Privacy Policy

Last updated: 2 June 2026

Schepi ("we", "us", or "the Service") helps you plan your day with an AI scheduling assistant. This Privacy Policy explains what we collect, why, how we use it, and the choices you have. Schepi is operated as a sole proprietorship by Arvin Tay, based in Singapore. We are the data controller.

1. Information we collect

1.1 Account information

Email address, display name, and profile picture (if you sign in with Google).
Authentication tokens issued by our identity provider (Supabase) so we can keep you signed in.

1.2 Schedule and preference data

Daily schedule blocks, anchors, routines, categories, and goals you create.
Adjustments you make to AI-generated schedules so we can improve future suggestions for your account.
Settings and preferences (e.g. wake/sleep windows, focus rules).

1.3 Google Calendar data (when you connect it)

If you choose to connect Google Calendar, with your explicit consent we request the https://www.googleapis.com/auth/calendar.readonly scope and read:

Event title, start time, end time, and timezone from your primary calendar.
We do not read attendee emails, attachments, location detail, or descriptions beyond the title.
We do not write to, modify, or delete any calendar events.

1.4 Billing data

If you subscribe to a paid plan, payment is processed by Stripe. We store your Stripe customer ID and subscription status; we never see or store your card details.

1.5 Operational data

Server-side error logs (no message content).
Aggregate usage counters used to enforce plan limits.

1.6 Sensitive details you choose to enter

Schedules, anchors, routines, and goals are free-text fields, so what you type may reveal sensitive information (for example health appointments, religious observance, or similar). We do not ask for this and we do not single it out for special handling, but you may choose to enter it. We process it only to provide the scheduling features you asked for; our legal basis is the performance of our agreement with you, together with the consent you give by entering it. Please avoid entering sensitive details you would not want stored on your account.

We do not use cookies for tracking and do not run third-party analytics or advertising scripts.

2. How we use your data

To generate, save, and display your daily schedule.
To avoid scheduling over events that already exist on your Google Calendar.
To learn your preferences (e.g. typical task durations) and improve future suggestions for your account only.
To operate and bill your subscription.
To respond to you when you contact support.

Google Limited Use disclosure. Schepi's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we do not use Google Calendar data to serve ads, we do not sell it, we do not transfer it except as needed to provide the user-facing scheduling feature, and humans do not read it except (a) with your explicit consent, (b) for security purposes (e.g. investigating abuse), or (c) to comply with applicable law.

3. AI processing

To generate your schedule and related suggestions, we send the following to our AI partners: your anchors, routines, categories, goals, recent schedule history, preferences, and, if connected, the titles and times of upcoming Google Calendar events. Output is returned to us and stored on your account.

Our AI partners are OpenAI, L.L.C., which processes data in the United States, and Moonshot AI (Kimi), which processes data in China. Depending on the feature, your data may be handled by either or both. They are bound by their respective terms not to retain prompts to train their models. We do not transfer Google user data to AI partners for any purpose other than producing your schedule and the suggestions you requested.

4. Sub-processors and sharing

We share data only with service providers needed to run Schepi:

Supabase, Inc. (United States / EU): authentication, database, edge functions.
Google LLC (United States): Calendar API (for connected users) and Firebase Hosting (static asset serving).
Moonshot AI (China): LLM inference for scheduling and related suggestions.
OpenAI, L.L.C. (United States): LLM inference and embeddings.
Stripe, Inc. (United States): subscription billing.
Cloudflare, Inc. (United States): DNS for schepi.app.

We do not sell personal data. We do not share data for advertising.

5. Retention

Account data and schedules are retained while your account is active.
Synced Google Calendar event records are refreshed on each sync and retained until you disconnect Google Calendar or delete your account.
When you delete your account from Settings, all of your data — including Google refresh tokens, calendar event cache, schedules, anchors, routines, preferences, and Stripe customer link — is removed within 30 days. Server backups are purged on their own rotation (≤ 30 days).

6. Your choices

Disconnect Google Calendar: Settings → Google Calendar → toggle off. We will remove all synced events and stop using your refresh token. You can also revoke Schepi's access at myaccount.google.com/permissions.
Delete your account: Settings → Delete account.
Access, correct, or export your data: email feedback@schepi.app and we will respond within 30 days.

7. Children

Schepi is not directed to children under 13 (or the equivalent age of digital consent in your jurisdiction) and we do not knowingly collect data from them.

8. Security

Data is transmitted over TLS. Google refresh tokens are stored encrypted at rest and are never exposed to the Schepi client; only server-side edge functions can use them to mint short-lived access tokens. Access to production systems is limited to the operator.

9. International transfers

Schepi's core infrastructure (authentication, database, hosting, and billing) runs on cloud providers based in the United States and European Union. In addition, to produce your schedule and related suggestions we send schedule data and, if you connect Google Calendar, the titles and times of upcoming events to our AI partners: OpenAI (United States) and Moonshot AI / Kimi, which processes data in China.

Some of these countries may not give your data the same legal protection as your home country. Where we transfer data outside the EEA or the UK, we rely on your explicit consent and on the transfer being necessary to provide the AI scheduling feature you requested. If you would rather your data not be processed by an AI partner in China, you can choose not to generate AI schedules, or contact us at feedback@schepi.app. By using the Service you consent to your data being processed in the regions described above.

10. Changes

If we make material changes we will update the "Last updated" date and, where appropriate, notify you in-app or by email. Continued use after a change indicates acceptance of the updated policy.

11. Contact

Questions, requests, or complaints: feedback@schepi.app.

If you are in Singapore and we cannot resolve your concern, you may contact the Personal Data Protection Commission at pdpc.gov.sg.