Privacy Policy

1. Who We Are

Oden is an AI-powered productivity app developed by Haugland Utvikling (Org. nr. 930 864 617), based in Norway. Oden is available on iOS and macOS.

Data Controller: Haugland Utvikling (Org. nr. 930 864 617)
Krystallveien 26, 4072 Randaberg, Norway
Contact: support@heyoden.com

2. What Data We Collect

Account Information

When you create an account, we collect your email address and optionally your name. Authentication is handled via Supabase (Apple Sign In or email/password).

Todos and Reminders

Your todos, their metadata (priority, category, due dates), and conversation history are stored on our servers to provide the AI assistant functionality.

Conversation Messages

Messages you send to the Oden AI assistant are stored to maintain conversation context. We retain the most recent messages (up to 200) per user. Older messages are automatically deleted. Chat messages and the text of todos, reminders, or calendar events you explicitly share with the assistant are transmitted to third-party AI providers for processing — see "AI Processing (Third-Party Subprocessors)" below for details.

Calendar and Reminders (On-Device)

Oden accesses your Apple Calendar and Reminders via EventKit with your explicit permission. Calendar data is read on-device to provide schedule context to the AI. Calendar events created by Oden are written directly to your device's calendar via EventKit. We do not store your calendar data on our servers.

Speech Recognition

Oden offers voice input using Apple's on-device speech recognition framework. Audio is processed locally on your device and is not sent to our servers.

Push Notifications

If you enable notifications, your device push token is stored on our server to deliver reminders and digests. No notification content is logged.

Subscription Information

Subscription purchases are processed entirely by Apple via StoreKit. We verify transaction receipts to determine your subscription status but do not have access to your payment details.

3. How We Use Your Data

• To provide the AI assistant (creating todos, scheduling events, answering questions)
• To send push notification reminders and daily digests
• To maintain conversation context for better AI responses
• To verify your subscription status
• To improve the service (aggregated, anonymized usage metrics only)

4. Third-Party Services

Anthropic (Claude AI)

Messages you send to the Oden assistant may be processed by Anthropic's Claude API to generate responses. Anthropic's use of data is governed by their privacy policy. Per Anthropic's Commercial Terms, data sent via the API is not used to train their models.

Google (Vertex AI — Gemini)

Messages you send to the Oden assistant may also be processed by Google's Gemini models via Vertex AI, configured to the europe-west region. Under Google Cloud's terms, Google is contractually prohibited from using your content to train its models. See Google Cloud's privacy notice.

Supabase

Authentication and user account data are managed via Supabase, hosted in the EU. See Supabase's privacy policy.

Apple

Sign In with Apple, StoreKit subscriptions, EventKit (calendar/reminders), and push notifications are Apple services governed by Apple's privacy policy.

5. AI Processing (Third-Party Subprocessors)

Oden's AI features rely on third-party AI providers. This section describes exactly what we send, to whom, why, and how you can stop it.

What We Send

When you use Oden's AI features, we send the following data to third-party AI providers: the text content of your chat messages, the titles and descriptions of todos you ask Oden to process, and the calendar events or reminders you explicitly share with Oden. We do not send your device contacts, precise location, files outside Oden, or your authentication tokens.

Who Receives It

• Anthropic, PBC (San Francisco, USA) — Claude API. Data is processed under Anthropic's Commercial Terms, which prohibit training on customer data and require equivalent data-protection safeguards.
• Google LLC (via Vertex AI, europe-west region) — Gemini models. Data remains in the EU region. Google is contractually prohibited from training on customer content.

Why

To generate plans, summaries, reminders, and suggestions. Oden's AI features cannot function without these subprocessors.

Retention and Training

Neither processor retains your content for training. Processing is ephemeral.

Revocation

You can withdraw consent at any time in Settings → Privacy inside the app. Revoking disables AI features until re-accepted. Your stored data (todos, reminders, events) is unaffected by revocation.

Jurisdiction

For EU/EEA users, Google Vertex AI is configured to the europe-west region. Anthropic processes data in the United States under Standard Contractual Clauses.

6. Data Storage and Security

Your data is stored on a secured server located in Europe. All communication between the app and our servers uses TLS encryption (HTTPS). Authentication tokens are stored in the iOS/macOS Keychain. We do not sell or share your personal data with third parties for marketing purposes.

7. Data Retention

• Account data: Retained until you delete your account
• Todos: Retained until you delete them or your account
• Conversation history: Last 200 messages retained; older messages automatically deleted
• Push tokens: Retained while your account is active
• Calendar data: Not stored on our servers (on-device only)

8. Your Rights (GDPR)

As a user, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Withdraw consent for optional processing (e.g., push notifications)

To exercise these rights, contact us at support@heyoden.com. We will respond within 30 days.

9. Children's Privacy

Oden is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via the app or email. Continued use of Oden after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this privacy policy, contact us at:
support@heyoden.com