Privacy Policy

Effective Date: 18 June 2026

Last Updated: 18 June 2026

Earlier versions: 10 November 2023, 31 March 2025, 25 April 2026, 17 June 2026

Introduction

This Privacy Policy explains how PLIGO LIMITED ("we", "us", "our") - a company registered in New Zealand (New Zealand Business Number / company number: NZBN / 9429053648532) - collects, uses, and shares personal information when you use our software.

This Policy covers two separate applications, and it is important you read the part that applies to your app:

• NextUp Alert - Calendar Reminders ("NextUp Alert") - our modern, cross-platform application for Windows, macOS, and Linux. It includes optional AI-powered and voice (text-to-speech) features. Part A below applies to this app.
• NextUp Alert Lite - Calendar Reminders ("NextUp Alert Lite") - our original, Windows-only application, distributed through the Microsoft Store. It has no AI features and its voice announcements are produced entirely on your device. Part B below applies to this app. (This app was previously also known as "NextUp", "NextUp Alert", and "NextUp Calendar Event Countdown".)

How to tell which app you have. If you installed the app from the Microsoft Store on a Windows PC and it has no AI or text-to-speech voice options, you are using NextUp Alert Lite (Part B). If you are running the newer app on macOS or Linux, or a Windows version that offers AI and voice features, you are using NextUp Alert (Part A).

How this Policy is organised.

• Part A - NextUp Alert (the modern cross-platform app)
• Part B - NextUp Alert Lite (the legacy Windows app)
• Common Terms - provisions that apply to both apps (legal bases, international transfers, retention, security, your rights, US state rights, children's privacy, changes, and contact).

Where this Policy refers to "the App", it means the specific application described in the Part you are reading. Where it refers to "the Apps", it means both. By installing or using either App, you consent to the practices described in this Policy for that App.

Google API Disclosure (applies to both Apps) Each App's use of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features prominent in the App's UI, to comply with applicable law, or with your explicit consent. We do not use Google user data for advertising, and we do not allow humans to read Google user data except where necessary for security, to comply with law, or with your explicit consent.

Part A - NextUp Alert (modern cross-platform app)

This Part applies to NextUp Alert - Calendar Reminders, our cross-platform app for Windows, macOS, and Linux. If you are using the Windows-only Microsoft Store app, read Part B instead.

A1. Information We Collect

A1.1 Calendar Data

NextUp Alert reads event data from your connected Google Calendar and/or Microsoft Outlook (Microsoft Graph) accounts, including event titles, times, locations, descriptions, organisers, and attendees. Calendar event content is processed on your device and is not transmitted to our AI or voice sub-processors unless you explicitly enable those features (see section A1.5 and section A1.6). Diagnostic data is redacted on your device to remove calendar event content and other personally identifying details before being transmitted to our diagnostic provider New Relic (see section A1.4).

The default behaviours and on-device protections described in this Part - including local processing, the off-by-default state of AI and voice features, and on-device redaction - depend on the App and your settings functioning as intended. On rare occasions software faults may cause these protections to behave unexpectedly; see section A4.4 for important limitations on the reliability of settings and on-device controls.

A1.2 Authentication Tokens

NextUp Alert stores an authentication token on your device to access the Google Calendar API and/or Microsoft Graph Calendar API. You can revoke access at any time by signing out in the App or by revoking the App's permission in your Google or Microsoft account.

A1.3 Account and Licence Data

If you purchase or activate a paid licence, our payment and licensing partner Lemon Squeezy (a Stripe company) collects and processes your name, email address, billing address, payment method (handled by their PCI-compliant processors), and licence-activation data. We receive licence status and a customer identifier (derived from your email) from Lemon Squeezy. The only licence secret is the licence key (a unique code you paste to activate). It is shown on screen while you enter it and sent securely to our licensing partner to validate your purchase. We do not log the licence key, and we do not store the key itself on your device — only derived values (an authentication token and opaque licence identifiers) are saved, encrypted at rest.

A1.4 Log Files and Diagnostics

NextUp Alert may generate log files on your device recording errors, crashes, and performance data. Before transmission, log files are redacted on your device to remove calendar event content and other personally identifying details. The redacted log files are uploaded to New Relic for centralised analysis and retained for up to 30 days.

Redaction is a best-effort, automated process. While we use reasonable efforts to ensure calendar content and personally identifying details are removed before transmission, software faults or unexpected log content may, on rare occasions, cause incomplete redaction - see section A4.4.

