Dearpop Privacy Policy

Last updated: 11 September 2026

What Dearpop stores

Dearpop stores your Telegram user ID, the people and important dates you add, your notes, reminder delivery records, and product feedback you voluntarily send. To improve the product, Dearpop also stores messages it could not confidently understand or for which it asked you to clarify; these improvement messages are retained for up to 90 days. Dearpop also records privacy-preserving product events, such as which feature was used or whether a person, date, or note was added or deleted; these events never include note text or message text. If you start Dearpop using a friend’s referral link, Dearpop stores only the fact that the invitation occurred, so it can measure referrals. This data is separated by Telegram user and is not visible to other Dearpop users.

Google Calendar

Google Calendar import is optional and starts only when you select “Import Google Calendar” in Dearpop. Dearpop requests two narrow read-only Google Calendar permissions: access to the list of calendars you are subscribed to, so that you can choose one, and access to events in calendars you can access, so that it can import important dates from event titles and dates. It never creates, changes, or deletes Google Calendar events.

Dearpop temporarily processes the selected calendar’s event titles and dates to identify important dates. It stores only the event name and date that you choose to import into your private Dearpop account; it does not retain a copy of your Google Calendar events. The Google access token is encrypted at rest, expires within 15 minutes, and is deleted after the import is completed, cancelled, or expires. Dearpop does not request or retain a refresh token and does not maintain an ongoing Google Calendar connection or synchronization.

Google Contacts

Google Contacts import is optional and starts only when you select “Import Google Contacts” in Dearpop. Dearpop requests read-only access and requests only the name and birthday fields from your personal Google Contacts. It does not request, use, or store phone numbers, email addresses, postal addresses, contact notes, or photos.

Dearpop temporarily processes the names and birthdays to show you an import preview. It stores only the people and birthdays that you confirm into your private Dearpop account. It does not retain a copy of your Google Contacts, does not maintain an ongoing connection or synchronization, and deletes the short-lived Google access token after the import is completed, cancelled, or expires.

Sharing, transfers, and disclosures

Dearpop does not sell, rent, disclose, or transfer Google user data to advertisers, data brokers, or other recipients, except as described below to provide a feature you explicitly request. Google Calendar and Google Contacts data are processed only to provide the one-time import requested by you. Dearpop uses Vercel to host the application and Neon to operate its database; these infrastructure providers process data only as service providers needed to run Dearpop.

Dearpop does not allow humans to read Google user data unless you explicitly ask for support relating to a specific item, or when necessary to investigate security abuse or comply with law. If you later ask Dearpop’s separate AI gift-ideas feature for suggestions, the relevant person name (including a name you imported from Google Calendar or Google Contacts) and saved notes may be sent to the OpenAI API to generate that response. Dearpop does not send Google access tokens, calendar lists, full Google Calendar event contents, or Google Contacts records to OpenAI.

Security

Dearpop uses HTTPS for data in transit. Google access tokens are encrypted before they are stored, encryption keys and service credentials are kept in protected server environment variables, and temporary Google authorization data is automatically deleted after the short import session. Access to production systems is limited to the developer and service providers that operate the application.

The use of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Dearpop does not use, transfer, or sell this data to train or improve generalized or foundational AI/ML models.

OpenAI

When you ask Dearpop to understand a free-text message or suggest a gift, the relevant message, person name, and saved notes may be sent to the OpenAI API to provide that feature. This can include a person name imported from Google Calendar or Google Contacts when it is needed for the requested feature. Dearpop uses the OpenAI API with response storage disabled and does not opt in to use API inputs or outputs to train or improve any generalized or foundational AI/ML model. OpenAI may retain API inputs and outputs in abuse-monitoring logs for up to 30 days as described in its API data controls. Dearpop does not send Google access tokens, calendar lists, full Google Calendar event contents, Google Contacts records, your Telegram credentials, or other users’ data to OpenAI.

Deletion and contact

You can delete a person in the bot with /delete_person, or delete all of your Dearpop data with /delete_my_data. For privacy questions, contact the developer through the Dearpop Telegram bot.

Terms of Service