Privacy policy

Last updated September 24, 2026

Family Calendar (www.familycalendar.cloud) is a personal project built and run by one independent developer. It lets a family connect their calendars, choose which events to share, and publish the result as a calendar feed for a smart display or calendar app. It is used privately by the people I invite. It is not a commercial product, it carries no advertising, and I do not sell or share your information.

This page explains what the app stores, why, and how to have it removed. Throughout, "I" means the developer and "you" means anyone who uses the app.

What the app collects

Your account. When you sign in with Google or Apple, the app receives your name, email address and, from Google, your profile picture. Signing in asks for nothing else.

Calendar connections. Calendar access is a separate step, and only happens if you choose to connect an account:

Google Calendar: read-only access to your list of calendars and the events on them. The app stores the access and refresh tokens Google issues, plus the email address of the connected account. It never creates, changes or deletes anything in your Google account.
iCloud: your Apple ID and an app-specific password that you create for this app. The app reads calendars over CalDAV and never writes to them.
Calendar links (ICS): the web address of any calendar feed you add.

Tokens, Apple IDs and passwords are encrypted in the database.

Calendar events. For the calendars you turn on, the app keeps a copy of each event: its title, date and time, location, description, organizer's email address and number of attendees. It needs that copy to apply your filters and to build your feeds.

Technical information. When you sign in, the app records your IP address and browser type against that sign-in so that it can be listed and ended. Like any website, the server also keeps short-lived logs of the requests it receives.

How the information is used

The app uses your information only to do what it is for:

to sign you in and show you your family's calendars;
to sync your connected calendars and apply the filters you set;
to publish the feeds that you or your family's managers create;
to email an invitation when someone in your family invites a person to join.

I do not read your calendars or account details as a matter of course. If something breaks and I need to investigate, I may look at the limited information needed to fix that problem, only as needed and only for as long as it takes.

Information from Google

Family Calendar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google Calendar data is:

used only to provide and improve the features you can see in the app;
never used for advertising, and never sold;
never transferred to anyone else, except as described under "Who can see it" below or when the law requires it;
never read by a person, unless you ask me to or agree to it, it is necessary for security or to fix a problem you have reported, or the law requires it;
never used to develop, improve or train generalized AI or machine learning models.

Who can see it

Your family. Members of a family you belong to can see the calendars connected to it and the events that pass its filters.
Anyone with a feed link. A published feed is reached through a long, unguessable web address, so that it can be pasted into a calendar app or smart display. Anyone who has that address can see the events in that feed. Treat it like a password. A family manager can issue a new address at any time, which stops the old one working.
The services the app runs on. The app and its database are hosted on Railway, and invitation emails are sent through Resend. They process data only to provide those services to me.
When the law requires it. I will disclose information only if I am legally required to.

Nobody else. There are no advertisers, data brokers or analytics companies.

Cookies

The app sets cookies only to keep you signed in and to remember whether you chose the light or dark theme. There are no analytics, advertising or tracking cookies, and no third-party scripts that track you.

Keeping and deleting your information

Removing a calendar connection in the app deletes its stored tokens or password, its calendars and every event copied from them.
You can also cut off access from the provider's side at any time: Google at myaccount.google.com/permissions and iCloud by revoking the app-specific password at account.apple.com. The app then stops syncing that account.
To delete your account and everything attached to it, email me at the address below and I will do it and confirm by reply.

Otherwise, information is kept for as long as your account exists. Server logs are short-lived and are cleared on the hosting provider's schedule.

Security

All traffic to the app is encrypted with HTTPS, and calendar credentials are encrypted in the database. No system is perfectly secure, but I take reasonable care to protect what the app holds, and I will tell affected users promptly if I learn of a breach.

Children

Accounts are for adults. Family calendars may mention children, and those events are protected in exactly the same way as everything else here, but the app is not directed at children under 13 and I do not knowingly create accounts for them.

Changes to this policy

If this policy changes, the new version will be posted on this page with a new date at the top. If a change affects how your existing information is used, I will tell users before it takes effect.

Contact

Questions, or a request to see or delete your information: pepper-motes36@icloud.com