A1.5 AI Feature Data (only when AI features are enabled)

If you enable AI features, calendar event data is transmitted to our AI sub-processors for processing. Data transmitted may include:

• Event titles, times, and durations
• Event locations
• Organiser names (email addresses are removed where possible)
• Attendee counts (names and emails may be transmitted)
• Event descriptions and notes

AI features are off by default and require your explicit, informed consent via an in-app disclaimer before any data is transmitted. You can disable AI features at any time in Settings, and you can review what has been transmitted via Settings > AI Logs.

AI features are reached through OpenRouter (https://openrouter.ai), an AI gateway that routes requests to underlying model providers (which may include OpenAI, Anthropic, Google, and Mistral, among others), depending on the routing in effect at the time.

No AI training on your data. NextUp Alert does not train, fine-tune, or otherwise improve any AI model using your calendar data. We have disabled OpenRouter's options that would permit routing to endpoints that train on or publish request data, and we have not opted into any data-sharing programme that uses your inputs or outputs to improve the gateway. The underlying model providers reached through OpenRouter, and our text-to-speech provider, operate their own retention and training policies, which we recommend reviewing.

A1.6 Voice / Text-to-Speech Data (only when AI features are enabled)

If you enable enable AI features, short text strings (typically a summary of the upcoming event) are transmitted to our text-to-speech provider Fish Audio (https://fish.audio) for synthesis. Voice features are off by default and are covered by the same in-app AI Data Sharing Disclaimer and consent gating described in §A1.5.

Fish Audio is a US-based provider with its own retention and training practices; text submitted for synthesis may be retained and used to improve their services. We recommend reviewing Fish Audio's (https://fish.audio) privacy policy and terms before enabling AI features.

A1.7 Backend / Sync Data

Certain features (sign-in, licence validation, AI request proxying) are routed through our Cloudflare Workers backend at api.nextupalert.com. The Worker forwards only the minimum data necessary to the relevant downstream service. Cloudflare may process IP addresses and request metadata for security and abuse prevention.

A1.8 AI and Voice Usage Metering (only when AI features are enabled)

To provide and enforce your AI and voice usage allowance and to prevent abuse, we record usage-accounting data tied to your licence - for example, the number of text tokens and voice bytes consumed, request counts, timestamps, and success or error status. This is aggregate metadata about how much you use the AI and voice features; it is not a copy of your calendar event content kept for that purpose. How the content itself is handled by our AI and voice sub-processors is described in sections A1.5 to A1.6 and section A3. This metering data is processed through our Cloudflare Workers backend (see section A1.7) and is used only to operate the allowance, enforce fair-use and rate limits, and detect abuse. The usage allowance and our right to change it are described in the Terms of Service (section A3).

A1.9 Cookies, Local Storage, and Device Identifiers

NextUp Alert stores configuration, cached calendar data, and log files in standard application-data directories on your device. The App does not use browser cookies or web tracking technologies, does not collect or transmit a persistent advertising identifier, and does not include third-party advertising or web-analytics SDKs. We do not sell your personal information or use it for third-party advertising. The emails we send relate to your use of the App — for example licence activation, security and service notices, occasional product updates or new-feature announcements, and replies to your support requests. Every non-essential product or feature email includes an easy way to opt out, which has no effect on your licence or your use of the App.

A1.10 Device Permissions

To provide its features, NextUp Alert uses operating-system permissions including access to your connected calendar account(s), system notifications, audio output (for alarms and voice announcements), and local storage. These permissions are used only to deliver the features described in this Part. You can review or revoke them in your operating-system settings, or by signing out of or revoking access at your calendar provider; some features will not work without the permissions they require.

A2. How We Use Personal Information

We process personal information to:

• Provide the core functionality of the App (reading your calendar, countdowns, alarms, notifications);
• Authenticate you to your calendar provider and validate your licence;
• Provide AI-powered and voice features that you have explicitly enabled;
• Meter and enforce your AI and voice usage allowance and prevent abuse (NextUp Alert);
• Diagnose and fix bugs, monitor performance, and improve the App;
• Communicate important service or security messages;
• Comply with legal obligations.

A3. Sub-Processors and Sharing (NextUp Alert)

We share personal information only with the sub-processors necessary to operate NextUp Alert. The current list is:

OpenRouter is itself a gateway. It routes requests to underlying AI model providers (which may include OpenAI, Anthropic, Google, Mistral, and others). When you use AI features, your data may be processed by these underlying providers under their respective privacy policies, depending on the routing in effect at the time.

We may add, remove, or change sub-processors from time to time. The list above is the canonical record. Material changes - for example, adding a new category of sub-processor or a new category of data sharing - will be reflected here and, where required by law or where we consider it appropriate, we will re-prompt affected consents in the App.

