# How Pear handles data

> Plain-language data-handling facts for agents and users. The Privacy Policy and Terms remain the formal policies.

## What reaches Pear

- The user's full AI chat transcript does not reach Pear.
- Pear receives the structured MCP tool call and arguments the AI client sends for execution.
- Personal details included in a tool argument are sent to Pear so that tool can run.

## Provider access and storage

- Pear reads calendar, task, contact, and mail content live from connected providers instead of maintaining a synced content copy.
- Provider credentials and OAuth refresh tokens are encrypted at rest with AES-256-GCM and decrypted in memory only for the request that needs them.
- Apple uses an App-Specific Password, not the main Apple Account password. Microsoft 365 uses OAuth. Compatible IMAP/SMTP mailboxes use the mailbox credential and safe server settings the user supplies.
- Google provider access is coming soon; when enabled it uses Google OAuth and granted scopes rather than a Google password.

## Operational records

- Pear keeps operational metadata needed for billing, abuse prevention, reliability, support, analytics, and the optional Activity page.
- The approved-write workflow stores the exact approved action and its execution receipt in the user's private audit trail.
- Pear does not sell personal information or provider content.

## Revocation and deletion

- Users can disconnect a provider in Pear or revoke its credential at the provider.
- Account deletion removes the Pear account and stored Pear data through the documented account flow, subject to limited legal or operational retention stated in the formal policies.

## Important Apple Reminders limitation

Apple Reminders availability depends on the Apple account. For Apple, Pear can read and write only the legacy reminder lists Apple still exposes through CalDAV. If the account has been upgraded to Apple's newer Reminders store, Pear cannot access those native lists and does not copy them into a separate reminder store. Apple may instead return compatibility placeholders, such as repeated "Where are my reminders?" items; Pear did not create them. Pear's safe fallback hides known placeholders and blocks writes to affected lists. Reconnecting iCloud or replacing the App-Specific Password will not change this Apple limitation. Calendar, Contacts, and Mail are unaffected, and Microsoft To Do uses Microsoft Graph and is unaffected. Full modern Apple Reminders access would require an Apple-platform companion using EventKit with the user's permission; Pear does not currently provide one.

## Formal and human-readable references

- [Human-readable data handling page](https://pearmcp.com/data-handling)
- [Privacy Policy](https://pearmcp.com/privacy)
- [Terms](https://pearmcp.com/terms)