Privacy Policy

Last updated: October 13, 2026

This Privacy Policy explains how AttendKit collects, uses, shares, and protects information when you use our website at attendkit.app, the AttendKit Chrome extension, the AttendKit add-on for Google Meet, and our related services (together, the "Services").

Who we are

AttendKit is owned and operated by its founder, Aadesh Varne. In this policy, "AttendKit", "we", "us", and "our" mean AttendKit and its owner, Aadesh Varne.

We are the data controller for the personal data described in this policy. The one exception is the attendance data of people in the meetings you track, which is explained in "Meeting organizers and participants" below.

You can reach us at [email protected].

Payments and our Merchant of Record

Some AttendKit features are part of paid plans. To handle those purchases, we use a third-party payment provider.

We do not collect or store your card details. You enter them directly with our payment provider, and its own privacy policy governs how it uses your personal information. Our payment provider follows the Payment Card Industry Data Security Standard (PCI DSS), the security rules for card data set by the PCI Security Standards Council, which was founded by major card brands including Visa, Mastercard, American Express, and Discover.

Our payment provider is:

Paddle

Our order process is conducted by our online reseller Paddle.com, and Paddle.com is the Merchant of Record for all our orders. You can read Paddle's privacy policy at paddle.com/legal/privacy. For help with a charge, email us or contact Paddle at paddle.net.

Information we collect

Information from your Google account

When you sign in with Google, we receive your name, email address, and profile picture. We use them to create your account and to show who is signed in.

Meeting attendance data

When you track a meeting with AttendKit, we collect:

• For each participant: their name, email address, and profile photo, as Google provides them; their invitation response (Accepted, No Response, or Declined); and the times they joined, left, and rejoined the meeting.
• For each meeting: the title, the Meet code, the scheduled time, and the actual start and end times.

From these, AttendKit calculates each participant's status (Present, Late, or Absent), how long they stayed, and their attendance percentage.

AttendKit does not record, store, or listen to video, audio, chat messages, transcripts, or screen contents.

Account, team, and billing information

• Your plan, settings, and subscription status.
• If you use a Team plan: your organization's name, the email addresses of the people you invite, and their roles.
• Billing details Paddle shares with us to manage your subscription, such as your name, email address, country, plan, and payment status.

Messages you send us

When you email us or contact support, we keep your messages and anything you choose to share, so we can help you.

Usage information and cookies

When you use the Services, we automatically collect log and usage data, such as your IP address, browser and device type, the pages you visit, and the actions you take in the app. We use cookies and similar technologies to keep you signed in, remember your settings, and understand how the Services are used.

Google user data

AttendKit connects to your Google account only with your permission, and uses that access only for the features you use:

• Google Meet: who joined the meetings you track, and when each person joined and left.
• Google Calendar: the title, scheduled time, and guest list of the meetings you track, including each guest's invitation response.
• Google profile information: participants' names, email addresses, and profile photos, so your reports show who attended.
• Sign in with Google: your own name, email address, and profile picture.

Google API Services usage disclosure

AttendKit's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This means:

• We use Google user data only to provide or improve user-facing features that are visible and prominent in AttendKit.
• We transfer Google user data to others only when needed to provide or improve those features, to comply with the law, or to protect security. If AttendKit is ever sold or merged, we will ask for your explicit consent before transferring Google user data.
• We do not use or transfer Google user data for advertising, including retargeting, personalized, or interest-based advertising.
• We do not sell Google user data.
• We do not allow anyone to read Google user data, except when you give us explicit permission to view specific data (for example, a meeting you ask us to check while we help you with support), when it is needed for security purposes such as investigating abuse, when the law requires it, or when the data has been aggregated and anonymized for internal operations.
• We do not use Google user data to develop, improve, or train generalized or non-personalized AI or machine learning models.

The AttendKit Chrome extension follows the same rules, in line with the Chrome Web Store User Data Policy, including its Limited Use requirements.

How we use your information

We use your information to:

• Provide the Services: sign you in, track attendance, build reports, and let you share and export them.
• Manage your account, your team, and your plan, including billing through Paddle.
• Send you account and service emails, such as plan changes and important product updates.
• Send you product tips and marketing emails, which you can unsubscribe from at any time.
• Answer your questions when you contact support.
• Understand how the Services are used, fix problems, and improve features.
• Keep the Services secure and prevent fraud and abuse.
• Meet our legal, tax, and accounting obligations, and enforce our Terms of Service.

We do not sell your personal information. We use meeting attendance data only to provide and improve AttendKit, and never for advertising.

Legal bases for people in the EEA and UK

Where the GDPR or UK GDPR applies, we rely on these legal bases:

• Contract: to provide the Services you signed up for, including your account, reports, and plan.
• Legitimate interests: to keep the Services secure, understand how they are used, and improve them.
• Consent: to send marketing emails where the law requires consent. You can withdraw it at any time.
• Legal obligation: to keep billing and tax records.

How we share your information

We share your information only in the situations below.

