Privacy Policy

1. No Unnecessary Data Collection

The App is designed to operate with minimal data collection. In particular:

• We do not collect email addresses or names for registration or marketing purposes.
• We do not use tracking cookies or analytics tools for profiling or advertising.
• We only store the calendar content that you choose to enter into the App.

2. Data We Process

2.1 Calendar Data You Provide

When you use the App, you may enter calendar events or notes. These entries may include dates, times, titles, descriptions, and any other information you decide to store (“Calendar Data”).

This Calendar Data is stored in our database hosted by Neon (Postgres) in order to make your events available to you when you use the App.

2.2 Automatically Collected Technical Data

When you access the App, certain technical information is automatically processed in order to deliver the service, ensure security, and prevent abuse. This processing is mainly performed by our hosting and edge provider, Cloudflare.

Depending on your request and configuration, the following data may be processed:

• IP address
• Date and time of the request
• URL requested and HTTP status code
• Browser and device type (User-Agent header)
• Technical identifiers such as cookies or similar identifiers used purely for security, rate limiting, and performance (e.g., to detect abusive traffic)

This data is processed primarily by Cloudflare as our infrastructure provider and is necessary to operate the App in a secure and reliable manner.

3. Purposes and Legal Basis

Where the General Data Protection Regulation (GDPR) applies, we process personal data on the following legal bases:

• Provision of the service (Art. 6(1)(b) GDPR): Processing of your Calendar Data is necessary to provide the App’s core functionality and to store and display your events.
• Legitimate interests (Art. 6(1)(f) GDPR): Processing of technical data (e.g., IP address, logs, and security-related identifiers) is necessary for our legitimate interests in operating a secure, reliable, and performant service, especially for preventing abuse and rate limiting.

4. Service Providers and Recipients

We use carefully selected service providers to operate this App:

• Cloudflare, Inc.
  Used for edge hosting (Cloudflare Workers), caching, and security features such as DDoS protection and rate limiting. Cloudflare processes IP addresses, request metadata, and security-related information to deliver and protect the service.
• Neon (Postgres)
  Used as our managed PostgreSQL database provider. Calendar Data you store in the App is stored in Neon’s infrastructure.

These providers act as our processors and may only process data according to our instructions and for the purposes described in this policy.

5. International Data Transfers

Depending on the locations of our service providers and their data centers, your data may be transferred to and processed in countries outside of your country of residence. Where required by law, we take appropriate safeguards (for example, standard contractual clauses) to ensure that an adequate level of data protection is maintained.

6. Data Retention

• Calendar Data: Stored for as long as it is needed to provide the App or until you delete your data (where such functionality is provided).
• Technical logs and security data: Stored for a limited period only as necessary for security, error analysis, and rate limiting, in line with our service providers’ retention policies.

7. Cookies and Local Storage

The App may use strictly necessary cookies or local storage mechanisms to:

• Maintain your session or technical state;
• Store settings or preferences strictly required for functionality;
• Support security and rate limiting.

We do not use cookies or similar technologies for advertising or cross-site tracking.

8. Data Security

We take reasonable technical and organisational measures to protect your data against accidental or unlawful destruction, loss, alteration, or unauthorised access. This includes using established infrastructure providers (Cloudflare and Neon) and restricting access to data on a need-to-know basis.

9. Your Rights (where applicable under GDPR)

If the GDPR applies to you, you have the following rights in relation to your personal data:

• Right of access to your personal data;
• Right to rectification of inaccurate data;
• Right to erasure (“right to be forgotten”);
• Right to restriction of processing;
• Right to data portability;
• Right to object to processing based on legitimate interests;
• Right to lodge a complaint with a supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work, or of the alleged infringement.

To exercise your rights, please contact us using the contact details provided above.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our services or legal requirements. The latest version will always be available within the App and will indicate the date of the last update.

11. Contact

If you have any questions about this privacy policy or our data practices, you can contact us at: [email protected].