted administrative access. No method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

Breach response. If we become aware of a security incident affecting your personal information, we will take reasonable steps to investigate and contain it, assess the scope and impact, and take action to remediate. Where notification is required by applicable law, we will notify affected users and the appropriate authorities within the timeframes the law requires. The method of notice (email or in-app) will depend on the circumstances.

Your Privacy Rights

Depending on your location, you may have the right to access, correct, or delete your personal information, to opt out of certain processing, and to withdraw consent where consent is the legal basis.

How to make a privacy request:

• Open the App's Support page and send us a request describing the action you want (access, correction, deletion, or opt-out).
• Include the email address associated with your account so we can verify your identity.
• We will respond within 30 days. If we need more time, we will let you know and explain why.
• You can also delete your account and all associated data yourself at any time from the Profile page in the App.

Children's Privacy

Golden Agendas is not directed to anyone under the age of 18, and we do not knowingly collect personal information from children. An adult caregiver may set up an account for a senior in their care, as described in our Terms of Service. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

Not Medical Advice

Golden Agendas is a scheduling and reminder tool. It does not provide medical advice, diagnosis, or treatment. Medication information is self-reported and should not replace professional medical guidance. Always consult your healthcare provider regarding medications and health decisions.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email. The updated policy takes effect upon posting. Continued use of the App after changes constitutes acceptance of the revised policy.

Contact Us

If you have questions or concerns about this Privacy Policy or your personal information, please contact us through the App's Support page. For privacy-specific requests, include your account email so we can verify your identity.