Larkwell holds some of your most personal thoughts — your tasks, your plans, the things on your mind. We treat that with the care it deserves. Here's exactly how we protect it.
Everything travels over encrypted TLS connections. High-risk secrets — like your calendar authorization tokens and messaging keys — are encrypted at rest with a dedicated application key and only decrypted in memory when needed.
Your password is stored only as a one-way hash — we never keep it in plain text and can never see it. Repeated failed logins are rate-limited to protect your account.
Download everything you have in Larkwell as a single JSON file from Settings → Your data & privacy. Your data is yours — take it with you whenever you like.
Permanently remove your account and all associated data in one tap. When you disconnect a calendar, we revoke access and remove the stored authorization.
We do not sell, rent, or share your personal data for advertising. Context sent to our AI provider is used only to produce your result — never to train models on your private data.
All card details are processed directly by Stripe, a PCI-DSS Level 1 certified provider. Larkwell never sees or stores your card number.
Larkwell is built around the privacy rights at the heart of the EU's GDPR and California's CCPA: the right to access and export your data, the right to correct it, and the right to delete it entirely. We collect only what we need to run the product, and we never sell your personal data.
Want to exercise a data right or ask a privacy question? Email support@larkwellapp.com and we'll respond within 30 days.
Larkwell runs on hardened, managed cloud infrastructure with encrypted data stores. We're an independent team and we're transparent about where we are on our security journey — if your organization needs specific documentation, just reach out.