The short answer
CALC's own persistent data storage runs on European infrastructure, with account-based access controls and encrypted connections. When you use an AI feature, the content needed to answer your request may be sent to a contracted AI provider. Its processing location and retention rules can differ by provider. The FAQ on AI providers explains which kinds of providers CALC works with and where processing may take place. The privacy policy describes each processing purpose in detail.