Privacy Policy

Last updated: October 15, 2026

This policy explains how Schedule & Scan handles information when you scan a paper calendar, review events, and export them to your digital calendar. It also covers our related website at scheduleandscan.com and privacy support communications.

The app is operated by JL Meyer Companies Inc., registered in Idaho, USA (“we,” “us,” or “our”). Our monitored support and privacy-request address is support@scheduleandscan.com.

Before you scan: your selected calendar photo is processed off your device through our Replit-hosted service and Replit’s managed AI service by Google Gemini. It can include names, appointments, notes, locations, or other personal information visible in the image. Only submit information you are authorized to share. Crop out unrelated or sensitive information where possible.

1. Information handled by the app

Calendar photos: the photo you take or select, including visible handwriting and other image content. The app creates resized or cropped copies, sends a small image for calendar-grid detection, and sends the calendar image for event extraction. If grid detection fails, the scan may use the uncropped calendar photo.
Event details: extracted and edited event titles, dates, times, locations, descriptions, and the calendar name you choose. Reviewed events are sent to our server when you request a calendar-file export.
Technical information: requests necessarily pass through hosting and network infrastructure, which can receive IP addresses, device/browser or request metadata, and timing information. Our application logs record request identifiers, methods, sanitized paths, response status, timing, and errors for reliability and security. Our code does not intentionally log calendar photos or event lists, and redacts calendar-import tokens in application request paths; infrastructure and provider logging are governed separately.
Support information: If you email us, we receive your email address and the information you include in your message or attachments. Please leave out calendar photos and sensitive appointment details unless they are needed to handle your request.

The current app does not require a user account and does not include advertising or third-party behavioral analytics SDKs. It does not request your contacts or GPS location. A location written on your calendar may still be included in a photo or extracted event.

2. Why we use this information

We use the information to detect the calendar grid, read handwritten events, let you review and edit results, generate calendar exports, prevent abuse, diagnose errors, respond to support and privacy requests, and meet applicable legal obligations. AI can make mistakes; please check all results before adding events.

3. AI processing and service providers

Replit hosts our service and provides managed access to Google Gemini. Calendar images and AI instructions pass through these services, and generated results return through them to the app. This is not on-device-only processing.

Provider handling depends on applicable terms, account settings, and service configuration. Google’s published Gemini API terms distinguish paid services (where Google says prompts and responses are not used to improve its products, but limited safety/security logging can occur) from unpaid services (where content may be used for improvement and human review, subject to regional exceptions). Replit’s public managed-integration documentation does not establish which specific Google data-processing configuration applies to every request from this app.

We do not promise zero retention, immediate deletion, or that every provider is prohibited from using submitted content for model improvement. We have not verified a fixed provider retention period or an app-specific no-training commitment for this managed connection. Replit’s published model-improvement controls also depend on the account or agreement; we do not assume those controls establish the treatment of app-user API traffic.

Read the providers’ current information:

4. Permissions and your choices

The app asks for your explicit agreement before sending calendar images for AI processing. Agreement is remembered for the current app release and disclosure version; an app update asks again. You can decline or withdraw through Privacy & AI Consent in the app. Declining prevents AI scanning but does not delete your original photo.

Withdrawal blocks future AI requests and attempts to cancel pending ones. It cannot recall information already sent or guarantee deletion by providers. If saving withdrawal fails, the app explains that permission is blocked for that session and asks you to retry or clear app storage.

Camera and photo-library permissions are separate from AI agreement. Use device settings to manage these permissions. The app processes the photo you choose, not your entire library. Calendar exports are opened, downloaded, or shared with the destination you choose; your calendar app or operating system controls any access it requires. The current export flow does not upload the contents of your existing digital calendars.

