Privacy Policy

Introduction

Jolly Yeti ("Jolly Yeti," "we," "us," or "our") operates the SkedBolt mobile application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service.

Effective date: August 12, 2026. Last updated: September 12, 2026.

By using SkedBolt, you agree to this Privacy Policy. If you do not agree, do not use the Service.

Information we collect

We collect information in these categories:

• Account information — name, email address, authentication identifiers, and profile details you provide (including display names).
• Preferences and profile data — dietary preferences, tags, interests, budget, distance settings, social tiers, visibility choices, and other planning preferences you save.
• User content — events, titles, polls, invites, messages, interest posts, rules, photos, videos, reviews, comments, memories, and other content you create or upload.
• Calendar and scheduling data — event times, SkedBolt events and polls, and scheduling metadata needed to provide planning features. If you connect an external calendar (see "Connected calendars" below), we also process availability and sync data from that provider. If you enable "Share free/busy with friends" in Settings, we store busy-time blocks derived from your calendars so friends can see when you are free or busy; we do not share event titles or other calendar details through that feature.
• Location information — approximate or precise location when you grant device location permission, used for nearby venue and event suggestions, distance-based discovery, map pickers, event check-in, live ETA sharing, weather for events, and attaching location to posts or memories you choose to create.
• Contacts — if you use invite or friend-finding features, we process contact information you select (such as email or phone) to send invitations or match existing users. We do not upload your full address book without your action.
• Social graph — friends, groups, invite lists, RSVPs, and interaction data within the Service.
• Device and usage data — app version, device type, operating system, IP address, crash logs, diagnostics, and product analytics about how features are used.
• Push notification tokens — if you enable notifications, we collect and store a Firebase Cloud Messaging (FCM) / Apple Push Notification service (APNs) device token linked to your account so we can deliver alerts, invites, and reminders you request or enable. Tokens are removed when you sign out (best effort) or when no longer needed.
• AI interaction data — prompts, selected context (such as preferences, invitee lists, notes, or venue hints you choose to include), and model outputs for AI-assisted features. See "Artificial intelligence (AI) features."
• Purchase data — subscription status and transaction identifiers from Apple In-App Purchase or Google Play billing (we do not receive your full payment card number).
• Communications — support requests and notifications you receive or send through the Service.
• Reports and moderation signals — reports you submit about content or users, and records of enforcement actions.

Disability, accessibility, health, and other sensitive information

The Service does not require you to identify as disabled or provide a diagnosis. However, information you choose to enter may reveal or permit inferences about a disability, physical or mental health, chronic illness, neurodivergence, pregnancy, dietary or religious practice, mobility, sensory or communication needs, service-animal use, or requested accommodations. This can occur through profile preferences, dietary settings, health or wellness tags, custom preferences or limits, event details, rules, messages, feedback, location, support requests, accessibility requests, or AI prompts.

We treat this information as sensitive where required by law. We process it only for disclosed and reasonably necessary purposes, such as providing a feature you request, applying your sharing choices, helping plan an event, responding to an accommodation or support request, maintaining safety and security, complying with law, or improving accessibility. We do not use disability or health information to exclude you from the Service, determine eligibility for ordinary features, set subscription prices, serve targeted advertising, or sell personal information.

You control whether to provide most preference and accommodation information. Use per-preference visibility and audience settings before sharing. A preference marked public or shared may be visible to the audience you select and may be used in guest planning. Private preferences may still be processed to provide planning or AI features you personally invoke, as described below. Custom text can contain sensitive information, so enter only what is necessary.

We are not a health-care provider, insurer, employer, benefits administrator, or emergency service. The Service is not intended to create or maintain clinical medical records, provide medical advice, diagnose conditions, or determine eligibility for health care, employment, insurance, housing, credit, education, or government benefits. HIPAA may not apply to information you provide to us.

