Privacy policy

The waitlist

If you join the waitlist, we keep your email address and when you joined, to tell you when Timeless Calendar is ready. New addresses reach us in short notification emails sent through Resend. To stop abuse, the server also keeps a keyed hash of the IP address each signup came from, never the address itself, for one day. Write to the address below to be removed from the list.

Google data the app uses

When you sign in with Google, you choose to give Timeless Calendar two permissions:

• See your calendars (calendar.readonly): to show your events and to find your free time.
• Change your events (calendar.events): to create, move, edit and delete events when you ask, and to book a meeting you confirmed.

The app never changes your calendar on its own. Each change starts with something you did, and the server keeps a record of every change it makes to Google.

What stays on your Mac

The desktop app keeps a copy of your calendars and events on your Mac, so it opens fast and works offline. It keeps your Google sign-in in the macOS Keychain. This data does not leave your Mac, except as described below.

What the server keeps

If you connect Timeless Calendar's server, it keeps:

• your Google account address and the permissions you granted;
• a key that lets it read your calendar, encrypted, with the encryption keys stored apart from the database;
• the list of your calendars and their time zones;
• an index of your events: start and end times, title, whether the event makes you busy, and the kind of event. It never stores event descriptions or attachments;
• holds and bookings you made through the app, and a record of every change it made to Google.

The server uses this to answer when you are free and to book meetings while your laptop is closed. It reads from Google again every few minutes, and when Google says your calendar changed.

Error reports

When the desktop app hits an error, it sends a report to Sentry so we can fix it. Before a report leaves your Mac, the app replaces error messages and removes event titles, descriptions, locations, attendees, organizers, email addresses and calendar addresses. A report can still hold technical details such as times and internal ids. Sentry does not store your IP address.

Who we share it with

We do not sell your data, show you ads, or use your Google data to train AI models.

These services run Timeless Calendar and process data only on our behalf:

• Supabase: the database and sign-in (United States).
• Vercel: this website and the server's web requests.
• Trigger.dev: the background jobs that read your calendar from Google. Events pass through these jobs while they are indexed; Trigger.dev keeps only ids and job records.
• Sentry: error reports, as described above.
• Resend: the emails that tell us about new waitlist signups.

Timeless Calendar's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Download or delete your data

Go to your account page to download your data from the server (your account, calendars, event index, holds and the record of changes), or to delete all of it. Deleting your account stops all syncing, asks Google to revoke Timeless Calendar's access, and removes your data from the server, including its key to your calendar. Your Google Calendar itself stays as it is.

If a booking you started is still being written to Google, the server first makes sure it cannot land later. While it waits for that, your account is marked as deleted, nothing new happens for it, and the server keeps your data and its key until the deletion finishes: usually within a few hours, and never longer than 7 days. If Google cannot be reached to revoke access, the server still deletes its key, but Google may keep showing Timeless Calendar as connected. To be certain, also remove its access in your Google account settings. You can do that at any time.

Contact

Questions about this policy or your data: naitik@timelesscalendar.com.