Last updated: April 24, 2026
Meet Callie is a family assistant that lives in Telegram. We take your family's privacy seriously. This policy explains what data we collect, how we use it, and how we protect it.
What We Collect
- Telegram data: Your Telegram group chat ID, Telegram user IDs, and display names as they appear in Telegram.
- Messages to Meet Callie: Messages sent to the bot are processed to fulfill your requests, with retention handled as described in Data Storage below.
- Google Calendar data: OAuth tokens, including access token and refresh token, to access and manage the calendar you explicitly authorize.
- Family data you provide: Children's names, zip code, birthdays, tasks, grocery items, travel confirmations, reminders, contacts, notes, and package tracking numbers that you add through the bot.
- Inbound email registration and processing data: The email address you register for inbound email parsing, and the content of emails you forward to Callie, processed transiently to extract calendar events.
- Usage metadata: Which feature categories are used and how frequently, such as calendar actions or list updates, but never the content of those actions.
- Standard server request logs: IP address, timestamp, and HTTP method generated by Railway infrastructure.
What We Don't Collect
- We do not access your personal Google Calendar, only the specific calendar you authorize during setup.
- We do not read, store, or share your private Telegram messages outside of the Meet Callie group.
- We do not use your family's data to train, fine-tune, or improve any AI model, including those operated by Anthropic.
- We do not sell your data to anyone, ever.
- We do not show ads.
How We Use Your Data
- Google user data, including OAuth tokens and calendar access, is used solely to provide the calendar management features you request. It is not used for any other purpose, including advertising, analytics, AI model training, or any use unrelated to the core service.
- To provide the Meet Callie service: managing your calendar, lists, reminders, travel, and other features.
- To send you notifications and digests through Telegram.
- To match inbound emails to your family account using your registered email address.
- To operate, monitor, and maintain the service.
Data Storage
- Data is stored in Supabase (PostgreSQL), hosted in the United States.
- Sensitive fields, including tasks, grocery items, reminders, notes, contacts, travel details, and children's names, are encrypted at the application layer using AES-256 before being written to the database. The encryption key is held in the application environment and is never stored in the database.
- Google OAuth tokens are stored encrypted.
- Message text is not persisted. Conversation history records store only a placeholder, timestamp, intent type, and family UUID. Calendar event logs store only the action type and timestamp, never the event title or date.
- Email content forwarded to Callie is processed transiently. The subject and body are used to extract calendar events and are not stored in the database.
- Postmark, which receives inbound emails on our behalf, retains message metadata per its own retention policy. See the Postmark Privacy Policy linked in Third-Party Services below.
- Each family's data is fully isolated at the database level using row-level security. No family can access another family's data.
Data Retention
- We retain your data for as long as your account is active.
- You can permanently delete your account and all associated data at any time by typing /deleteaccount in your Meet Callie Telegram group. Deletion is immediate and cannot be undone.
- Inbound email content is not retained beyond the request that processes it.
- Standard server logs are retained for up to 30 days.
Third-Party Services
Meet Callie uses the following third-party services:
- Google Calendar API, to manage your family calendar. Subject to Google's Privacy Policy.
- Telegram, as the messaging interface. Subject to Telegram's Privacy Policy.
- Anthropic Claude, for natural language processing to interpret requests. Anthropic does not use data submitted via the API to train its models. Subject to Anthropic's Privacy Policy.
- Supabase, as our managed PostgreSQL database provider for secure data storage. Subject to Supabase's Privacy Policy.
- Railway, for application hosting and infrastructure operations. Subject to Railway's Privacy Policy.
- Postmark, for inbound email parsing of travel confirmations you forward to Callie. Subject to Postmark's Privacy Policy.
- AfterShip, for package tracking. Tracking numbers are shared with AfterShip to retrieve delivery status. Subject to AfterShip's Privacy Policy.
- Open-Meteo, for weather data. No personal data is transmitted beyond approximate coordinates derived from location context. Subject to Open-Meteo Terms.
We do not sell, rent, or broker access to your family's data to any third party. Each provider listed above processes only the data strictly required to perform its function.
Children's Privacy
Meet Callie is for parents and adults. We collect children's names and activity information only as provided by parents for family coordination purposes. The service is not directed at children under 13, and we do not knowingly collect personal information directly from them. Parents who add children to a family Telegram group are responsible for that decision. If you believe a child under 13 has submitted personal information without parental consent, email privacy@meetcallie.ai and we will delete it promptly.
Your Rights
- Access: You can review your stored family data using Callie's commands at any time.
- Correction: You can update or delete individual items, including tasks, contacts, and events, through bot commands.
- Erasure: Type /deleteaccount to permanently delete all personal data associated with your family. A de-identified tombstone record with no personal information is retained solely to prevent re-registration abuse.
- Portability: To request a data export, contact privacy@meetcallie.ai.
- Object to processing: If you are in the EEA or UK, you may object to processing based on our legitimate interests by contacting privacy@meetcallie.ai.
- Google Calendar revocation: You can revoke calendar access at any time through your Google Account settings.
- If you are in the European Union or United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority.
- For any privacy request, contact privacy@meetcallie.ai.
Lawful Basis for Processing
If you are in the European Economic Area or United Kingdom, our lawful basis for processing your personal data is performance of a contract: we need the data to provide the service you signed up for. For usage metadata, our basis is legitimate interests in keeping the service running and improving it over time.
International Data Transfers
Meet Callie's infrastructure is hosted in the United States. If you use the service from outside the United States, your data will be transferred to and processed there. We rely on infrastructure providers who maintain appropriate safeguards for cross-border data transfers in accordance with applicable law, including Supabase, which provides a Data Processing Agreement covering EEA transfers.
Cookies and Tracking
This website does not use tracking cookies or analytics scripts.
Security Incidents
We take reasonable technical and organizational measures to protect your family's data. In the event of a security incident that affects your personal data, we will notify affected families via Telegram as promptly as reasonably possible, and will comply with applicable breach notification laws.
Changes to This Policy
We may update this privacy policy from time to time. We'll notify active families via Telegram when significant changes are made.
Contact
Questions about privacy? Email us at privacy@meetcallie.ai or send a message to the Meet Callie bot.