Privacy Policy

Effective Date: February 16, 2026

Warm (“we,” “our,” or “the app”) is committed to protecting your privacy. This policy explains what data we collect, how we use it, and the choices you have. We designed Warm with a privacy-first philosophy: AI processing happens entirely on your device, and we never sell your personal data.

1. Data We Collect

2. How We Use Your Data

• Event management: Extracting, storing, and displaying events from URLs, calendar entries, and scanned images.
• Contact and relationship tracking: Synchronizing contacts to enable cadence tracking, guest list management, and social features.
• Calendar integration: Reading and writing events to your device calendar with your permission.
• Notifications: Sending reminders for events, relationship cadence goals, and event updates.
• Account services: Managing authentication and syncing data across sessions.
• App improvement: Analyzing aggregated, anonymized usage patterns to improve features.

3. On-Device AI Processing

Warm uses Apple Foundation Models to process event data, categorize activities, and generate smart suggestions. All AI processing occurs entirely on your device. No event content, contact information, or personal data is sent to external AI services or cloud-based language models. Your data remains private by design.

4. Third-Party Services

We use a limited set of third-party services to operate Warm:

Supabase

We use Supabase as our backend database and API layer. Supabase stores your account data and event information on secure, encrypted servers. Supabase Privacy Policy

Clerk

We use Clerk for user authentication (sign-up, sign-in, session management). Clerk processes your email address and authentication credentials. Clerk Privacy Policy

Kingfisher

We use the Kingfisher library for image caching and downloading. Kingfisher operates locally on your device to cache event images for performance. It does not transmit personal data to any external server.

PhoneNumberKit

We use PhoneNumberKit to parse and format phone numbers from your contacts. This library operates entirely on your device and does not transmit data externally.

5. Data Storage and Security

• Local storage: Event data and contact information are cached locally on your device for offline access and performance.
• Keychain: Authentication tokens and sensitive credentials are stored in the iOS Keychain, which provides hardware-level encryption.
• Cloud storage: Account and event data synced to Supabase is encrypted in transit (TLS) and at rest.
• Photos: Images you select for OCR are processed on-device and are not uploaded to our servers. Only extracted text data (event details) is stored.

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties. Data is shared only with the service providers listed in Section 4, and solely for the purposes described in this policy. We do not use your data for advertising or profiling.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data from our servers within 30 days, except where retention is required by law. Locally cached data is removed when you uninstall the app.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing
• Object to certain data processing activities

To exercise any of these rights, contact us at support@agentum.app. We will respond within 30 days.

9. For Users in the European Economic Area (GDPR)

If you are located in the EEA, the following applies:

• Legal basis: We process your data based on your consent (account creation, calendar and contact access), contractual necessity (providing app functionality), and legitimate interest (app improvement and security).
• Data controller: Warm is the data controller for information processed through the app.
• Data transfers: Your data may be transferred to and processed in the United States, where our service providers (Supabase, Clerk) operate. These transfers are protected by standard contractual clauses and the providers’ compliance programs.
• Right to lodge a complaint: You have the right to file a complaint with your local data protection authority if you believe your data is being processed unlawfully.
• Data Protection Officer: For GDPR-related inquiries, contact support@agentum.app.

10. For Users in California (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• Right to know: You can request details about the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to delete: You can request that we delete the personal information we have collected from you, subject to certain exceptions.
• Right to opt out of sale: We do not sell personal information. There is no need to opt out.
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email support@agentum.app with the subject line “CCPA Request.”

11. Children’s Privacy

Warm is not intended for children under the age of 13. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@agentum.app.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or via email. The “Effective Date” at the top reflects the most recent revision. Continued use of Warm after changes constitutes acceptance of the updated policy.

13. Contact Us