Privacy policy

Last updated: September 10, 2026 · Français

Calendæ is built to respect your privacy: without an account, all your data stays on your device. An account is only needed to sync your data across devices.

1. Data controller

The data controller is ANDRO MEDA (see the legal notice). To exercise your rights or for any question about your data: contact@andro-meda.com.

2. Data we process

• Account (optional): your email address and password (stored hashed, never in clear text).
• Your notebook content: appointments, goals, habits, measurements, tasks and notes you create.
• Connected calendars: the iCal links you add and — if you connect Outlook, iCloud or Google — secure access to read and sync your appointments (changes made in Calendæ may be reflected back in the source calendar, depending on the service). We do not store your passwords.
• Subscription and payment (optional, if you subscribe to Premium): the chosen plan, subscription status, billing history and a payment identifier. Your card details are entered and processed directly by Stripe; we have no access to them and do not store them.
• Minimal technical data required to run the service (service connection logs).

We use no advertising cookies and no third-party profiling trackers.

3. Purposes and legal bases

• Provide the service (calendar, goals, sync) — performance of the contract.
• Manage the Premium subscription and billing — performance of the contract and compliance with our legal obligations (accounting and tax).
• Security, abuse prevention and backups — legitimate interest.
• Connecting third-party services (Outlook, iCloud, Google) — your consent, withdrawable anytime by disconnecting the service.

4. Recipients and processors

• OVHcloud (France, EU) — hosting of servers and database.
• Stripe — only if you subscribe to Premium, to process the subscription payment (PCI-DSS certified provider).
• Microsoft, Google, Apple — only if you connect the corresponding account, to read and sync your appointments through their official interfaces (Microsoft Graph, Google Calendar API, Apple CalDAV/EventKit).

Your data is never sold or shared with third parties for commercial purposes.

5. Hosting and transfers

Your data is hosted in France — OVHcloud's Strasbourg data center (European Union). Connections to Stripe (payment) and Microsoft (Outlook) may involve processing by these providers under their own safeguards, including, where applicable, transfers outside the European Union framed by the European Commission's standard contractual clauses.

6. Retention

• Account and notebook data: kept while your account is active, then deleted on request.
• Invoices and billing data: kept for 10 years (statutory accounting obligation, article L123-22 of the French Commercial Code).
• Login sessions: up to 90 days.
• Backups: kept on a short rolling window, then overwritten.

7. Security

Hashed passwords (scrypt), encrypted connections (HTTPS), restricted server access, regular backups. As no system is infallible, please choose a strong password.

8. Your rights

Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability. Exercise them at contact@andro-meda.com. You may also lodge a complaint with the French authority CNIL (cnil.fr).

9. Cookies and local storage

The app uses your browser's local storage to keep your preferences and, without an account, your notebook — this is technical storage on your device. See the cookie policy.

10. Changes

This policy may change. The last-updated date is shown below.