A4. AI Features - Important Considerations

The terms in this section mirror the in-app AI Data Sharing Disclaimer that you must accept before enabling AI or voice features in NextUp Alert.

A4.1 Do Not Enable AI Features If Your Calendar Contains Sensitive Information

Examples of sensitive information include:

• Health, medical, or therapy appointments
• Financial, legal, or attorney-client matters
• Confidential business meetings, M&A, or trade secrets
• HR, disciplinary, or personnel matters
• Anything subject to professional confidentiality (medical, legal, clergy, or other privileged contexts)
• Anything else you personally consider private, confidential, or inappropriate to share with a third party

If in doubt, leave AI features off.

A4.2 Your Responsibilities

By enabling AI features, you authorise NextUp Alert to transmit calendar event data to the sub-processors listed in section A3. You acknowledge and agree that:

• You are solely responsible for reviewing and accepting each provider's terms of service and privacy policy.
• You are directing the disclosure of personal data - including, where applicable, the personal data of organisers and attendees - to these third parties, and you are responsible for ensuring this disclosure complies with your obligations under applicable privacy law (including GDPR, UK GDPR, CCPA/CPRA, PIPEDA, POPIA, and any sectoral rules such as HIPAA).
• You confirm you have any necessary authority or consent to share this information with the providers above.

A4.3 No Warranty or Guarantee

NextUp Alert does not control, and makes no representations or warranties regarding, the privacy practices, data handling, retention, training, or security of any third-party provider.

AI-generated content is provided for informational purposes only, on an "as is" basis, without warranty of any kind, express or implied. PLIGO LIMITED accepts no liability for any loss or damage arising from AI-generated content or from the processing of your data by third-party providers.

PLIGO LIMITED provides no warranty or guarantee - express, implied, statutory, or otherwise - that AI features or AI-generated content will be accurate, complete, reliable, available, timely, secure, error-free, or fit for any particular purpose. To the fullest extent permitted by law, all such warranties and guarantees are disclaimed.

You should not rely on AI-generated content for material decisions without independent verification.

A4.4 Settings and On-Device Controls May Fail

NextUp Alert uses reasonable efforts to honour your settings and to operate the on-device protections described in this Part - including the option to disable AI and voice features and the on-device redaction of diagnostic data (see section A1.4). However, software faults, crashes, operating-system errors, storage failures, sync issues, or other unexpected conditions may, on rare occasions, cause settings to fail to save, fail to apply, revert, redaction to be incomplete, or the App to otherwise behave unexpectedly. PLIGO LIMITED does not warrant that any setting, opt-out, on-device control, or redaction process will operate without error. You should periodically verify, via Settings > AI Logs, that AI behaviour matches your expectations, and treat the AI Logs as the authoritative record of what has actually been transmitted.

A4.5 Historic Data Cannot Be Recalled

Once calendar data has been transmitted to a third-party provider, NextUp Alert cannot recall, delete, modify, or otherwise control that data. Disabling AI features, uninstalling the App, or revoking consent stops further transmission but does not undo past transmissions. Any deletion, correction, or access requests for data already held by a provider must be made directly to that provider and are subject to their own data retention, backup, and processing policies.

A4.6 No Automated Decision-Making with Legal Effects

AI features in NextUp Alert are intended only to summarise, format, and surface calendar data. They do not make decisions that produce legal effects, or other similarly significant effects, on you (within the meaning of Article 22 of the GDPR / UK GDPR). If we ever introduce automated decision-making with such effects, we will obtain your separate, informed consent and provide the disclosures required by applicable law, including the right to obtain human intervention, to express your point of view, and to contest the decision.

Part B - NextUp Alert Lite (legacy Windows app)

This Part applies to NextUp Alert Lite - Calendar Reminders, our Windows-only application distributed through the Microsoft Store (previously also known as "NextUp", "NextUp Alert", and "NextUp Calendar Event Countdown"). If you are using the modern cross-platform app, read Part A instead.

NextUp Alert Lite has no AI features, sends no data to any AI or text-to-speech provider, and does not route your data through any application backend operated by us. Its data footprint is deliberately minimal.

B1. Information We Collect

B1.1 Calendar Data

NextUp Alert Lite reads event data from your connected Google Calendar and/or Microsoft Outlook accounts, including event titles, times, locations, descriptions, organisers, and attendees. Calendar event content is processed on your device. It is not sent to any AI, voice, or analytics provider, because the App has no such features.

B1.2 Authentication Tokens

The App stores an authentication token on your device to access the Google Calendar API and/or the Microsoft (Outlook) Calendar API. You can revoke access at any time by signing out in the App or by revoking the App's permission in your Google or Microsoft account.

