Privacy, written for people.

Account and workspace

This policy applies to lim, also identified as Ferrari/Daily Habits during development, bundle ID com.generativesynesthesia.dailyhabits. Generative Synesthesia is the developer brand. The developer identified for this app in App Store Connect is responsible for the service.

Apple or Google sign-in supplies an account identifier and, when available, name and email. A secure, short-lived link can recover a previously established channel account. Sign-in does not automatically connect Google Calendar. Tasks, routines, preferences, conversations, assistant memory, authorized notes, reminders and action records are stored in Supabase under your account. The app also keeps local data for display and recovery.

Google Calendar, only when connected

A separate Google authorization allows lim to read your calendar list and read or change events. You choose up to ten calendars and an optional destination for new events. The server stores encrypted authorization tokens, account email, calendar identifiers and titles, event identifiers, titles, times, time zones, availability and synchronization records. Routine synchronization covers the previous seven days and next ninety days; specific assistant queries can request other limited date windows.

The connection continues working when the iPhone is closed. Calendar titles and relevant event details can be supplied to the configured AI provider to answer your requests and avoid scheduling conflicts. Raw authorization tokens, attendee lists, locations and event descriptions are not supplied as calendar context. Event content cannot authorize actions. lim creates, changes or deletes Google events only on your request; this integration does not invite participants or send invitation emails.

Google user data is used to provide the calendar and personal-assistant features you request, not for advertising or training generalized AI models. lim’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.

Disconnect in Settings → Integrations → Google Calendar to remove lim’s saved credentials and calendar cache. Google events remain in Google Calendar. You may also revoke authorization in your Google Account connections. Conversation and action history may still contain details of your earlier calendar requests until you erase your lim data.

Apple Calendar and other permissions

Apple Calendar is a separate, optional device integration. EventKit reads and changes require iOS permission and execution on the iPhone. If you enable calendar context for chat, event titles and timing are sent to the server and AI provider. Direct Timeline editing uses the Apple Calendar editor. Turning off Google Calendar does not turn off Apple Calendar, or vice versa.

Microphone recordings are sent only when you choose to send a voice message. Sent audio is stored privately in Supabase and sent to OpenAI for transcription; the transcript becomes part of the conversation. Unsent uploads are removed after 24 hours. Camera and photo access support optional completion evidence; optional AI photo review processes the submitted image. Notifications and alarms use the permissions and settings you enable.

AI, service providers and data sharing

We disclose Google user data only to the service providers needed to deliver the features you request: Supabase hosts authentication, encrypted credentials, protected storage and server functions; the configured AI provider, OpenAI or Google Gemini, may process selected calendar names, event titles and times that are relevant to answer a request or avoid a scheduling conflict. Raw Google authorization tokens, attendee lists, locations and event descriptions are not disclosed to the AI provider. Google processes authorization and Calendar API operations under its own terms.

These providers process data on our behalf to operate Lim. We do not sell Google user data, disclose it to advertising platforms or data brokers, or use it for personalized advertising, credit decisions, or training generalized AI models. We may disclose limited data when required by law or necessary to investigate security abuse. No other third-party sharing occurs unless we first obtain the user’s explicit consent.

Retention, deletion and security

Signing out ends the app session and device activity but does not erase your cloud account. Settings → Privacy → Erase Ferrari data & sign out removes this product’s server data, connected-calendar credentials and account data on the device. It does not delete Google events, revoke the Google project grant, delete the shared Generative Synesthesia authentication identity or erase other products’ data. Limited security or operational records may be retained where required for service integrity or legal obligations.

Data is used to provide the service, maintain account security and honor your choices. The service uses encrypted transport, account isolation and restricted server credentials; Google refresh tokens are encrypted at rest. Providers may process data internationally. No system guarantees absolute security.

Contact and updates

The app is not directed to children under 13. For privacy requests or support, contact pull.notifications.app@gmail.com or use TestFlight → Send Beta Feedback during testing. Never send passwords, authorization codes or private calendar contents in a support report. This page is updated when the service changes.