Family Calendar

Privacy Policy

Last updated: September 2026

1. What data we collect

When you use Family Calendar we collect and store the following data on our private server:

Family name (chosen by you at registration)
A hashed (bcrypt) version of your passkey — the original passkey is never stored
Appointments you create: title, notes, start and end time, recurrence settings, attendees and an optional location (place name, address and map coordinates) that you choose to add
Participant names and colour preferences
A session token (stored as a SHA-256 hash) to keep you signed in
When a new family is registered: a keyed hash of the IP address the request came from — never the address itself — kept for 24 hours to stop automated sign-ups, then deleted

We do not access your device's GPS or location services, and we do not collect your real name, email address, phone number or any device identifiers. Any location attached to an appointment is one you enter yourself.

2. How we use your data

Your data is used solely to provide the Family Calendar service — displaying and synchronising your family's appointments across devices.

We do not use your data for advertising, analytics, profiling or any purpose other than operating the app.

3. Data sharing

We do not sell, rent or share your data with any third party. Your data is stored on a private server and is not accessible to other families or users.

One exception: when you search for a location to attach to an appointment, the text you type is sent to the third-party geocoding service Photon (operated by Komoot, photon.komoot.io) so we can show matching places and their map coordinates. Only the text you enter in the location search box is sent — it is not linked to your family account or any other data. If you do not use the location search, nothing is sent.

4. Data retention

Your data is retained for as long as your family account is active. You can delete your appointments and participants at any time from within the app. You can also permanently delete your entire account — including all appointments, participants and reminders — at any time via Delete account in the app or the web app. This removes all of your data immediately and cannot be undone. Alternatively, you can request deletion at the email address below.

5. Security

Passkeys are stored as bcrypt hashes. Session tokens are stored as SHA-256 hashes. All communication between the app and the server uses HTTPS.

6. Children

This app is intended for general family use. We do not knowingly collect data from children under 13 independently — the app is designed to be used by a family unit under parental supervision.

7. Changes to this policy

If we make material changes to this policy we will update the "Last updated" date above. Continued use of the app after changes constitutes acceptance.

8. Contact

For questions or data deletion requests: fc@loodewijk.com