Vague retention language ('no longer than necessary') without specific timeframes makes it difficult for consumers to know how long their sensitive data — including mood check-ins and sleep habits — is being held.
Calm collects a broad range of personal data including mood check-ins, sleep habits, health app data, and inferred characteristics like age and gender, which may be shared with advertising partners and used for behavioral targeting across the web. Some of this data sharing may qualify as a 'sale' of personal data under CCPA and similar laws. You can opt out of targeted advertising and data sharing by visiting calm.com/optout or using the Cookie Preferences Manager on the Calm website.