AI privacy and safety

This page covers what the When agent sends outside When, the limits that protect your calendar, and how to turn AI off.

Turn AI features on or off

In Settings → AI, use the AI features switch to control AI across your account. The setting starts on for new accounts, and setup lets you turn it off.

Turning it off hides chat and its shortcuts, stops new AI requests, and stops the When agent, including its daily briefing. It does not delete your conversation.

To keep AI features on but stop only the agent, turn off When agent in Settings → AI. See Use the When agent.

What is sent to Anthropic

The When agent runs on Claude, an AI model made by Anthropic. With each message, When sends Anthropic:

• your message, with the earlier messages in the conversation or a summary of the oldest ones
• where you are in the app: the page, the calendar on screen, the days you can see, and the item you have selected or open
• the calendar details the agent reads to answer, such as event titles, times, locations, and notes
• any images you attach

The daily briefing sends Anthropic the events and periods for today and tomorrow, and the names of the subscribed and shared calendars they're on.

Event suggestions in the editor send the title or pasted confirmation you're editing, with the names and descriptions of your event types and labels. Browser extension captures send the text or image you select. See AI title suggestions.

Share only details you are comfortable sending to Anthropic. See When's privacy information for more about how When uses your data.

Web search

When the agent searches the web, When sends the search words to Exa, a web search service. The agent searches for the public fact alone, such as a conference's name and year, not details from your calendar. When refuses a search that contains an email address.

The pages Exa returns go to Anthropic so the agent can read them. The agent treats them as information, never as instructions, and asks you before it saves anything it found.

Text other people wrote

Some events hold text someone else wrote, such as events on subscribed calendars and calendars shared with you. The agent treats that text as information, never as instructions. If an event's notes tell it to archive something, invite someone, or open a link, it reports what the notes say and does not act on them.

The changes When holds for your yes, such as adding a guest whose address you didn't give or making an item public, are checked by When itself, so a planted instruction cannot skip them. See Use the When agent for the full list.

Links in replies

A web address in a reply is a link only when the agent read that exact address in your message, a calendar item, or a web search result. Any other address shows as plain text, so the agent cannot be steered into building a link that sends your details elsewhere. Replies never load images from the web.

Links to items, days, settings, and help pages open inside When.

Review its activity

The agent reaches your calendar the same way a connected AI app does. Its requests and access changes show under AI app activity in Settings → Integrations, labeled When agent. See Connect Claude or another AI app for what that list keeps.