Consent and controls for sensitive data

Where applicable law requires consent to process sensitive data—including data concerning physical or mental health, disability-related needs, precise geolocation, or a child's data—we rely on an affirmative action such as entering the information, enabling a setting, granting a device permission, selecting a sharing audience, or submitting a request. This does not replace any additional consent required by law.

You may withdraw consent or change sharing choices through Manage Preferences, privacy or consent settings, device permissions, connected-calendar settings, or by contacting support@skedbolt.com. Withdrawal does not affect processing already completed and may prevent features that require the information from working. Deleting public text does not guarantee that another user did not previously view, copy, or act on it.

Do not provide another person's disability, health, accommodation, precise-location, or other sensitive information unless you have their permission and a lawful basis. Event organizers and other users are independently responsible for handling sensitive information they receive lawfully and respectfully.

Artificial intelligence (AI) features

SkedBolt uses artificial intelligence to help you plan (for example: quick plan / create-event assist, smart assist, day planning, note insights, menu or venue-related suggestions, and similar features).

Disclosure of AI presence: When you use these features, content or suggestions may be generated or assisted by AI systems. AI-generated or AI-assisted output is labeled or presented as a suggestion where the product UI indicates assistive planning; you should treat it as draft assistance, not as verified fact.

What we process for AI: We may send prompts and related context you provide or that is needed to fulfill your request (such as preference tags you share, dietary or accessibility-related preferences, guest names you select, times, locations, or note text) to AI inference providers to generate a response. A private preference may be included when you direct the Service to plan for you; guest information is intended to be limited to information shared with the relevant audience. Do not include disability, health, accommodation, precise-location, or other sensitive personal data about others in AI prompts unless you have a lawful basis and their permission.

Providers: AI features currently run through Google infrastructure associated with our Firebase project, including Google's Gemini models via Firebase AI Logic and/or Vertex AI, depending on platform. Those providers process prompts and outputs to return results to the Service under their terms and our agreements with them. We do not sell your AI prompts for advertising.

Human review: We do not use your AI prompts to train public foundation models as a product feature. Providers may process data as described in their privacy documentation. We may review prompts or outputs in limited cases for abuse investigation, security, debugging, or legal compliance.

Limited Use (Google APIs): The use of raw or derived user data received from Google APIs—including Google Calendar / Workspace APIs—will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use, transfer, or sell Google user data (raw, aggregated, or derived) to create, train, or improve foundational or generalized machine learning or artificial intelligence models. AI features in SkedBolt use prompts and context you provide in the Service; they are not used to train foundational models on Google Calendar API data.

AI limitations and fairness: AI may misunderstand accessibility needs, omit accommodations, suggest inaccessible venues, or produce biased or inaccurate output. We do not use AI to make legal or similarly significant decisions about disability, health, employment, housing, credit, education, insurance, or benefits. Verify venue accessibility and accommodations directly. Report harmful or discriminatory output to support@skedbolt.com.

Your choices: You can avoid AI features by not using AI-assist buttons and flows. Core scheduling without AI remains available subject to your plan. If you want AI-related data removed with your account, use account deletion or contact support@skedbolt.com.

Connected calendars (Google, Apple)

Calendar connections are optional and user-initiated in Settings → Calendar Sync. We do not access external calendars unless you connect a provider.

Apple Calendar — with your iOS permission, we may read free/busy windows from calendars on your device and write SkedBolt events you choose to export to your local Apple Calendar.

Google Calendar — if you tap Connect and approve Google's OAuth consent screen, we access your Google account through Google's APIs to: • list calendars you can read; • read free/busy (busy-time windows) for scheduling and conflict detection; • create, update, or delete calendar events on your behalf when you export, edit, or remove SkedBolt events that you choose to mirror to Google Calendar.

We store on our servers: synced busy-time blocks (start/end times only, not event titles from Google), identifiers linking SkedBolt items to external calendar entries when export is enabled, and sync metadata needed to keep calendars consistent. We use Google Calendar data only to provide calendar sync and scheduling features in SkedBolt. We do not use Google user data to serve ads, build advertising profiles, or sell personal information. Google's use of data obtained through Google Sign-In and Calendar APIs is also subject to the Google Privacy Policy and Google API Services User Data Policy (including Limited Use requirements).