Providers who help us run AttendKit

We work with a small number of trusted providers. Each one receives only the data it needs to do its job and is bound by data protection terms. Our main providers are:

If AttendKit adds third-party tools or AI features, they will process data only to provide the feature you ask for. We do not send your data to anyone for model training or for unrelated purposes.

When you choose to share

• Teammates: on a Team plan, you can share meetings with members of your organization. Meetings you do not share stay private, even inside your organization.
• Public report links: you can create a link to a meeting report. Anyone with the link can see that report until the link expires or you revoke it. You can hide participant email addresses on a public link, and we count how many times each link is viewed.
• Exports: CSV and PDF files you download are saved on your device, outside AttendKit.

Legal reasons

We may share information when the law requires it, or when it is needed to protect the rights, property, or safety of AttendKit, our users, or others.

If AttendKit changes ownership

If AttendKit is sold, merged, or transferred to a new owner, your information may be transferred as part of that deal. The new owner must keep protecting it as this policy describes. We will ask for your explicit consent before transferring any Google user data.

Meeting organizers and participants

AttendKit is used by meeting organizers such as teachers, team leads, and event hosts. If you track meetings with AttendKit, you decide which meetings to track, who can see the reports, and how long to keep them. For the attendance data of the people in your meetings, you (or your organization) are the data controller, and AttendKit is the data processor that stores and shows that data on your instructions.

AttendKit does not announce itself in your calls. Where your policies or local law require it, you are responsible for telling participants that attendance is being tracked.

If you were a participant in a meeting tracked with AttendKit and want to see, correct, or delete your attendance record, please contact the meeting organizer. You can also email us, and we will pass your request to the organizer and help them respond.

If your organization needs a data processing agreement, email [email protected].

How long we keep your information

• Account information: for as long as your account is open.
• Meeting attendance data: until you delete the meeting or your account. Deleting a meeting removes it and all of its participant records, including for anyone you shared it with.
• Billing records: for as long as tax and accounting laws require, even after your account is deleted. Paddle keeps its own billing records under its privacy policy.
• Support messages: for as long as we need them to help you and to keep a record of your request.
• Logs and usage data: for a limited time, unless we need them longer to keep the Services secure or to meet a legal obligation.

To delete your account and its data, email [email protected] from the email address on your account. We will delete your personal data, except records we must keep by law. Files you have already exported stay on your device and are not affected.

Where your information is processed

We and our providers may store and process your information in countries other than the one where you live, where data protection laws may differ. Wherever it is processed, we protect your information as described in this policy.

Data security

We protect your information with encryption in transit (HTTPS), access controls, and limited internal access. No method of sending or storing data over the internet is completely secure, so we cannot guarantee absolute security. If a security breach affects your personal data, we will notify you as the law requires.

Your privacy rights

Wherever you live, you can ask us to:

• Access: send you a copy of the personal data we hold about you.
• Correct: fix information that is inaccurate or incomplete.
• Delete: erase your personal data, unless we must keep it by law.
• Restrict: limit how we use your personal data in certain cases.
• Object: stop using your personal data in certain ways, including for marketing.
• Port: give you your data in a structured, machine-readable format, or send it to another organization where possible.
• Withdraw consent: where we rely on your consent, you can withdraw it at any time.

To make a request, email [email protected] from the email address on your account. We may need to confirm your identity first. We will respond within one month. Making a request is free. If a request is clearly unfounded or excessive, we may charge a reasonable fee or decline it.

If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

California privacy rights (Do Not Sell My Personal Information)

If you live in California, the California Consumer Privacy Act (CCPA) gives you the right to:

• Know what personal information we collect, use, and disclose, and get a copy of it.
• Delete the personal information we have collected from you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information.
• Use these rights without being treated differently.

We do not sell your personal information. To use these rights, email [email protected]. We will respond within one month.

Your choices

• Marketing emails: use the unsubscribe link in any marketing email. You will still receive essential account and billing emails.
• Cookies: you can block or delete cookies in your browser settings. Some features, such as staying signed in, may stop working.
• Auto Attendance: you can turn off Auto Attendance in AttendKit's settings so it does not track every call you join.
• Google access: you can remove AttendKit's access to your Google account at any time at myaccount.google.com/connections, and uninstall the Chrome extension or the Meet add-on whenever you like.

Children's privacy

AttendKit accounts are meant for adults, such as teachers, team leads, and event organizers. We do not knowingly allow anyone under 18 to create an account. If you believe a child has created an AttendKit account, contact us and we will delete it.

Meetings tracked with AttendKit can include students who are minors. In that case, the school or teacher running the meeting decides how the attendance data is used, and is responsible for any notice or consent their school policies or local law require. We use that data only to provide AttendKit to them, and never for advertising.

Changes to this policy

We may update this Privacy Policy when our Services, our providers, or the law change. When we do, we will update the "Last updated" date at the top of this page. If we make significant changes, we will also tell you by email or with a notice on our website.

Contact us

For questions about this Privacy Policy, privacy requests, or complaints, contact:

• Email: [email protected]
• Website: attendkit.app