10 Total
1 High severity
6 Medium severity
3 Low severity
Summary

Calm's privacy policy explains what personal information the app collects about you — including your name, usage habits, mood check-ins, sleep data, and device details — and how it may be shared with advertisers and other companies. Your data may be used to show you targeted ads on other platforms, and some of this activity counts as 'selling' your data under privacy law. You have the right to access, correct, or delete your data, and you can opt out of targeted advertising.

Technical Summary

Calm's Privacy Policy (last updated December 12, 2024) governs the collection, use, and disclosure of personal data by Calm.com, Inc. across its websites, mobile applications, and related services. The policy details extensive data collection practices including identifiers, usage data, inferred characteristics (e.g., age, gender), health app data, and communications recordings. It discloses data sharing with service providers, advertising partners, and third parties, and acknowledges that certain activities (behavioral advertising, cookies) may constitute 'sales' or 'sharing' under applicable privacy laws. The policy provides rights frameworks for California residents (CCPA), EEA/UK/Switzerland residents (GDPR/UK GDPR), and all users globally, including rights to access, correct, delete, and opt out of targeted advertising. Standard Contractual Clauses are used for cross-border data transfers.

Evidence Provenance
Captured April 19, 2026 06:18 UTC
Document ID CA-D-000218
Version ID CA-V-000749
Wayback Machine View archived versions →
SHA-256 8ed73dc0c7bd8d40dc9579c58c758f8df55f0ae2f39eaa5850c285c267924182
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
High Severity — 1 provision
Medium Severity — 6 provisions
Low Severity — 3 provisions

Cross-platform context

See how other platforms handle Behavioral Advertising as Data Sale or Sharing and similar clauses.

Compare across platforms →

Applicable Regulations

CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
GDPR
European Union
HIPAA
United States Federal