Otto — Privacy Policy

Effective July 13, 2026

Otto: AI Calendar & Planner ("Otto", "the app") is built to keep your data on your device. This policy explains what little leaves it, when, and why.

Your planner data stays on your device

Your events, reminders, and settings are stored in a local database on your iPhone. Otto has no user accounts and no server-side storage — we cannot see your calendar, and we never receive a copy of it.

The AI assistant

When you ask the assistant to plan something, the text you typed and/or the screenshot you picked is sent over an encrypted connection (HTTPS) to our server, which forwards it to Anthropic's Claude API to extract calendar events. Our server is a stateless relay: it stores nothing and keeps no logs of your content. Anthropic processes the request to produce the response and does not use API data to train its models. The extracted events are returned to your device, where you review them before anything is added to your planner.

Voice input

Tapping the microphone lets you speak instead of type. Your audio never goes to Otto's servers. Where your device supports on-device speech recognition for your language, transcription happens entirely on your iPhone. Where it doesn't, Apple's dictation service transcribes your speech so the microphone still works — that audio is handled under Apple's privacy policy, not sent to us.

Sharing into Otto

When you share a screenshot or text into Otto from another app (Mail, Photos, Safari, …), it's saved on your device and picked up the next time you open Otto, where it goes through the same AI assistant flow described above. Nothing is sent anywhere until you open the app.

Your device calendar (optional)

If you turn it on in Settings, Otto can show your iPhone's existing calendar events alongside your Otto plan, so you can see everything in one place. This is strictly read-only — Otto never writes, edits, or deletes anything in your device calendar, and nothing about those events is sent to our servers or leaves your device.

Purchases

Subscriptions are processed by Apple through your App Store account. To recognize your subscription, the app uses RevenueCat, which receives your purchase receipt and an anonymous device identifier. See the RevenueCat privacy policy. We never see your payment details.

Notifications

Event reminders and the morning summary are scheduled and shown entirely on your device. No notification data leaves it.

Backups

You can export a backup file of your planner from Settings. The export is created on your device and handed to the iOS share sheet — you choose where it goes (AirDrop, Files, iCloud Drive, …). We never receive it.

What we don't do

• No advertising, and no ad networks.
• No analytics or tracking SDKs.
• No sale or sharing of personal data.

Children

Otto is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes

If this policy changes, the updated version will be posted at this address with a new effective date.

Contact

Questions? Email burkpan1@gmail.com.