Privacy Policy

1. Principles

The App handles only what is needed to display and edit your calendars and tasks. We do not collect or store your data on Caltimate servers, and we never use it for advertising or sell it. The one exception is the Zoom access token when you use the Zoom integration, handled as described under “Zoom access token” below.

2. Information we access

• Google Calendar data: events and calendar lists of the accounts you connect, to display, create, edit and delete events.
• Apple Reminders (optional): read, create and complete reminders, only if you enable the tasks feature.
• Microphone audio (optional): used only during voice entry, transcribed by macOS speech recognition.
• Location (optional): used only to show local weather. The App works without it.
• Profile info: your Google account name and avatar may be fetched for the greeting display.

3. Where data lives

Events and tasks are stored by Google and Apple (on device) respectively. Sign-in tokens are kept in the macOS Keychain, and app settings and background images are kept in your account's Application Support folder on your Mac. None of this is uploaded to external servers by the App.

4. How we protect your data

Security measures are in place to protect the confidentiality of the information the App handles, including the Google user data it accesses.

• Encrypted connections: all communication with Google, Apple and the weather provider uses HTTPS (TLS). The App sends no user data over unencrypted connections.
• Encrypted storage of credentials: the tokens that let the App reach your Google account are stored in the macOS Keychain, which the operating system encrypts and unlocks with your login password. Only Caltimate, identified by its Apple code signature, can read them.
• Zoom access token: only if you turn on the Zoom integration, the access token Zoom issues is encrypted and kept on our server. It is used only to create and delete meetings and to confirm the email address of the connected Zoom account. It is deleted as soon as you click Disconnect, and tokens left unused for 120 days are deleted automatically.
• No copy on our servers: we run no service that stores your calendar or task data, so there is no central database of user data to be breached. Your information stays in your Google account, in Apple Reminders on your Mac, and on the Mac itself, where macOS account permissions and FileVault disk encryption apply.
• Verified builds: every release is signed with our Apple Developer ID and notarized by Apple, so macOS checks that the App has not been altered before it runs.
• Least privilege: we request only the narrowest OAuth scopes each feature needs, and we never use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
• Revocable at any time: disconnecting an account destroys its stored credentials immediately, as described in "Deleting your data" below.

5. Sharing with third parties

We do not share or sell your information. Network traffic occurs only with the services required for features to work: Google, Apple, and the weather provider.

6. Permissions and scope

• Calendar: read and write Google Calendar (OAuth calendar scope).
• Reminders: only if you enable tasks.
• Microphone & speech recognition: only if you use voice entry.
• Location: only if you use the weather display.
• Notifications: for event alerts and time-to-leave reminders.

Caltimate's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Cookies & analytics

The App itself runs no analytics. The website (caltimate.com) and the booking page may use cookies only to the minimum extent required to display and operate.

8. About the scheduling page

The scheduling page (book.caltimate.com) uses the name and email address a guest enters to confirm the booking and send the invitation. They are used for creating that event and nothing else.

9. Deleting your data

Disconnect an account from the sidebar and its tokens on your Mac are destroyed. You can also revoke the App's access at any time from your Google account security settings.

10. Changes to this policy

When we change this policy we will update the date above, and announce significant changes clearly.

11. Contact

For questions about this policy, please use the contact form.