Privacy Policy

CALCAI LLC — PRIVACY POLICY

Effective date and last updated: September 27, 2026.

This policy explains how CalcAI LLC handles information for its website, app, connected calculators, AI services, purchases, and support. Reading or accepting this policy does not by itself give permission to share content with an AI provider.

1. Who Operates the Services

CalcAI LLC, 209 S Broadway, South Amboy, NJ 08879, United States. Contact our monitored support and privacy inbox at info@calcai.cc.

2. Scope of This Privacy Policy

This policy covers information CalcAI processes. AI providers, payment and shipping services, Apple, and embedded video services also process information under their applicable agreements and privacy information. Their practices are not identical.

3. Summary of Important Practices

3.1 Accounts and devices

We associate your account with linked calculator identifiers, settings, activity history, and usage to provide connected features and manage access.

3.2 Checkout and shipping

Checkout collects contact, billing, and shipping details. Card details are submitted directly from the browser to Authorize.net for tokenization. CalcAI uses the resulting payment token to request payment and keeps order and transaction records; it does not store full card numbers or card security codes.

3.3 AI questions and photos

When AI is enabled and you send a request, calculator questions, photos, and relevant custom instructions pass through CalcAI to the selected provider: OpenAI, Google (Gemini), or Anthropic. We store activity history and usage associated with your account or device.

3.4 Support access

CalcAI's backend and administrative tools can access stored content for service operation, support, troubleshooting, and security. Content is not end-to-end encrypted against CalcAI.

3.5 Local Wi-Fi setup

During Bluetooth setup, the app sends the network name and password locally to the calculator so it can connect to Wi-Fi. This setup path is separate from AI API-key storage on CalcAI's servers. Do not include network passwords in questions, photos, or support messages.

3.6 Customer-supplied AI API keys

The app sends your full API key over HTTPS to CalcAI's server. The server sends that credential to the selected provider to validate it, stores it encrypted, and decrypts it when making requests for you. The app displays only the last four characters of a saved key. This display does not mean CalcAI cannot access the full key, and this is not end-to-end encryption.

Removing a saved key deletes CalcAI's stored copy. Disabling a key keeps the saved copy but stops using it; requests may use CalcAI's own provider key instead. Neither action revokes the key at its provider. Revoke it separately in your provider account.

3.7 Retention and deletion

Saved questions, answers and photos stay in your account until you clear them or delete your account or linked device. We do not automatically delete this saved content after six months. Different records have different deletion paths, described in Sections 12 and 16. Clearing history is not a guarantee that every associated photo, diagnostic record, backup, or provider copy is deleted.

4. Information CalcAI Collects

• Account information: email address, account identifier, authentication information, profile information you provide, and sign-in provider identifiers when used.
• Linked devices: calculator identifiers, account-device links, device and firmware information, selected model, and configuration needed for connected features.
• Content: questions, photos, AI responses, and optional notes or custom context. Relevant custom context is included in AI requests; saved notes are stored for retrieval and are not automatically a separate AI request.
• Usage and diagnostics: request times, feature and model usage, account/device usage counts, errors, and device diagnostic events. Network infrastructure also processes IP addresses and request metadata.
• AI credentials: the full key you submit, its encrypted stored value, last four characters, provider, enabled state, and update time.
• Commerce: customer name, email, telephone number when supplied, billing and shipping addresses, items, amounts, payment status and transaction identifiers, fulfillment, refunds, and support correspondence. Payment tokens are used to submit payments.
• Website activity: page visits and performance information, browser/network information, and browser storage described in Section 10.

5. Wi-Fi Credentials and Cloud Credentials

Bluetooth provisioning sends Wi-Fi credentials to the calculator. The app may display nearby or saved network names and connection status. AI credentials follow a different path: they are submitted to CalcAI's backend as described in Section 3.6. A local Wi-Fi setup feature does not make AI processing local to the calculator.

6. How CalcAI Uses Information

We use information to authenticate accounts, link and configure calculators, generate and display AI answers, retrieve history and notes, apply custom instructions, track usage limits, validate and use saved provider keys, troubleshoot failures, protect the service, process and fulfill orders, and respond to support or privacy requests. Order records also support refunds, disputes, accounting, and applicable legal obligations.

