Privacy Policy

Last Updated: March 26, 2026

1. Parties to the Agreement and Scope of Application

Parties to the Agreement: This Agreement is entered into by and between you and us (operating under the entity “Zicalstar”, hereinafter referred to as “Zicalstar” or “we/us/our”).

Scope of Application: This Policy governs how we collect, use, store, share, and disclose your personal data when you use our website, mobile applications, and smart calendar.

Questions or Concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our services.

2. Data Collection and Use

Voluntarily Provided Information: Account registration information for the Zical mobile application, smart calendar binding and association details, member creation data, album management information, greeting card sending records, weather location data, customer service communication records, and calendar synchronization information (including email sharing links or your login credentials for third-party services such as Google and Outlook).

Automatically Collected Information: When you access, use, or browse our services, we automatically collect certain data, which may include device time zone, language preferences, and similar settings.

Use of Data: For account creation, smart calendar device management, supporting core functions including calendar, task, and album services, displaying user content, and providing localized weather information.

3. Protection of Your Photos and Videos

We implement industry-standard security measures to protect your photo and video content, including:

Photos and videos you provide are stored on servers operated by our secure cloud hosting service providers.

Photos and videos are transmitted to your Zicalstar devices via encryption protocols and are inaccessible to any other parties.

4. Log and Analytics Data

Collected Information: Basic device-generated data, such as IP address, device name, operating system version, access time, calendar synchronization operation records, and similar technical logs.

5. Cookies and Similar Technologies

Cookies are files containing small amounts of data, typically used as anonymous unique identifiers. These files are sent to your browser by the websites you visit and stored in your device’s internal memory. Our services do not explicitly use such “Cookies”.

6. Circumstances of Data Disclosure

We will not disclose personal data collected through the services to any third parties. We will never sell your personal data to any third parties. Zicalstar only discloses personal data in specific, necessary scenarios and for strictly limited purposes, as follows:

Legal Requirements: We may share your information when required by law or necessary to prevent harm. This includes complying with applicable laws, protecting our property, preventing fraud, responding to court orders, judicial or other government subpoenas, or cooperating with law enforcement or other government authorities. We may also share information if we believe it is necessary to protect you or others from harm (such as fraud or abuse) or to establish our legitimate rights and interests.

Third-Party Services: Cloud service providers (e.g., AWS). If you choose to link our services with third-party platforms (e.g., Google, Outlook, iCloud, Cozi, Yahoo!, etc.), we will share information with such third parties in accordance with your in-app settings to enable interoperability.

Corporate Transactions: If Zicalstar (or assets related to our business) is acquired by another company through merger, acquisition, or similar transaction, such company will receive all information collected by Zicalstar via the website and services. We will notify you by email and/or prominent website notice of the change in ownership, intended use of your personal data, and your available choices.

7. Data Security Safeguards

We value the trust you place in us when providing your personal data. We implement appropriate physical, technical, and organizational security measures in line with industry standards to protect personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, and all other unlawful forms of processing.

No method of Internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security (e.g., we cannot warrant that unauthorized third parties will not breach our security to access, steal, or modify your data). While we use our best efforts to protect your personal data, you assume the risk of transmitting data through our services. You should access our services only in secure environments and take steps to protect your information, including safeguarding your password.

We follow the principle of minimum necessary access to ensure that our employees, trusted hosting providers, and other service providers access personal data only to the extent required to perform their duties, and all such parties are bound by strict confidentiality obligations.

8. Children’s Privacy

Our services are not designed for or directed at individuals under the age of 13. If you are under 13, you may not use our services. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and discover your child has provided us with personal information, please contact us so we may take appropriate action.

9. Legal Bases for Data Processing

Zicalstar retains your personal data only for as long as necessary to provide the services you requested or registered for, and to comply with applicable legal and record-keeping requirements.

Core User Rights (pursuant to the GDPR): Basic Rights: Access to personal data (including calendar synchronization records), rectification of inaccurate information, erasure of redundant or non-essential data (except records required by law to be retained).

Advanced Rights: Restriction of data processing (e.g., suspending use of calendar synchronization data), objection to specific processing (e.g., direct marketing).

Exercise of Rights: You may exercise your rights via account settings or email request. You may withdraw your consent at any time (e.g., revoke calendar synchronization authorization), without affecting the lawfulness of processing before withdrawal. If you are dissatisfied with the outcome, you may contact customer service.

10. International Data Transfers

Our data centers are located in the United States, where your data is stored. To deliver services, we may transfer your personal data to jurisdictions outside your country or region as needed. Our U.S. and Chinese teams may remotely access your data for service delivery, customer support, operations, and maintenance.

To protect data during international transfers and remote access, we implement appropriate safeguards including data protection agreements and cross-border data transfer contracts. As part of these arrangements, we conduct Transfer Impact Assessments (TIAs) and apply corresponding technical and organizational measures.

11. Additional Provisions for California Residents

(Pursuant to the California Consumer Privacy Act, CCPA)

Data Processing Details: A full breakdown of personal information, including sources of collection, purposes of use, and disclosed recipients, covering contact data, financial and transaction information, device information, calendar synchronization data, and other categories.

Right to know: Request details of collection, use, and disclosure of personal information (including international transfers of calendar data).

Right to action: Access and delete personal information (including calendar records); review financial incentives related to personal data; withdraw consent to international data transfers.

Right to non-discrimination: Exercising these rights will not result in discriminatory treatment (e.g., service restrictions, fee increases, or suspension of calendar synchronization).

Limitations: Certain information required by law to be retained may not be deleted. Identity verification will be completed before processing requests.

12. Policy Update Mechanism

We may update this Privacy Statement periodically and will post all changes on this page. Changes take effect immediately upon posting. Your continued use of our website and services after changes take effect constitutes acceptance of the revised policy. For material changes, we may provide prominent notice or seek your consent as required by law.

13. Account Information Management

You may delete your account and all associated data (including calendar data, photos, tasks, etc.) at any time.

14.Contact Information

If you have questions or comments regarding this Privacy Policy, you may contact Zicalstar at: support@zicalstar.com