B1.3 Distribution and Licensing

NextUp Alert Lite is distributed free through the Microsoft Store. We do not operate a third-party payment processor for this App and we do not collect billing or payment information. Any installation, account, age, region, or (if ever applicable) purchase handling is performed by the Microsoft Store under Microsoft's Privacy Statement (https://privacy.microsoft.com/privacystatement). The App reads its Microsoft Store licence status on your device only to support in-app rating prompts.

B1.4 Log Files and Diagnostics

NextUp Alert Lite may generate log files on your device recording errors, crashes, app events, and performance data. These diagnostic logs may be uploaded to New Relic for centralised analysis and retained for up to 30 days. Our logging is designed to record operational and diagnostic information rather than the content of your calendar events; however, this is a best-effort measure and we do not warrant that logs are entirely free of personal information.

B1.5 Voice Announcements (local only)

NextUp Alert Lite can play spoken countdown announcements (for example, "Event starts in 5 minutes"). These announcements use pre-recorded audio files stored on your device. No text or audio is sent to any external text-to-speech provider, and no calendar content is transmitted in order to produce them.

B1.6 Cookies, Local Storage, and Device Identifiers

The App stores configuration, cached calendar data, and log files in standard application-data directories on your device. It does not use browser cookies or web tracking technologies, does not collect or transmit a persistent advertising identifier, and does not include third-party advertising or web-analytics SDKs. The App does not send marketing communications; any email we send to you is transactional (e.g. security notices or responses to your support requests).

B1.7 Device Permissions

To provide its features, NextUp Alert Lite uses operating-system permissions including access to your connected calendar account(s), system notifications, audio output (for alarms and on-device voice announcements), and local storage. These permissions are used only to deliver the features described in this Part, and no calendar content leaves your device to produce them. You can review or revoke them in your operating-system settings, or by signing out of or revoking access at your calendar provider; some features will not work without the permissions they require.

B2. How We Use Personal Information

We process personal information to:

• Provide the core functionality of the App (reading your calendar, countdowns, alarms, notifications, and local voice announcements);
• Authenticate you to your calendar provider;
• Diagnose and fix bugs, monitor performance, and improve the App;
• Communicate important service or security messages;
• Comply with legal obligations.

B3. Sub-Processors and Sharing (NextUp Alert Lite)

We share personal information only with the sub-processors necessary to operate NextUp Alert Lite. The current list is:

NextUp Alert Lite does not use OpenRouter, Fish Audio, Lemon Squeezy, or a Cloudflare application backend, because it has no AI, no external text-to-speech, and no third-party payment processing.

We may add, remove, or change sub-processors from time to time. The list above is the canonical record for this App. Material changes will be reflected here and, where required by law, notified to you.

Common Terms (apply to both Apps)

The following provisions apply to both NextUp Alert and NextUp Alert Lite. References to "the App" mean the App you are using; references to "the sub-processors" mean the sub-processors listed in the Part that applies to your App (section A3 or section B3).

C1. Legal Basis for Processing (EEA / UK Users)

Where the GDPR or UK GDPR applies, we rely on:

• Performance of a contract - to provide the App's core features.
• Consent - for AI features, voice features, and optional diagnostic uploads (where applicable to your App). You may withdraw consent at any time in Settings; withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Legitimate interests - to secure, monitor, and improve the App, prevent abuse, and validate licences, where these interests are not overridden by your rights.
• Legal obligation - where we are required to retain or disclose data under applicable law.

C2. International Transfers

Several sub-processors are located outside the European Economic Area, the United Kingdom, or your country of residence (typically in the United States). Where personal data is transferred internationally, we rely on lawful transfer mechanisms - including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and the EU-US Data Privacy Framework (where the recipient is certified).

C3. Data Retention

• Authentication tokens - retained on your device until you sign out, revoke access at the calendar provider, or uninstall the App.
• Local log files - retained on your device subject to size and age limits enforced by the App.
• Centralised log files (New Relic) - retained for up to 30 days.
• Licence and billing data - for NextUp Alert, retained by Lemon Squeezy for the duration of your licence and as required for tax, accounting, and audit purposes. NextUp Alert Lite is distributed free via the Microsoft Store and we hold no billing data for it.
• AI and voice usage-metering data (NextUp Alert only) - retained for the duration of your licence (top-up balances persist across renewals) and as needed for fair-use enforcement, abuse prevention, and accounting.
• AI / voice provider data (NextUp Alert only) - retained according to each provider's policy. We do not control retention by sub-processors.