5. Storage, retention, and deletion

On your device: the app stores an AI permission record (release, disclosure version, acceptance, and time) and a limited history of exported-event fingerprints to help avoid duplicates. Fingerprints are derived from event details; they should not be treated as anonymous. While a scan is in progress, the app keeps temporary image copies: its own copy of the photo you took or chose, and resized and cropped versions used to find the calendar, show it on screen while scanning, and send it for AI reading. On iPhone and Android the app deletes each resized or cropped copy as soon as it is no longer needed, and deletes its photo copy and the photo shown while scanning when you leave the scan screen, including when a finished scan moves on to review (the photo copy is kept while “Try Again” is available). The review screen does not keep a photo. Copies left by an interrupted session, for example if the app was closed or the phone restarted during a scan, are removed the next time the app opens. If a deletion fails, the copy remains until a later launch removes it, the system clears it, or you remove it (see below). Device backups and operating-system behavior are outside the app’s control. On the web, the app releases the image references it created, but your browser manages its own cache. On iPhone and Android, calendar files the app creates for sharing are kept while you can open them again on the export success screen, then deleted when you leave that screen or leave review. A file is not deleted while its share sheet is open. Failed shares and writes are also cleaned up when no longer in use. Calendar files left by an interrupted session are removed on the next launch using the same app-private allowlist and in-use protections as scan copies. If deletion fails, the file remains until a later launch removes it, the system clears it, or you use “Data on this device”. This does not remove copies downloaded or shared outside the app, or events already added to a calendar. On the web, your browser manages downloaded calendar files.
On our app server: scan images and event data are processed to answer requests. The current code does not save them to an application database or photo repository. This does not mean hosting, AI-provider, security, or error records cannot retain information.
Calendar-import links: the server can create short-lived links containing encrypted event data, without a server-side event database. Anyone with a working link may be able to access the calendar file. Treat links as private; they may be usable more than once until expiry. Expiry does not delete copies already downloaded or imported.
Exported events: calendar apps, sync providers, downloaded files, and recipients of shared exports keep their own copies under their own settings and policies. Delete events in your calendar app and remove shared or downloaded copies separately.
Logs and correspondence: technical records and support messages may remain for operational, security, support, or legal needs. We have not established a single fixed deletion period for all such records or provider-held data. Contact us about records we control; we will assess the request and any applicable obligations or exceptions.

In the app, Privacy & AI Consent → Data on this device removes anything automatic deletion left behind. It lists the temporary scan images, the app’s own copies of photos you took or chose, calendar files the app created for sharing, and the export history it will remove, and asks you to confirm before deleting them. It reports anything it could not remove. Photos taken with the in-app camera are not saved to your photo library, so clearing removes the app’s only copy. Clearing does not change your AI permission choice (withdraw it separately) and does not remove photos in your photo library, events already added to a calendar, or files you downloaded or shared. After export history is cleared, the app can no longer warn that a month was exported before, so exporting the same events again may create duplicates. On the web, the app clears its export history; your browser manages its own cache and downloads.

You can also clear this app’s local storage or remove the app to remove all its locally stored records, including the AI permission record, subject to device backup and operating-system behavior. On the web, clear site storage and caches. This does not remove your original photos, exported files, calendar events, email correspondence, or provider-held records.

6. Sharing and security

We send information to the providers described above to operate scanning and hosting, and to calendar or sharing destinations you select. We may disclose information where required by law or necessary to address fraud, abuse, or security issues. We do not sell calendar photos or event lists or use them to target advertisements. That statement does not replace the providers’ own policies.

We use HTTPS for service requests and encrypt event data inside calendar-import tokens. No transmission or storage method is completely secure. Information may be processed in the United States and other countries where our providers operate; we do not promise Idaho-only or US-only processing.

7. Privacy requests

Email support@scheduleandscan.com for privacy questions or requests to access, correct, or delete information we control, or to exercise other rights available under applicable law. This mailbox is monitored and handles privacy requests. Describe your request and provide only the information needed to locate the relevant record; do not send passwords or private calendar links. We may need to verify your request.

We cannot identify every scan by user account because the app has no account system, and we cannot directly erase information held solely on your device, in your calendar provider’s systems, or under another provider’s independent control. We will explain these limits when responding. If you believe a child’s personal information has been submitted inappropriately, contact us at the same address.

8. Website and policy updates

Our marketing and privacy pages do not add advertising trackers or analytics scripts. Hosting services can still process ordinary website request metadata. This policy concerns Schedule & Scan, not every practice of Replit’s own website or Google’s consumer products.

We may update this policy as the app or service practices change and will revise the date above. Changes to this page do not themselves grant AI permission; the app’s consent controls remain separate.