Vidalio Privacy Policy

Last Updated: September 14, 2026

VidalioApp, Inc. ("Vidalio," "we," "us," or "our") provides a shared family calendar platform, available through our website and, in the future, mobile apps (collectively, the "Platform"). This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

Vidalio is currently in a pre-launch phase. Some functionality described in this Policy — including household accounts, member profiles, and child profiles — is part of our planned product and is not yet available. Today, the Platform's live functionality is limited to (a) the waitlist signup on our homepage and (b) the website itself, including the analytics cookies described in Section VII. We will update this Policy as new functionality becomes available.

I. Scope

Applies to vidalioapp.com, any Vidalio mobile app we release, and any other service that links to this Policy.

II. Information We Collect

A. Personal Information — Identifiers (name, email address, IP address); Household & Family Content, once households are available (member names, a child profile's birthdate if a guardian adds one, event titles/notes/locations/attendees, and anything else you choose to enter — we don't ask for or require sensitive categories like health, racial/ethnic origin, religion, sexual orientation, immigration status, or government ID numbers, and ask that you avoid putting them in free-text fields); Commercial Information, only if we launch paid subscriptions (billing is handled by a PCI-DSS-compliant third-party processor — Vidalio never stores full card numbers); Internet/Network Activity (browser/ device type, pages visited, via cookies/analytics, Section VII); Communications (anything you send to support@vidalioapp.com).
We do not collect precise geolocation, biometric data, or any other sensitive-personal-information category, and have no plans to.
B. Non-Personal Information — aggregated/de-identified data that doesn't identify a specific person.

III. How We Obtain Your Information

Waitlist signup (email, bot-protected via Cloudflare Turnstile); account registration once available; household/calendar content you or your household enters; support communications; automatic collection via cookies (Section VII, consent-gated); and our service providers — Cloudflare (bot protection), Google Analytics (site analytics, only after consent), Amazon Web Services (hosting), and, once available, an email-delivery provider and a payment processor if paid plans launch. Each is contractually limited to using your information to provide services to Vidalio.

IV. How We Use Your Information

To operate, maintain, and improve the Platform; respond to support requests; send service and (if you opt in) product communications; maintain security and prevent abuse; comply with legal obligations.

V. How We Share Your Information

We do not sell your personal information, and do not share it for cross-context behavioral advertising. We share it only with service providers under contract (Section III), if required by law or to protect rights/safety, in connection with a merger/acquisition/asset sale (with notice to you), or with your consent.

VI. Children's Privacy

Vidalio's calendar is designed for use by a household's adult members. A guardian may, at their discretion, create a limited profile or login for a child in their household. Where a child under 13 is given their own login, Vidalio will: only enable it at a guardian's direction; collect no more information than the guardian provides or approves; never use a child's information for behavioral advertising or sell it; and let a guardian review, edit, or delete a child's profile information at any time. We are still finalizing the specific parental-consent verification steps required under the Children's Online Privacy Protection Act (COPPA) ahead of launching child logins, and will update this section with those details before that feature becomes available. If you believe a child has given us information outside a guardian's direction, contact support@vidalioapp.com and we will delete it.

VII. Cookies & Other Tracking Technologies

We use necessary cookies (required for the site to function) and analytics cookies (Google Analytics 4), the latter only if you accept them via the banner shown on your first visit. Declining analytics cookies doesn't affect your ability to use the Platform. To change an earlier choice today, clear your cookies to see the banner again — we plan to add a persistent cookie-preferences control. We do not use analytics cookies to track you across unrelated third-party websites.

VIII. Data Retention

We keep personal information as long as needed for the purposes in this Policy. If you ask us to delete it (Section IX), we'll do so within 30 days of verifying your request, except where we're permitted or required to keep it longer (e.g., financial or legal-hold records); residual encrypted backup copies are purged within 90 days.

IX. Your Privacy Rights

A. All users: request to know what we hold about you, correct inaccuracies, export your household's data (once available), or delete your account/household data — deleting shared household data may affect other members, and we'll tell you before completing a deletion that does. Email support@vidalioapp.com; we respond within 45 days.
B. California residents (CCPA/CPRA): the same rights above, plus the right to opt out of sale/sharing (we do neither, so no action is needed) and the right to limit use of sensitive personal information (we don't collect it), plus a right to non-discrimination for exercising any of these rights.

X. Data Security

We use reasonable administrative, technical, and physical safeguards (encryption in transit, access controls, AWS-hosted infrastructure). No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

XI. International Visitors & Cross-Border Data Transfers

Vidalio is a U.S. company, hosted on AWS infrastructure located in the United States. If you access the Platform from outside the U.S., your information is processed in the U.S.

If you're located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or UK GDPR may also apply to our processing of your personal information:

Legal basis: we process your information to perform a contract with you (e.g., providing the waitlist or Platform you sign up for), based on your consent (e.g., analytics cookies, Section VII), or based on our legitimate interests (e.g., securing the Platform, responding to support requests), weighed against your rights.
Cross-border transfers: where we transfer your personal information from the EEA/UK/Switzerland to the United States, we rely on Standard Contractual Clauses or another lawful transfer mechanism recognized under GDPR/UK GDPR.
Your rights: in addition to Section IX, you have the right to access, rectify, erase, or restrict processing of your personal information, to data portability, and to object to processing based on legitimate interests or direct marketing. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
How to exercise these rights: contact support@vidalioapp.com. You also have the right to lodge a complaint with your local data protection supervisory authority.
Vidalio does not currently have a designated EU or UK representative or Data Protection Officer; contact support@vidalioapp.com for any GDPR-related inquiry in the meantime.

XII. Changes to This Policy

We'll update the "Last Updated" date above, and for material changes, give notice via the website or email before the change takes effect.

XIII. Contact Us

If you have any questions about our privacy practices or this Privacy Policy, or to exercise your rights as detailed in this Privacy Policy, please contact us at support@vidalioapp.com.