Privacy Policy

This Privacy Policy explains how Rebecca-Louise Inc ("we," "us," or "our"), which operates the AI Wellness app and website at aiwellnesscoach.co (the "Service"), collects, uses, stores, shares, and protects your information — including information obtained from Google when you connect your Google Calendar. By using the Service you agree to this Policy.

1. Information we collect

Information you provide

When you use the Service as a coach or a client, we may collect your name, email address, phone number, the content of your coaching profile, and details of the calls you book (date, time, call type, and the video link for the call).

Google account data (only with your consent)

If you choose to connect Google Calendar, we access data from your Google Account through Google's APIs, as described in the dedicated section below. We do not access your Google Account unless you explicitly grant permission on Google's consent screen, and you can revoke that permission at any time.

Information collected automatically

We collect limited technical data needed to operate and secure the Service, such as log data and basic device/browser information. We do not use this for advertising.

2. How the app accesses and uses Google user data

Specifically, when you connect Google Calendar:

• What we access: the calendar.events scope, which lets the Service create, update, and delete calendar events on your primary Google Calendar. We use this read/write scope only for booking events; a read-only scope would be insufficient because the app must create and update events on your behalf.
• How we use it: when a coaching call is booked with you, we add it to your Google Calendar; when a booking is rescheduled or cancelled, we update or remove the corresponding event so your calendar stays accurate. That is the only purpose.
• What we store: to keep the connection working we store the OAuth tokens Google issues (an access token and a refresh token) and minimal linkage data (your coach identifier, the connected Google account email, and event references). These tokens are stored securely on our servers and are never exposed to the client or to other users.
• What we do not do: we do not read your personal calendar for any purpose other than syncing your coaching-call events, and we do not transfer your Google data to third parties except the infrastructure providers strictly needed to run the Service (see below).

3. How we use information

• To provide and operate the Service — scheduling and confirming coaching calls, syncing them to your calendar, and sending confirmations and reminders.
• To communicate with you about your account, bookings, and support requests.
• To secure the Service, prevent abuse, and comply with legal obligations.
• To improve the Service. We do not sell your personal information, and we do not use Google user data for advertising or profiling.

4. Sharing & subprocessors

We do not sell your personal information. We share information only with trusted service providers ("subprocessors") who process it on our behalf and only to provide the Service:

• Supabase — secure database and backend hosting (stores your account data, bookings, and Google OAuth tokens).
• Resend — transactional email delivery (booking confirmations and reminders sent from hello@aiwellnesscoach.co).
• Google — the Google Calendar API, used to create and sync your calendar events at your request.

Each subprocessor is bound to use the data only to provide their service to us. We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer, in which case we will require the recipient to honor this Policy.

5. Storage & security

Your data is stored in our Supabase database and transmitted over encrypted (HTTPS/TLS) connections. Google OAuth tokens are held server-side only, protected by access controls, and are never sent to browsers or shared with other users. While no system is perfectly secure, we take reasonable technical and organizational measures to protect your information.

6. Data retention

We keep your account information and Google Calendar connection data for as long as your account is active or the connection is in place. If you disconnect Google Calendar, we delete the stored Google OAuth tokens. If you delete your account or ask us to delete your data, we remove your personal information from our active systems, except where we must retain it to meet legal obligations. Calendar events already created on your Google Calendar remain there unless you remove them.

7. Your rights & choices

You may request to access, correct, or delete the personal information we hold about you, and you may object to or restrict certain processing. To exercise these rights, contact us at hello@aiwellnesscoach.co. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor those rights where they apply.

8. Revoking Google Calendar access

You can disconnect Google Calendar at any time:

• In the AI Wellness app, using the disconnect option on your profile; or
• Directly in your Google Account at myaccount.google.com/permissions, by removing access for "AI Wellness."

When you revoke access, we stop syncing and delete the stored OAuth tokens. Events already on your calendar are not automatically removed.

9. Children

The Service is intended for adults (18+) and is not directed to children. We do not knowingly collect personal information from children.

10. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact

Rebecca-Louise Inc — AI Wellness
Email: hello@aiwellnesscoach.co