Privacy Policy

Information We Collect

We collect several types of information to provide and improve our Service.

1. Account Information

When you create an account, we collect:

• Email address (from Google Sign-In or direct registration)
• Name (as provided during registration or from your Google profile)
• Profile picture (if provided or imported from Google)
• Password (encrypted, if using email/password authentication)

2. Family Information

To provide our family calendar coordination features, we collect:

• Family name and household information
• Family member names and relationships (e.g., parent, child, spouse)
• Display colors assigned to each family member
• User roles within the family (admin/member permissions)

3. Google Calendar Data

When you connect your Google Calendar to HomeCalendar, we access and collect:

• Calendar event titles, descriptions, dates, times, and locations
• Calendar names and identifiers
• Event attendee information (for coordination purposes)
• Recurring event patterns
• Event reminders and notification preferences

4. Usage Data

We automatically collect information about how you interact with our Service:

• Pages visited and features used
• Date and time of your visits
• Time spent on pages
• Actions taken (e.g., creating events, viewing calendar)

5. Device and Technical Information

• Device type (mobile, desktop, tablet)
• Operating system and version
• Browser type and version
• IP address
• Time zone settings

How We Use Your Information

Service Provision

• Display your calendar events alongside family members' events in a unified view
• Sync events between HomeCalendar and Google Calendar in both directions
• Coordinate family schedules by showing who is available and when
• Detect scheduling conflicts among family members
• Send event reminders and notifications you have requested
• Display announcements on the kitchen display feature

Account Management

• Create and manage your account
• Authenticate your identity using AWS Cognito
• Process subscription payments through our payment provider
• Communicate with you about your account, billing, and service updates

Service Improvement

• Analyze usage patterns to improve features and user experience
• Debug and fix technical issues
• Develop new features based on how the Service is used

Google Calendar Data: Specific Disclosures

What Google Calendar Data We Access

How We Store Google Calendar Data

• Temporary caching: Calendar events are cached in our secure database to improve performance
• Encryption at rest: All cached event data is encrypted using AES-256 encryption
• Encryption in transit: All data transfers use HTTPS/TLS encryption
• Token security: Google OAuth refresh tokens are stored in AWS Secrets Manager with encryption
• Access tokens: Short-lived access tokens (1 hour) exist only temporarily in memory

Your Control Over Google Calendar Access

You can revoke HomeCalendar's access to your Google Calendar at any time:

1. Within HomeCalendar: Go to Settings > Connected Accounts > Disconnect Google Calendar
2. Via Google: Visit Google Account Permissions and remove HomeCalendar

Information Sharing and Disclosure

With Family Members

Calendar events and availability are shared with family members you explicitly invite to your HomeCalendar family. You control what information other family members can see through privacy settings.

With Service Providers

We use trusted third-party services to operate HomeCalendar:

• Amazon Web Services (AWS): Cloud infrastructure, database hosting, authentication
• Google: Calendar API integration
• Payment processor: Subscription billing

Legal Requirements

We may disclose your information if required to comply with a subpoena, court order, or legal process, respond to lawful requests from government authorities, or protect the rights, property, or safety of HomeCalendar, our users, or others.

Data Security

We implement robust security measures to protect your information:

Technical Safeguards

• Encryption in transit: All connections use HTTPS/TLS 1.2 or higher
• Encryption at rest: Data stored in databases is encrypted using AES-256
• Token security: OAuth tokens are stored in AWS Secrets Manager with IAM access controls
• API security: All API endpoints require JWT authentication
• Rate limiting: Protection against brute force and denial-of-service attacks

Multi-Tenancy Isolation

All database queries are scoped to your family. One family cannot access another family's data. Data isolation is enforced at the application and database level.

Data Retention

We retain your information for as long as necessary to provide the Service:

Account Deletion

When you delete your account, your data enters a 30-day grace period (in case you change your mind). After 30 days, all personal data is permanently deleted. Legal records (payments, audit logs) are retained per legal requirements.

Your Rights and Choices

Access and Portability

• Access your data: View all personal information we have about you
• Export your data: Request a copy of your data in a portable format

To exercise these rights, contact support@webettermove.com.

Correction and Deletion

• Correct inaccurate data: Update your profile information in Settings
• Delete your data: Delete your account in Settings > Account > Delete Account

California Residents (CCPA Rights)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete, and the right to non-discrimination.

European Residents (GDPR Rights)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right of access, right to rectification, right to erasure, right to restrict processing, right to data portability, right to object, and right to withdraw consent.

Children's Privacy

HomeCalendar is a family calendar service that may include children's names and schedules as part of family coordination.

Age Requirements

• Account creation: You must be at least 13 years old to create a HomeCalendar account
• COPPA compliance: We do not knowingly collect personal information directly from children under 13
• Family member profiles: Parents/guardians may add children's names and schedules to the family calendar

Information About Children

The only information we store about children in a family is:

• First name (as entered by the parent)
• Assigned color for calendar display
• Role designation (e.g., "child")
• Calendar events associated with that family member

We do not collect: Children's email addresses, birthdates, photos, or other personal identifiers unless voluntarily entered by the parent into event descriptions.

Cookies and Tracking Technologies

Your Cookie Choices

• Browser settings: Block or delete cookies in your browser preferences
• Do Not Track: We honor Do Not Track browser signals
• Opt-out tools: Use analytics opt-out browser extensions

International Data Transfers

HomeCalendar is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States.

We use the following safeguards for international transfers: Standard Contractual Clauses (for EEA transfers), AWS compliance certifications (SOC 2, ISO 27001), and encryption for data in transit and at rest.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

1. We will update the "Last Updated" date at the top of this page
2. For significant changes, we will notify you via email and/or in-app notification

Your continued use of HomeCalendar after changes become effective constitutes acceptance of the revised Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

For data protection inquiries specifically related to GDPR, please include "GDPR Request" in your subject line.