Privacy Policy
Last updated: Jan 15, 2026
Welcome to Wrappedly. We value your privacy and are committed to protecting your personal data. We believe in transparency and collecting only what is strictly necessary to provide our service.
1. Data Collection & Usage
If you visit our website without logging in:
We do not create a server-side profile. We may store a few technical settings in your browser (e.g., theme or language) so the site works as expected.
If you choose to create an account:
We collect only the data necessary to generate your Wrappedly recap and manage your account:
- Account Information: Your name and email address (retrieved via your authentication provider or provided by you).
- Integration Data: Data from connected sources that you explicitly authorize, strictly used to generate your recap and AI-powered insights. We do not store your full calendar event list on our servers; we store derived outputs (aggregated stats + generated recap) when needed for performance. You can revoke access by disconnecting a source or deleting your account.
- AI Processing: Your calendar data is sent to an AI provider to generate insights, patterns, and summaries. We aim to minimize what we retain: we do not store your full event list, and manual uploads are not stored server-side. Your data is never used to train AI models or shared with third parties for training purposes.
- Technical Data: Browser type and simple device information (used for debugging and security purposes only).
2. Local Storage & Cookies
We respect your privacy and use a GDPR-compliant consent system. We do not use marketing cookies. We use essential cookies for authentication and Local Storage for technical features like UI preferences and caching. With your consent, we use privacy-friendly analytics to understand overall usage.
In compliance with privacy regulations (GDPR/ePrivacy), here are the cookies and storage data we use:
| Data Type | Purpose | Duration | Consent |
|---|---|---|---|
| Authentication cookies (NextAuth) | Keeps you securely signed in to your account. | Until logout or session expiration. | Strictly necessary |
| User Preferences | Remembers your UI settings (Theme, Accent theme, Language). | Persistent. | Strictly necessary |
| Configuration | Stores technical configuration needed for the app to work correctly. | Persistent. | Strictly necessary |
| AI Analysis Cache | Caches analysis results locally to avoid redundant API calls and improve performance. | 24 hours or until manually cleared. | Strictly necessary |
| Consent cookie (vanilla-cookieconsent) | Remembers your cookie consent preferences (accepted/refused). | 1 year. | Strictly necessary |
| Analytics cookies | Privacy-friendly analytics to understand overall usage (no individual tracking, no third-party cookies). | Session or 1 year depending on type. | Requires your consent |
3. AI Processing & Third-Party Services
We use AI services to analyze your calendar data and generate personalized insights. Here's how it works:
- AI Provider: We use Mistral AI to analyze your calendar events and generate insights. Mistral is a French company, which ensures European jurisdiction and clear data processing agreements (DPA) compliant with GDPR.
- Data Processing: Your calendar data is sent to Mistral AI for analysis. This data is processed according to the provider's terms. By default, on their paid APIs, your data is not used to retrain models. In case of disputes or GDPR audits, you depend on EU courts, not the US Cloud Act.
- Data Retention: For signed-in users, we may store your generated recap (aggregated stats + AI insights) in our database to avoid re-running analysis. We also cache results locally in your browser for performance. We do not store your full calendar event list on our servers. You can delete your account at any time to remove stored data.
- No Training: Your data is never used to train AI models or shared with third parties for training purposes.
4. Error Monitoring (Sentry)
We use a service called Sentry to monitor the stability of our application.
- Purpose: To detect crashes and fix technical bugs (Legitimate Interest).
- Privacy: We use Sentry strictly for crash reporting. We do not use it to record user sessions or for behavioral analysis.
5. Your Rights & Control
You have full control over your data. Inside your Settings page, you can independently exercise your rights at any time:
- Access & Rectification: You can view and update your profile information.
- Right to be Forgotten: You can permanently delete your account and all associated data via the "Delete Account" button in the Settings page (Danger Zone). You can also delete individual connected sources from the integrations page at any time.
6. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please reach out to us via our.