7. Artificial Intelligence Processing

Your selected provider receives the question, any photos included in the request, and relevant custom instructions so it can generate an answer. CalcAI receives the result and stores activity and usage for your account/device. Requests also pass through our hosting infrastructure, including Cloudflare AI Gateway. Validating a customer-supplied key sends that credential to its provider.

Provider handling depends on the service, account, settings, and applicable commercial agreement, including whether the request uses your key or CalcAI's key. We do not promise zero retention, no training, or the same terms across providers.

• OpenAI: privacy information and API data controls. API content is governed by the applicable customer agreement.
• Google (Gemini): privacy policy and Gemini API terms, which distinguish paid and unpaid services.
• Anthropic: privacy policy and commercial data retention information.

The app asks for permission before enabling AI sharing and provides an AI sharing control in Settings. Turning AI sharing off prevents new AI requests; pairing and Wi-Fi management remain available. Turning it off cannot undo information already sent to a provider.

8. Access to Content and Photos

Stored history is associated with the linked account/device. CalcAI administrative tools can retrieve content for operational purposes. Photo access uses ownership checks and time-limited access links. Anyone who receives a still-valid access link may be able to view that photo until the link expires; avoid sharing these links or submitting sensitive images.

9. Communications and Support

We process the contact details and messages you send to support, and send account verification, password-reset, and order emails through Resend. Email privacy and deletion requests to info@calcai.cc. Do not send passwords, full API keys, or payment card details. A support request does not require joining Discord or posting information publicly.

If you opt in to restock or product texts, we store your phone number, subscription status, source, and consent time in Cloudflare D1 and use Twilio to deliver messages. Reply STOP to opt out or contact this inbox. Opting out updates subscription status; it does not automatically erase consent or suppression records. These records are separate from calculator history. We do not share mobile opt-in data or consent with third parties for their own marketing; messaging processors receive information needed to deliver the service.

10. Website Services, Cookies, and Other Recipients

• Cloudflare: website hosting, backend processing and storage, AI Gateway routing, security, and website performance analytics. The live site loads Cloudflare Web Analytics. See Cloudflare's privacy policy.
• Authorize.net: card tokenization, payment authorization, transaction handling, and fraud checks. See Authorize.net privacy information.
• Shippo and shipping carriers: addresses and shipment details for rate quotes, labels, and delivery.
• Twilio: delivery and opt-out handling for opted-in text messages; subscriber and consent records are stored in Cloudflare D1.
• Neon: database hosting for order and administration records. Resend: transactional email delivery.
• Apple and Google: account authentication when you choose their sign-in options. Their services have their own privacy practices.
• YouTube/Google: embedded setup videos on Help contact Google services when the page loads, even before playback. In a fresh-browser check, these embeds set YouTube cookies including YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, __Secure-YNID, and __Secure-ROLLOUT_TOKEN, and contacted advertising-related Google domains. See Google's privacy policy.
• FlagCDN: checkout loads country-flag images, which sends ordinary browser request information to that host.

Checkout uses local and session browser storage for payment-attempt and receipt identifiers so it can recover payment status and reduce duplicate submissions. This is separate from cookies. You can clear or restrict browser storage and third-party cookies in your browser; doing so can affect checkout recovery, sign-in, or video playback. Cookie behavior may vary by browser and region. We do not describe the entire website as cookie-free.

We also disclose information when required by applicable law, to handle legal claims and protect rights, or in a business transfer subject to applicable requirements. Links to external communities or services lead to their own privacy practices.

11. Advertising and Privacy Choices

Embedded YouTube content can contact advertising-related services as described above. We do not treat the absence of a separate advertising SDK in the app as proof that every website or provider service is free of advertising-related processing. For applicable sale, sharing, or targeted-advertising choices, contact info@calcai.cc; see Section 17 for rights that may apply.

12. Data Retention

We retain saved questions, answers and photos until you clear them or delete your account or linked device. We do not apply a six-month automatic expiry to this saved content. Other records follow the deletion paths below. We do not promise a fixed deletion deadline for backups, processors, support, or legally required records.

• Accounts and linked devices: remain until account/device removal or another deletion action. Account deletion removes the account/profile and saved keys, and removes linked-device records, usage, notes, and custom context through the account-deletion process. A device-release record can remain.
• History and photos: saved questions, answers and photos remain until you clear them or delete the account or linked device. Clear history deletes the photos referenced by the entries it removes. Account deletion also removes photos indexed to that account. Older unindexed files whose history references were removed before these controls existed can require separate cleanup; contact support about remaining photos. Deletion from active storage does not remove copies already held by providers or downloaded by a recipient.
• Notes and custom context: remain until replaced, cleared, or removed through account/device deletion. Clearing history alone does not clear them.
• Saved API keys: remain encrypted until replaced, removed, or deleted with the account. Disabling a key does not delete it. Provider-side credentials and records are separate.
• Usage and diagnostic records: account/device usage persists until deletion. Some tester diagnostic batches are trimmed when new batches arrive; this does not guarantee deletion after a fixed interval if no new batch arrives. Other diagnostic, infrastructure, gateway, and support records have separate retention, with no verified universal automatic deadline.
• Commerce records: orders, payment-attempt/recovery records, fulfillment, refunds, and correspondence are stored separately and are not erased by app history or account deletion. No automatic commerce deletion schedule has been verified. Business and legal retention periods must be established separately.
• Backups and processors: deletion from active CalcAI storage does not establish deletion from backups or independent processors. Backup expiry and processor retention have not been verified as a single schedule; no specific deadline is promised here.

Specific legal holds or required recordkeeping can limit deletion where applicable. We will assess a request against the records held and applicable requirements; this policy does not assert that all retained records are legally required. Provider data must also be addressed through the applicable provider's controls or request process.

13. Aggregate Information

Usage counts and performance measurements help operate the service. Account- or device-linked records are still treated as personal information; calling a record a diagnostic or usage record does not make it anonymous.

14. Security

The app transmits AI API keys to the backend over HTTPS. Saved keys are encrypted with server-side encryption and decrypted by the service for use. This protects stored key values but does not prevent CalcAI's server from accessing them. No system is completely secure. Photo access uses the ownership checks and expiring links described in Section 8.

15. Reporting a Privacy or Security Issue

Email info@calcai.cc with a description and the affected account or device. Do not include credentials or sensitive images in an initial report. We may ask for information needed to verify ownership and investigate.

16. Your Controls and Deletion Requests

• History: open History for the selected calculator, tap the trash icon (Clear history), and confirm Clear. This removes history entries and their referenced photos. See Section 12 for older unindexed files, backups, and provider copies.
• Account: open Settings, select Delete Account, and complete the confirmation. If this fails or you cannot sign in, email info@calcai.cc from the account email when possible. Specify whether you want account deletion, history/photos removed, or another privacy action.
• Notes/context: clear or replace saved notes/custom instructions separately; history deletion does not do this.
• API keys: use the saved provider-key controls in Settings to remove or disable a key. Disabling is not deletion and may allow use of CalcAI's key. Revoke the original credential in your provider account if you want it invalidated there.
• AI sharing: use the AI sharing control in Settings to prevent new AI requests. Turning it off cannot recall information already sent to a provider.
• Apple sign-in: the account-deletion process revokes the stored Apple authorization before removing the account. You may be asked to sign in with Apple again when the required authorization is missing. You can also stop using Sign in with Apple for CalcAI in your Apple Account settings; that action alone is not a CalcAI account-deletion request.

Contact our monitored inbox at info@calcai.cc for deletion or access requests. Include your account email and enough information to identify the request, not passwords or keys. We may verify identity. App deletion does not automatically erase commerce, support, backup, or AI-provider records. We do not promise a support response time in this policy.

17. United States State Privacy Rights

Depending on the user’s state of residence, the nature of the information, and whether a particular state privacy law applies to CalcAI, users may have rights concerning their personal information.

These rights may include the right to:

• Confirm whether CalcAI processes personal information;
• Access personal information;
• Obtain a copy of personal information;
• Correct inaccurate personal information;
• Delete personal information;
• Obtain certain information in a portable format;
• Opt out of the sale of personal information;
• Opt out of targeted advertising;
• Opt out of certain profiling;
• Limit certain uses of sensitive personal information;
• Withdraw consent;
• Obtain information regarding certain recipients;
• Appeal the denial of a privacy request; and
• Exercise privacy rights without unlawful discrimination.

Not every right applies in every state, to every person, or to every business.

CalcAI may deny or limit a request where permitted by law, including when:

• CalcAI cannot verify the requester’s identity;
• An exception applies;
• The information must be retained by law;
• The request is fraudulent;
• The request would interfere with another person’s rights;
• The request is excessive or repetitive; or
• The requested action is not technically or legally required.

17.1 Submitting a privacy request

Privacy requests may be submitted using the following contact information:

Email: info@calcai.cc
Phone: (640) 220-4665
Mail:
CalcAI LLC
209 S Broadway
South Amboy, NJ 08879
United States

The request should include:

• The requester’s name;
• The email address associated with the account or order;
• The state of residence;
• The right being requested;
• Relevant order, account, or device information; and
• Enough information for CalcAI to reasonably verify the request.

Do not send:

• A password;
• A full API key;
• A full payment card number;
• A card security code; or
• A Social Security number.

17.2 Identity verification

CalcAI may verify a privacy request by comparing information supplied by the requester with information already maintained by CalcAI.

Verification may depend on:

• The type of request;
• The sensitivity of the information;
• The risk of unauthorized disclosure or deletion; and
• Whether the requester has an authenticated account.

CalcAI may request additional information when reasonably necessary to verify identity.

17.3 Authorized agents

Where applicable law permits, a user may authorize another person to submit a request.

CalcAI may require:

• Proof that the agent is authorized;
• Confirmation directly from the user;
• Identity verification; or
• A valid power of attorney.

17.4 Appeals

Where applicable law provides an appeal right, a person may appeal the denial of a privacy request by emailing info@calcai.cc. The email should state “Privacy Request Appeal” in the subject line and explain why the person believes the decision should be reconsidered.

17.5 Non-discrimination

CalcAI will not unlawfully discriminate against a person for exercising an applicable privacy right. Some Services may no longer function if a user requests deletion of information necessary to provide those Services.

17.6 Browser privacy signals

Browser privacy signals do not currently change all embedded third-party behavior on this site. Contact info@calcai.cc to exercise applicable sale, sharing, or targeted-advertising choices. See Section 10 for embedded-video processing; you can also use your browser’s third-party cookie controls. CalcAI does not currently respond uniformly to browser “Do Not Track” signals.

18. California Privacy Notice

This section applies only to the extent CalcAI is subject to the California Consumer Privacy Act, as amended, and the individual is a California resident.

During the preceding 12 months, CalcAI may have collected the following categories of personal information:

Identifiers. Examples include: name; email address; telephone number; postal address; IP address; account identifier; device identifier; serial number; and order identifier.

Customer-record information. Examples include: name; address; telephone number; billing information; and limited payment information.

Commercial information. Examples include: products purchased; order history; refund history; warranty information; device ownership; and product preferences.

Internet or electronic activity. Examples include: website activity; app activity; device logs; IP address; feature interactions; connection status; and error information.

Approximate geolocation information. CalcAI may determine approximate location using an IP address. CalcAI does not intentionally collect precise GPS location unless a future feature clearly requests it.

Visual and electronic information. Examples include: photographs; uploaded images; screenshots; support videos; prompts; AI responses; and electronic communications.

Preferences and inferences. Examples include: preferred AI provider; preferred AI model; product interests; feature preferences; and restock-alert selections.

Sensitive personal information. Sensitive information may include: full customer-supplied AI API keys received by CalcAI and stored encrypted; payment credentials processed by Authorize.net; account authentication information; private content voluntarily included in prompts or images; and information a user voluntarily submits concerning health, education, identity, finances, or another sensitive subject.

CalcAI does not use sensitive personal information to infer characteristics about a person. CalcAI uses sensitive information only as reasonably necessary to:

• Provide requested services;
• Process transactions;
• Maintain security;
• Prevent fraud;
• Provide customer support;
• Process AI requests; and
• Meet legal obligations.

See Section 10 for embedded-video and other third-party processing, and Section 11 for privacy choices. Requests concerning sale, sharing, or targeted advertising may be sent to info@calcai.cc. Third-party disclosures can have different treatment under applicable sale, sharing, and targeted-advertising rules.

Subject to applicable exceptions, California residents may request:

• Access;
• Correction;
• Deletion;
• Information about collection and disclosure;
• Opt-out of sale or sharing; and
• Limitation of certain uses of sensitive information.

Requests may be submitted using the contact information in Section 17.

19. Children’s Privacy

The online Services are not directed to children under 13.

A child under 13 may not create a CalcAI account, connect a device to an account, submit prompts or photographs, or otherwise provide personal information through the online Services unless CalcAI implements a legally compliant parental-consent process.

CalcAI does not knowingly collect personal information online directly from children under 13 without legally required parental consent. If CalcAI learns that it collected personal information from a child under 13 without appropriate consent, CalcAI will take reasonable steps to delete the information.

A parent or legal guardian who believes a child under 13 submitted information should contact:

Email: info@calcai.cc
Phone: (640) 220-4665

Users who are at least 13 but have not reached the age of legal majority in their state should use the Services with the permission and supervision of a parent or legal guardian. Individual AI providers may impose stricter age requirements. Parental permission or this policy does not override those provider requirements.

Parents and guardians should understand that:

• Prompts and photographs may be logged;
• User Content may be processed by third-party AI providers;
• Authorized CalcAI personnel may access content for debugging or support;
• AI systems may generate inaccurate or inappropriate output; and
• Children should not submit private or sensitive information.

20. Educational Use

CalcAI products may be used in educational environments, but CalcAI is not automatically acting as a school, school district, educational institution, or authorized school official.

Unless CalcAI enters into a separate written agreement with an educational institution:

• Users should not submit official educational records;
• Users should not submit protected student records;
• Schools should not direct students to submit sensitive educational information;
• Users should avoid photographing documents containing another student’s information; and
• Users remain responsible for complying with school rules and academic-integrity requirements.

21. Third-Party Websites and Services

The Services may contain links to or integrate with third-party websites, applications, and services. CalcAI is not responsible for the privacy, security, availability, accuracy, or content of an independent third party.

Users should review the privacy policies and terms of:

• Authorize.net;
• Apple;
• Twilio;
• OpenAI;
• Anthropic;
• Other AI providers;
• Discord;
• Shipping carriers; and
• Any provider receiving User Content or a user’s API credentials.

22. Device Sale, Transfer, Loss, Repair, or Return

Before selling, transferring, repairing, returning, or disposing of a CalcAI device, users should:

• Disconnect the device from their CalcAI account;
• Remove saved Wi-Fi networks;
• Remove API keys;
• Revoke API keys through the AI provider;
• Delete locally stored information where possible;
• Delete prompts and photographs where possible;
• Reset the device where supported; and
• Contact CalcAI for additional assistance if needed.

If a device is lost or stolen, the user should promptly:

• Change relevant account passwords;
• Revoke AI-provider API keys;
• Contact CalcAI;
• Disconnect the device from the account; and
• Review account and provider activity.

23. Changes to This Privacy Policy

CalcAI may update this Privacy Policy to reflect:

• New features;
• New products;
• New AI providers;
• New payment providers;
• Changes in data practices;
• Security developments;
• Legal requirements; and
• Business changes.

When the Privacy Policy is updated, CalcAI will show the actual publication date. A draft review date is not a publication or effective date.

If a change materially affects how CalcAI uses personal information, CalcAI may provide additional notice through:

• The website;
• The CalcAI app;
• Email;
• An account notification;
• A device notification; or
• Another appropriate method.

24. Contact CalcAI

Questions, complaints, deletion requests, and other privacy requests may be submitted to:

CalcAI LLC
209 S Broadway
South Amboy, NJ 08879
United States
Email: info@calcai.cc
Phone: (640) 220-4665
Website: calcai.cc

Please include “Privacy Request” in the subject line of privacy-related emails.

25. Definitions

For purposes of this Privacy Policy:

• “Account” means a user profile or authentication record associated with the Services.
• “AI provider” means a third party that receives and processes prompts, images, or related information to generate an artificial intelligence response.
• “CalcAI device” means a calculator, module, accessory, prototype, beta device, or other connected hardware offered or supported by CalcAI.
• “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.
• “Processing” means collecting, using, storing, transmitting, disclosing, analyzing, deleting, or otherwise handling information.
• “Services” means CalcAI’s websites, applications, accounts, products, calculators, devices, software, APIs, support services, communications, and related features.
• “User Content” means prompts, questions, photographs, images, documents, conversation history, AI responses, feedback, support submissions, and other content submitted through the Services.