Privacy Policy

Last updated: September 22, 2026

Kalam is an AI assistant built by Atlas Labs ("we", "us", "our"). This Privacy Policy explains what information we collect when you use Kalam at kalam.ma and chat.kalam.ma, how we use it, and what choices you have.

Information we collect

Account information

When you create an account, we collect your email address and full name. If you sign in with Google, we receive your name, email address, and profile photo from Google.

Conversations

We store the messages you send and the responses you receive so you can access your conversation history. You can delete any conversation at any time from the chat interface.

Usage data

We collect basic usage information such as the number of messages sent, your subscription plan, and your IP address. This helps us operate the service, prevent abuse, and improve Kalam.

Payment information

Payments are processed by Stripe. We never see or store your card number. We only receive a customer ID and subscription status from Stripe.

How we use your information

To provide and operate the Kalam service
To save and display your conversation history
To manage your subscription and process payments
To send transactional emails (email verification, password reset)
To detect and prevent abuse, spam, and fraud
To improve the quality and performance of Kalam

We do not sell your personal data. We do not use your conversations to train AI models without your explicit consent.

Google user data (Connected apps)

Connected apps is an optional feature for paid plans that lets you connect your Google account so Kalam can send emails you approve and answer questions about your own calendar. Kalam only accesses Google user data after you explicitly connect your account from Connected apps and approve the Google consent screen.

What we access

Gmail — send (gmail.send): Kalam can draft an email for you, but it is only sent after you review it and click Approve in the chat. Kalam never sends email automatically.
Google Calendar (calendar.events): Kalam reads your events to answer questions like "what's on my calendar tomorrow?" or to find free time. It creates an event only after you review it and click Approve. Kalam does not edit or delete your existing events.
Basic profile (openid, email): to show which Google account is connected.

How we use it

Google user data is used only to provide the feature you asked for — answering your request in the chat, and sending an email or creating an event you approved. It is accessed on demand, only while Kalam is answering a message you sent. We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models.

How we store and protect it

Your Google access and refresh tokens are encrypted at rest (AES-256-GCM) and are only ever used by our backend servers. They are never sent to your browser or to AI providers.
We do not store copies of your calendar events. The event data Kalam reads is used to generate the reply and is then discarded. Kalam's reply, and a reference to the events it cited (for example an event title with a link), are saved in your conversation history like any other message, and you can delete them at any time by deleting the conversation. Temporary chats are not saved.
No person at Atlas Labs reads your Google user data, unless you ask us to for support, it is necessary for security purposes (such as investigating abuse), or it is required by law.

Sharing

To generate a reply, the relevant excerpts are processed by our AI inference provider, Microsoft Azure OpenAI Service, under a data processing agreement that prohibits using this data to train models. We do not share Google user data with any other third party, except as required by law or with your consent.

Your control

You can disconnect your Google account at any time from Connected apps in Kalam. Disconnecting deletes your stored tokens and revokes Kalam's access at Google. You can also remove Kalam's access from your Google Account permissions page. Deleting your Kalam account deletes all stored tokens.

Kalam's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data storage and security

Your data is stored on servers located in the European Union. All data is transmitted over encrypted connections (TLS). We use industry-standard security practices to protect your information from unauthorized access.

Third-party services

Kalam uses the following third-party services to operate:

Google OAuth — optional sign-in method
Google APIs (Gmail, Calendar) — optional Connected apps, see Google user data
Stripe — payment processing
Cloudflare Turnstile — bot protection
Microsoft Azure — AI inference infrastructure

Each of these services has its own privacy policy. We only share the minimum data necessary for each service to function.

Your rights

You can, at any time:

Delete individual conversations from the chat interface
Request deletion of your account and all associated data
Request a copy of the data we hold about you

To exercise any of these rights, email us at privacy@kalam.ma. We respond within 7 business days.

Cookies

We use a small number of cookies strictly necessary to operate the service: a session cookie to keep you logged in, and a locale cookie to remember your language preference. We do not use advertising or tracking cookies.

Children

Kalam is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. For significant changes, we will notify you by email.

Contact

Questions about this policy? Email us at privacy@kalam.ma.