Your time, kept private.

1Summary in plain words

Calendar Mate is a calendar and planning app for the calendars on your phone and for Outlook. Here is the short version. The rest of this policy gives the details.

What we never do

• Sell your personal information or calendar content.
• Show ads based on your events, or build advertising profiles from them.
• Ask for, see or store your Google or Microsoft password.
• Keep a copy of your calendar on our servers.
• Track your location. Calendar Mate does not request location access.
• Use your events to train AI models.

2Scope and key points

This notice applies to Calendar Mate for Android, its widgets, alerts and background work, optional Mate AI, family-app integrations, and this policy website. It does not replace notices from Google, Microsoft, Firebase, Cloudflare, an AI model provider, Android, or the calendar provider that stores and syncs your events.

Calendar Mate has its own privacy policy, separate from those of Note Mate and Mail Mate. When you deliberately share calendar, task, or note information with a Mate family app, the receiving app’s privacy notice also applies. This notice describes the current app behavior and will be updated if material features or processors change.

3Who operates Calendar Mate

Calendar Mate is operated by Shreyas Links (“we,” “us,” or “our”). For privacy questions, rights requests, deletion requests, or complaints, contact shreyaslinks00008@gmail.com. Use the subject “Calendar Mate privacy” and describe the account or feature concerned. Do not send passwords, access tokens, or unnecessary event details.

Where privacy law uses the term, Shreyas Links acts as the controller/business for information it determines how to process for the app and its services. Google, Microsoft, or another calendar account provider independently handles events stored in its service and determines its own processing. We do not control a calendar provider’s account, synchronization, backups, or retention.

We do not publish a separate postal address or name a Data Protection Officer in this notice. If applicable law requires a local representative, DPO, or additional contact details for a particular processing activity, those details will be provided through the relevant channel.

4Your account: Google or Microsoft

Calendar Mate uses the ShreyasLinks family account, the same sign-in used by every Mate family app. Firebase Authentication, a Google service, verifies who you are. We never see or store your Google or Microsoft password.

Separate accounts, never linked

A Google sign-in and a Microsoft sign-in are always separate family accounts, even when they share an email address. We do not link, merge or match accounts by email. Information in one account is not visible in the other. If you used both in the past, your data stays with the sign-in you used at the time.

Switch account and sign out

Settings › Switch account signs you out on this device and then lets you continue with Google or Microsoft. Signing out removes the family sign-in from the app and stops family features such as Mate AI until you sign in again. