Privacy Policy

FamCal is a family calendar built for coordination, not data collection. This policy explains what information we collect, how we use it, and your rights regarding your data. The short version: we collect only what we need to run the service, we never sell your data, and you can delete everything at any time.

1. Information We Collect

From Google Sign-In

When you sign in with Google, we receive and store:

• Your name and email address
• Your Google profile image
• Authentication tokens (access, refresh, and ID tokens) needed to keep you signed in

Information You Create

• Calendar events (titles, times, categories, recurrence rules, participants)
• Family group information (family name, member roles, invite codes)
• Event templates
• Display preferences (time format, week start day, default view, theme)

Automatic Information

FamCal uses two functional cookies: a session cookie for authentication (managed by NextAuth) and a theme preference cookie (light, dark, or system). We also collect limited operational diagnostics such as error reports, request metadata, browser information, and performance metrics so we can find and fix production issues. We do not use advertising or tracking cookies.

2. How We Use Your Information

We use your information for one purpose: providing the FamCal calendar service. Specifically:

• To authenticate your identity and maintain your session
• To display your name and avatar to family members
• To store and display your calendar events and schedules
• To remember your display preferences
• To diagnose crashes, slow pages, failed requests, and build or release regressions

3. What We Don't Do

To be explicit about what we will never do with your data:

• We do not sell your data to anyone, ever.
• We do not serve advertising or use your data for ad targeting.
• We do not share your data with data brokers or marketing companies.
• We do not use tracking cookies or third-party marketing analytics scripts.
• We do not read your events for any purpose beyond displaying them to you and your family.

4. Third-Party Services

FamCal relies on a small number of third-party services to operate. Each processes only the data necessary for their function:

5. Data Storage & Security

Your data is stored in a Turso (LibSQL) database. Authentication tokens from Google are stored in the database alongside your account record. We use HTTPS for all data transmission and rely on industry-standard security practices provided by our hosting and database providers.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. Upon deletion, your personal information, events, and family memberships will be permanently removed. Automated database backups may retain data briefly before they are rotated.

7. Children's Privacy

FamCal is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will promptly delete their data.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Export your calendar events and account data.
• Delete your account and all associated data.
• Correct inaccurate information (profile details can be updated through your Google account or FamCal settings).

To exercise any of these rights, contact us at the address below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. Continued use of FamCal after changes are posted constitutes your acceptance of the revised policy.

10. Contact

For privacy-related questions or data requests, please contact us at privacy@famcal.app.