Google User Data & Limited Use (affirmative statement): SkedBolt's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: (1) we use Google Calendar data only to provide user-facing calendar sync and scheduling features you enable; (2) we do not sell Google user data; (3) we do not use Google user data for advertising; and (4) we do not use raw, aggregated, or derived Google Workspace/Calendar user data to create, train, or improve foundational or generalized AI/ML models.

You can disconnect any provider in Settings → Calendar Sync. Disconnecting stops new sync activity; previously stored busy blocks and link metadata may remain until refreshed, deleted, or removed when you delete your account, as described in "Data retention."

Location, live sharing, and accessibility implications

Device location is optional and controlled through system permissions. Depending on the feature you invoke, we may use approximate or precise location for nearby venue suggestions, distance calculations, maps, weather, check-in, live ETA sharing, posts or memories, and safety or fraud prevention. Location may reveal visits to sensitive places or support inferences about health, disability, religion, or other protected characteristics.

We do not sell precise geolocation or use it for targeted advertising. We do not use sensitive-location visits to build advertising profiles or intentionally infer a diagnosis, disability, religion, or other protected status. Live ETA or check-in information is shared only through the feature and audience you choose, but recipients may capture or redistribute what they see.

You can stop future device-location access in system Settings and stop a live-sharing session in the relevant feature. Some nearby, map, weather, check-in, or ETA features will not work without location. Confirm that a venue meets accessibility needs directly; a map result, distance estimate, or venue label is not an accessibility certification.

How we use information

We use information to:

• Provide, maintain, and improve the Service, including scheduling, discovery, polls, rules, collaboration, and AI-assisted planning.
• Sync calendars you connect, detect scheduling conflicts, show availability, and mirror SkedBolt events when you enable those features.
• Personalize suggestions, including venue and plan recommendations based on your preferences and calendar context.
• Send push notifications, reminders, and invites you request or enable using your device token.
• Show mutual availability and free/busy indicators to friends who are permitted to see them, when you opt in to sharing.
• Moderate content, investigate abuse, enforce our Terms and Community Guidelines, and protect users.
• Process subscriptions and enforce plan limits.
• Monitor performance, fix bugs, prevent fraud and abuse, and protect security.
• Comply with law and respond to lawful requests.
• Communicate with you about the Service, including support and important updates.

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising as those terms are defined under the California CPRA. We do not use your data for third-party advertising profiles.

How we share information

We may share information:

• With other users — according to your settings and the features you use (for example, event details with invitees, public interest posts, discover broadcasts you send, profile display names, photos you attach, or free/busy blocks when you turn on "Share free/busy with friends"). Free/busy sharing shows only whether you are free or busy in a time range—not event names, locations, or other calendar details.
• With service providers — who help us operate the Service under contractual obligations, including cloud hosting, authentication, analytics, crash reporting, push delivery, maps/places, weather, email delivery, and AI inference providers (including Google Firebase / Gemini / Vertex AI as applicable).
• For legal reasons — if required by law, court order, or to protect rights, safety, and integrity of users and the Service.
• In a business transfer — if we merge, acquire, or sell assets, subject to continued protection of your information.

Current infrastructure providers may include Google Firebase (hosting, authentication, database, analytics, crash reporting, cloud messaging, and AI), Google Calendar API (when you connect Google Calendar), Apple (Sign in with Apple, device calendar access, In-App Purchase, Push Notification service, and WeatherKit when you view event weather), Google Play billing (Android), Microsoft identity and calendar services (when you connect Outlook), and mapping/location data providers when you use venue features.

Third-party service providers and data collectors

We use third-party companies ("service providers," "processors," or "subprocessors") to help operate the Service. Some of these companies process personal information on our behalf; others may also collect limited device, diagnostics, or usage data as part of providing their tools. They are not permitted to use your information to sell it or to build advertising profiles for third parties on our behalf.