C4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit (HTTPS/TLS), secure local storage of tokens, and access controls on backend systems. No system is guaranteed to be 100% secure, and we make no warranty of absolute security.

If a personal data breach occurs that is likely to result in risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with our obligations under applicable law (including, where applicable, GDPR Articles 33-34, the New Zealand Privacy Act 2020, and applicable U.S. state breach-notification laws), without undue delay.

C5. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Correction of inaccurate or incomplete data;
• Deletion of personal data, subject to retention obligations;
• Restrict or object to certain processing;
• Portability - receive your data in a structured, commonly-used format;
• Withdraw consent for processing based on consent, at any time;
• Lodge a complaint with your local data protection authority (e.g. the ICO in the UK, your country's data protection authority in the EU, the OAIC in Australia, the Office of the Privacy Commissioner (OPC) in New Zealand, or the Information Regulator in South Africa).

For NextUp Alert, note that for AI / voice provider data, certain rights (particularly deletion) may need to be exercised directly with the relevant sub-processor - see section A4.5.

To exercise any of these rights, contact us at the address in section C8.

C6. California and U.S. State Privacy Rights

This section applies to residents of California, Colorado, Virginia, Texas, Connecticut, Utah, and other U.S. states with comprehensive consumer privacy statutes.

No sale or sharing. We do not sell your personal information for monetary or other valuable consideration, and we do not share your personal information for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We have not done so in the preceding twelve (12) months.

Categories of personal information we collect. We collect: (a) identifiers (for NextUp Alert, name and email through Lemon Squeezy for licensed users; for both Apps, an OAuth token bound to your calendar account); (b) commercial information (for NextUp Alert, licence and purchase history via Lemon Squeezy; not applicable to the free NextUp Alert Lite); (c) internet or other electronic network activity (diagnostic data and, for NextUp Alert, request metadata); and (d) inferences drawn from the above only to the extent generated for licensing or diagnostic purposes. We do not collect biometric, geolocation, education, employment, sensory, or professional information.

Sensitive personal information. The only category of "sensitive personal information" we process is account log-in credentials (the OAuth authentication token used to access your calendar). We do not use sensitive personal information for any purpose other than providing the service you have requested, and we do not disclose it to third parties for any purpose that would require a "Limit Use of My Sensitive Personal Information" mechanism under the CPRA.

Sources of personal information. We collect personal information directly from you (when you install the App, sign in to a calendar provider, or - for NextUp Alert - purchase a licence) and from our service providers (such as your calendar provider and, for NextUp Alert, Lemon Squeezy).

Business and commercial purposes. We use personal information to provide and secure the App, validate licences (NextUp Alert), deliver explicitly enabled features (including AI / voice features in NextUp Alert), debug, and comply with law.

Your rights. California, Colorado, Virginia, Texas, Connecticut, and Utah residents have the right to: (i) know / access what personal information we hold about them; (ii) correct inaccurate information; (iii) delete personal information, subject to retention obligations; (iv) portability; (v) opt out of any sale or sharing (we do not sell or share); (vi) opt out of profiling that produces legal or similarly significant effects (we do not engage in such profiling - see section A4.6); and (vii) non-discrimination.

How to exercise your rights. Email us at pligoapps [at] gmail [dot] com. with the subject line "Privacy Rights Request". We may need to verify your identity before fulfilling the request. If we deny your request, you have the right to appeal - reply to our denial email and we will respond within the timeframe required by your state's law.

Authorised agents. You may designate an authorised agent to make a request on your behalf. We may require the agent to provide written authorisation signed by you and we may require you to verify your identity directly.

C7. Children's Privacy

The Apps are not directed to children under 16 (or the age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it.

C8. Changes to this Privacy Policy

We may update this Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. For material changes, we will provide reasonable notice - typically via an in-app notice and, where required, by re-prompting affected consents.

C9. Relationship to our Terms of Service

This Privacy Policy explains how we handle personal information. It does not limit, replace, or override our Terms of Service. Matters such as our limitation of liability, your indemnification obligations, disclaimers of warranties, the time limit on claims, and the governing law and jurisdiction are set out in the Terms of Service (https://www.nextupalert.com/terms-of-service), which apply to your use of the Apps in addition to this Policy.

C10. Contact Us

For questions, requests, or complaints about this Policy or our data practices:

• Email: pligoapps [at] gmail [dot] com.
• Publisher: PLIGO LIMITED (New Zealand)
• Apps: NextUp Alert - Calendar Reminders; NextUp Alert Lite - Calendar Reminders

By using either App, you consent to the practices described in this Privacy Policy for that App.