Privacy, security, and AI
What happens to what you send
This page explains how ToMyCal works in plain language. The Privacy Policy is the formal document.
The short version
- Muffin only ever sees the emails you choose to send.
- There is no inbox or calendar to connect, and nothing runs in the background.
- Our email and AI providers keep short-term operational logs, described in the Privacy Policy.
- We keep your sending address and limited usage, preference, delivery, security, and legally required records.
You choose what Muffin sees
Content you email to Muffin is processed only to find event information and prepare a calendar invitation for you. ToMyCal only receives the individual emails you send or forward. There is no connection to your mailbox, so nothing else in it is visible.
ToMyCal never asks for inbox access, calendar access, OAuth permission, or your email password.
How your content is processed
ToMyCal uses reviewed third-party email, cloud hosting, database, and AI providers to deliver the service. An AI provider reads the content you send in order to find event information. Deterministic checks in ToMyCal then decide what is safe to turn into a calendar invitation.
Submitted content is not used to train AI models. Free and paid senders receive the same treatment.
What is kept, and what is not
Event content is held only for as long as it takes to prepare and deliver your response, then removed from the durable product database.
ToMyCal keeps your sending address and limited usage, preference, delivery, security, and legally required records so allowances and abuse controls can work.
ToMyCal does not claim to keep nothing. Records that make allowances, billing, delivery, security, and legal obligations work are kept deliberately, and the Privacy Policy describes them.
Who receives your invitation
Only you. Muffin replies to the address the email was sent from. Invitations are never sent to CC recipients or to addresses found inside forwarded content, and there is no way to add another recipient.
Sender safety
ToMyCal checks that an email genuinely came from the address it claims before processing it, so someone cannot use your address to consume your allowance or receive your invitations. Automated messages and delivery notifications are filtered out before processing so they cannot create a mail loop.
Deleting your information
You can request deletion of your ToMyCal records at any time. Because event content is not retained after your response is delivered, deletion concerns your sending address, preferences, usage, and any billing records that law does not require us to keep.