Privacy policy

Last updated: September 9, 2026 · Français

Calendæ is built to respect your privacy: without an account, all your data stays on your device. An account is only needed to sync your data across devices.

1. Data controller

The data controller is ANDRO MEDA (see the legal notice). To exercise your rights or for any question: contact / DPO email — to complete.

2. Data we process

• Account (optional): your email address and password (stored hashed, never in clear text).
• Your notebook content: appointments, goals, habits, measurements, tasks and notes you create.
• Connected calendars: the iCal links you add and — if you connect Outlook — a secure access token to read and edit your appointments. We do not store your Microsoft password.
• Minimal technical data required to run the service (service connection logs).

We use no advertising cookies and no third-party profiling trackers.

3. Purposes and legal bases

• Provide the service (calendar, goals, sync) — performance of the contract.
• Security, abuse prevention and backups — legitimate interest.
• Connecting third-party services (Outlook, iCloud, Google) — your consent, withdrawable anytime by disconnecting the service.

4. Recipients and processors

• OVHcloud (France, EU) — hosting of servers and database.
• Microsoft — only if you connect your Outlook account, to read/write your appointments via the Microsoft Graph API.

Your data is never sold or shared with third parties for commercial purposes.

5. Hosting and transfers

Your data is hosted in France (European Union) with OVHcloud. Connecting Outlook involves processing by Microsoft under its own safeguards (framed transfer mechanisms where applicable).

6. Retention

• Account and notebook data: kept while your account is active, then deleted on request.
• Login sessions: up to 90 days.
• Backups: kept on a short rolling window, then overwritten.

7. Security

Hashed passwords (scrypt), encrypted connections (HTTPS), restricted server access, regular backups. As no system is infallible, please choose a strong password.

8. Your rights

Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability. Exercise them at email — to complete. You may also lodge a complaint with the French authority CNIL (cnil.fr).

9. Cookies and local storage

The app uses your browser's local storage to keep your preferences and, without an account, your notebook — this is technical storage on your device. See the cookie policy.

10. Changes

This policy may change. The last-updated date is shown below.