Privacy Policy for CalHive

1. What stays on your phone

With your permission, CalHive reads the calendars on your phone: event times, calendar names and account names. It uses them to build your merged view, to write plain "Busy" blocks into the calendars you choose, and to find overlaps. Event titles, descriptions, attendees and locations are not sent to us. CalHive also keeps on your phone its settings, your jobs and rules, a list matching events to the blocks it created, and a sync history.

2. Your CalHive account

To use CalHive you sign in. We collect:

• your email address, to send you a sign-in code and identify your account. If you sign in with Apple or Google, we receive the identifier and email those services share with us
• your plan: trial or subscription status and its expiry date
• an anonymous count of how many calendar accounts you use. We store a scrambled token, not the email addresses of your calendar accounts, and we cannot reverse it

3. Linking your devices

If you link devices, each device creates a pair of keys. The private key never leaves the device. CalHive sends your busy times (start, end and the job name) to your other device, encrypted so that only your devices can read them. Our servers hold only the encrypted data and your devices' public keys. We store for each device: a name you choose, the platform (Android or iPhone), its public key, a notification token, the day it was last active, and a log of when devices were added or removed. We can see that your devices exchange data and roughly how much, but not what it contains.

4. Payments

Subscriptions are bought through the Apple App Store or Google Play. They process your payment; we never see your card details. We receive confirmation of your plan and its dates.

5. Service providers

We use Supabase to host sign-in and our database, an email delivery service to send sign-in codes, and Apple and Google for sign-in, notifications and payments. They process data only to provide their service to us. Servers may be located outside your country.

6. What we do not do

• We do not read your calendar events, and we do not sell your data.
• We do not show ads or share data with advertisers.
• We do not edit your meetings, and we do not work around your employer's restrictions.

7. Your choices and deleting your data

• You can remove all Busy blocks CalHive created, and delete CalHive's data on your phone, from Settings
• You can unlink a device at any time, which deletes the encrypted data held for it
• You can delete your account, which removes your plan record, devices, encrypted data and tokens. We keep only a one-way hash of your email so that the free trial cannot be repeated
• You can turn off calendar and notification access in your phone's settings

8. Retention

Encrypted data held for linked devices is replaced each time a device updates and deleted after 60 days without updates. Removed devices are deleted 30 days after removal. Device activity logs are kept for up to one year. Backups may keep deleted data for a short period.

9. Employers and shared devices

If your phone or work profile is managed by an employer, they may be able to see data on it, including CalHive. CalHive does not bypass any restriction your employer sets. Check your organisation's policy before linking a work device.

10. Children

CalHive is not directed at children under 16, and we do not knowingly collect their data.

11. Changes and contact

We will update this page when CalHive's data practices change and change the date above. Questions or requests about your data: [email protected].