Google Firebase / Google Cloud — SkedBolt uses Google Firebase and related Google Cloud services as core infrastructure. Depending on features you use, this can include Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Firebase Cloud Messaging (push), App Check, Firebase Analytics, Firebase Crashlytics, and AI features via Firebase AI Logic and/or Vertex AI (including Google Gemini). Google may process account identifiers, profile and content data you store in the Service, device and push tokens, diagnostics and crash logs, analytics events, and AI prompts/outputs as needed to provide those services under Google's terms and our agreements with Google. Firebase Analytics and Crashlytics may collect device and app-usage information that Google processes as described in Google's privacy documentation.

Other processors may include Apple (Sign in with Apple, In-App Purchase, Push Notification service, WeatherKit, and on-device calendar access you grant), Google Play Billing (Android), Google Calendar APIs (when you connect Google Calendar), Microsoft identity and calendar services (when you connect Outlook), and maps/places providers when you search for or attach venues.

A current list of material infrastructure providers is also summarized under "How we share information." For questions about processors, email support@skedbolt.com.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing.

• Profile and privacy controls — update profile data, tag visibility, guest consent, and privacy settings in the app.
• Connected calendars — connect or disconnect providers in Settings → Calendar Sync; you may also revoke access in your Google Account or device privacy settings.
• Free/busy sharing — off by default; toggle in Guest Consent / privacy settings.
• Location — control via system Settings. Some features will not work without location permission.
• Notifications — manage in app and system settings.
• AI features — optional; simply do not invoke AI assist flows.
• Account deletion — follow the steps at skedbolt.com/delete-account, or email support@skedbolt.com.

• Accessibility — request an accessible copy of this notice, help exercising privacy rights, or another reasonable communication method by emailing support@skedbolt.com. You will not be discriminated against for requesting accessibility assistance.

To exercise rights, email support@skedbolt.com with "Privacy Request" in the subject. Describe the right and account involved. We may verify your identity, authority, residency, or guardianship before responding, and we will respond within the period required by applicable law. If we deny a request, we will provide the reason and any available appeal method where required. See also the Oregon, other U.S. state, California, and Europe/UK sections below.

Oregon privacy rights (OCPA)

This section applies to Oregon residents to the extent the Oregon Consumer Privacy Act (OCPA) applies to Jolly Yeti.

Oregon residents may have rights to: confirm whether we process their personal data; access it; obtain a portable copy; correct inaccuracies; delete data; obtain a list of specific third parties to which personal data was disclosed where required; and opt out of sale, targeted advertising, or profiling in furtherance of decisions producing legal or similarly significant effects.

We do not sell personal data, use it for cross-context targeted advertising, or profile users to make legal or similarly significant decisions. We do not sell precise geolocation. Where required, we obtain consent before processing sensitive data, which may include physical or mental health information, disability-related information, precise geolocation, and personal data of children. You may withdraw consent as described in "Consent and controls for sensitive data."

Submit a request to support@skedbolt.com with the subject "Oregon Privacy Request." If we deny your request, you may appeal by replying with "Oregon Privacy Appeal." We will not discriminate against you for exercising privacy rights.

Other U.S. state privacy rights

Residents of states with comprehensive privacy laws may have rights similar to access, correction, deletion, portability, and opting out of sale, targeted advertising, or certain profiling, subject to eligibility, exemptions, and verification requirements.

We do not sell personal information or share it for cross-context behavioral advertising. If our practices change, we will update this Policy and provide legally required choices before the change applies. Where a covered law requires us to recognize a valid universal opt-out signal for sale or targeted advertising, we will do so for the relevant processing. Because we do not engage in those activities, an opt-out signal should not change current advertising or sale practices.

Submit a request or appeal to support@skedbolt.com with your state in the subject line. Authorized agents may submit requests where permitted, subject to proof of authority and identity verification.

California privacy (CCPA/CPRA)

This section applies to California residents.

