Last updated: April 21, 2026
The short version: Your family's data belongs to you. We don't sell it, we don't share it, we don't use it to train AI models, and we don't look at it unless you ask us to help with something specific. Privacy isn't a feature we bolt on — it's the foundation everything is built on.
When you use HeyCarlton, we collect the following information:
[email protected], we process the content of those forwarded messages to extract useful information (dates, deadlines, school notices). HeyCarlton does not connect to or read your email inbox — only messages you explicitly forward are processed.Your data is used for one purpose: making HeyCarlton work for your family.
We never use your family data — including any data obtained through Google APIs — to train AI models. We never sell your data. We never share your personal information with advertisers. We never use Google user data for any purpose other than providing the HeyCarlton service to you.
HeyCarlton can optionally connect to Google Calendar through Google OAuth. This connection is off by default, strictly opt-in, and you can revoke access at any time.
What we request. If you choose to connect Google Calendar, we request exactly two OAuth scopes — nothing more:
https://www.googleapis.com/auth/calendar.events
Used to (a) read your calendar events so Carlton can generate your morning briefing and weekly family briefing, and answer schedule questions you ask (e.g., "what does Tuesday look like?"); and (b) create, update, or delete events only when you explicitly ask, using a propose-then-confirm flow.
https://www.googleapis.com/auth/userinfo.email
Used to identify which Google account you connected, so we can associate the calendar connection with your HeyCarlton account.
Why we collect it. The only reason HeyCarlton accesses Google Calendar data is to generate briefings, answer schedule questions, and (on your explicit request) make changes to events you confirm. We do not use it for any other purpose.
Propose-then-confirm for every calendar write. Carlton never writes to your Google Calendar without your explicit confirmation on each action. When Carlton thinks a create, update, or delete is appropriate — based on something you said — it first tells you exactly what it would do ("Want me to add Church on Sunday 9:00–10:15 at First Baptist?") and waits for a yes. No bulk authorization, no background automation, no writes you didn't personally approve.
How long we keep it. Live calendar event data is fetched on demand to generate each briefing or answer and is not maintained as a long-term archive on our servers. OAuth tokens are stored, encrypted, so we can continue to fetch events on your behalf until you revoke access. When you disconnect Google Calendar, reset your account in Telegram with /nuke, or delete your HeyCarlton account, we delete your OAuth tokens and any cached calendar data within 30 days.
What we never do with Google data. We never sell it. We never use it for advertising. We never use it to train AI or machine-learning models — ours or anyone else's. We never allow humans at HeyCarlton to read Google user data except (a) with your explicit permission, (b) for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) in aggregated, anonymized form for internal operations. We never share Google user data with third parties, except with the operational subprocessors listed below (Anthropic and Cloudflare) strictly to provide the service to you.
How to revoke access. In Telegram, use /settings to review connections, /unlinkemail to remove a forwarding-address link, or /nuke to reset Carlton. You can also revoke Google Calendar directly through Google at myaccount.google.com/permissions.
Email. HeyCarlton does not request access to your Gmail inbox and does not use Gmail OAuth. If you want Carlton to process an email (school notices, activity updates, logistics), you forward it to [email protected] — either per-email or by setting up a forwarding rule in your own inbox. Only messages you explicitly forward are processed.
Google API Services User Data Policy — Limited Use disclosure. HeyCarlton's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
HeyCarlton sends your messages (and relevant context, such as your family profile and upcoming calendar events) to large language models operated by Anthropic (Claude) to generate responses. Anthropic processes this data under its own privacy policy as a service provider to HeyCarlton.
Anthropic does not train its models on data sent through the API, which is how HeyCarlton uses the service. Your conversations and Google user data are never used for model training — by us or by any third party.
Your data is isolated and protected:
No system is perfectly secure. If we ever experience a security incident that affects your data, we'll notify you promptly and explain what happened.
We share data only with service providers who help us operate HeyCarlton, and only to the extent necessary. These include:
We do not sell or rent your data. We may disclose information if required by law, subpoena, or court order, or if we reasonably believe disclosure is necessary to prevent fraud, harm, or a security incident.
You have the right to:
/settings, /unlinkemail, and /nuke, or directly at myaccount.google.com/permissionsWhen you cancel your HeyCarlton account, we permanently delete all your family's data from our systems within 30 days. This includes:
You can also request immediate data deletion at any time by typing /nuke to the assistant, or by contacting us at [email protected].
HeyCarlton is designed for parents. Only adults can create and use HeyCarlton accounts — children do not have their own accounts and do not interact with the assistant directly.
If we make material changes to this privacy policy, we will notify you via email at least 30 days before the changes take effect. We will never retroactively change how we handle data you've already shared with us under a previous policy.
Questions about privacy? We're here.
Email: [email protected]
Company: HeyCarlton, Charlotte, NC, USA