1. What this policy covers
This policy explains what information Together Calendar collects, why it is used, who can see it, how it is protected and how you can request deletion. It applies to the website, Android application and connected calendar features available through calendar.ipate.eu.
2. Information we collect
When you sign in with Google, we receive your Google account identifier, name, email address and profile picture. If you separately choose to connect Google Calendar, we access your calendar list and event information, including event titles, dates, times, locations, descriptions, attendees, recurrence and status.
We also store information you add directly to Together Calendar, such as events, comments, reminders, color labels, household assignments, pictures and ticket attachments. Technical records may include login times, synchronization results, security events and a history of who created, changed or deleted an item.
3. How we use information
We use this information only to authenticate invited members, display the shared calendar, synchronize events requested by a member, deliver reminders, store attachments, show activity history, prevent duplicate updates, maintain security and troubleshoot the service.
Google user data is not used for advertising, credit decisions or profiling. We do not sell personal information.
4. Google API data
Connecting Google Calendar is optional. Together Calendar requests access to view your calendar list and to read, create and update calendar events so that the shared schedule can remain synchronized. Login permission and Calendar permission are requested separately.
Together Calendar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Sharing and visibility
Calendar information you place in the shared space can be seen by the invited members of that space according to their access rights. We use service providers only when needed to host, back up, secure or operate the application. They may process data on our behalf under access and confidentiality controls.
We may disclose information if required by law or when reasonably necessary to protect users, the service or others from fraud, abuse or security threats.
6. Storage and security
Data is transmitted over HTTPS. Application access is restricted to invited accounts. OAuth credentials and other secrets are stored separately from public files, and Google refresh tokens are encrypted at rest. Attachments are served through authenticated routes rather than public file links. Administrative access requires both an authorized account and an approved network.
No system is completely secure, but we limit access, maintain backups and review application activity to reduce the risk of unauthorized use.
7. Retention and deletion
We retain account and calendar information while your access remains active or while it is needed to provide the service. Deleted items may remain temporarily in activity history and encrypted backups for recovery and security purposes before normal expiration.
You may disconnect Google access at any time from your Google Account connections. To request deletion of your Together Calendar account, connected Google data, attachments or other personal information, email eusebiu@ipate.eu. We will complete verified deletion requests within 30 days, except where limited retention is required for security or legal reasons.
8. Your choices
You can choose not to connect Google Calendar, revoke Google permissions, correct information in the application, remove events and attachments, or ask us for a copy or deletion of your information. Revoking Google access stops future synchronization but does not automatically delete information already stored in the shared calendar; contact us if you also want that information removed.
9. Changes and contact
We may update this policy when the application or its data practices change. The effective date at the top will be updated, and material changes will be communicated to active members.
Questions and privacy requests can be sent to eusebiu@ipate.eu.