Categories of personal information we collect (as described more fully above) may include: identifiers (name, email, account ID); customer records information; commercial information (subscription status); internet or electronic activity (app usage, device data); geolocation data (when permitted); audio/visual information (photos you upload); inferences drawn from preferences you provide; and sensitive personal information only if you voluntarily provide it (for example dietary preferences). We collect this information for the business purposes described in this Policy.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that require a right to limit under the CPRA beyond providing the Service you request.

California residents may request: (1) to know/access categories and specific pieces of personal information; (2) deletion; (3) correction of inaccurate information; and (4) information about our practices. You may designate an authorized agent to make a request; we may require proof of authorization and verify your identity.

We will not discriminate against you for exercising CCPA/CPRA rights.

Shine the Light: We do not disclose personal information to third parties for their direct marketing purposes.

To submit a request, email support@skedbolt.com with the subject "California Privacy Request."

Europe and United Kingdom (GDPR/UK GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, this section applies.

Controller: Jolly Yeti is the controller of personal data processed through the Service. Contact: support@skedbolt.com.

Legal bases for processing may include: performance of our contract with you (providing the Service); legitimate interests (securing the Service, preventing abuse, improving features, analytics); consent (where required, for example certain location, notification, or marketing uses); and legal obligation.

International transfers: We and our providers may process data in the United States and other countries. Where required, we rely on appropriate transfer mechanisms such as the European Commission's Standard Contractual Clauses (and UK equivalents) or other lawful safeguards offered by our providers.

Your rights may include access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests, and withdrawal of consent where processing is consent-based. These rights are not absolute. You may lodge a complaint with your local supervisory authority.

Automated decision-making: AI features generate suggestions to assist planning. They are not used to make legal or similarly significant decisions about you without human involvement. You remain responsible for accepting or rejecting suggestions.

To exercise rights, email support@skedbolt.com with the subject "GDPR / Privacy Request."

Data retention

We retain information only as long as reasonably necessary for the purposes described in this Policy, including while your account is active, to provide requested features, comply with legal obligations, resolve disputes, enforce agreements, and maintain security.

Retention varies by category. Account and profile data generally remains until account deletion; events, messages, posts, preferences, rules, media, and collaboration records remain while needed for the feature or until deleted, subject to other users' records and legal obligations; live or precise location is retained only as needed for the selected feature and related security or dispute purposes; support, accessibility, moderation, and safety records may be retained to resolve the request, prevent abuse, and document compliance; transaction and subscription records may be retained for tax, accounting, fraud, and store requirements; and backups may persist for a limited restoration cycle before deletion or overwriting.

Account deletion does not automatically cancel an Apple or Google subscription. Content shared with others, records transferred to a co-host, deidentified or aggregated information, legally required records, security records, and copies made by other users may remain. Contact support@skedbolt.com for information about a specific category.

Security

We use administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, authentication safeguards, service-provider controls, and measures appropriate to sensitive data. Access to disability, health, accommodation, precise-location, and other sensitive information is limited according to feature, audience, and operational need.

No method of transmission or storage is 100% secure; we cannot guarantee absolute security. If we determine that a security incident requires notice, we will notify affected people, regulators, or others as required by applicable law. Depending on the data and Service classification, this may include obligations concerning health-related data even when HIPAA does not apply.

Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact support@skedbolt.com and we will take appropriate steps to delete it. Where local law requires a higher age for certain processing, we will comply.

International users

If you access the Service from outside the United States, your information may be processed in the United States and other countries where we or our providers operate. Those countries may have different data protection laws than your jurisdiction. See the Europe/UK section for transfer information applicable to EEA/UK users.

Changes

We may update this Privacy Policy from time to time. We will post the updated version in the app and update the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate and may require renewed acceptance. Continued use after changes become effective constitutes acceptance where permitted by law.

Contact

Jolly Yeti
Privacy / rights requests: support@skedbolt.com
Copyright / DMCA: support@skedbolt.com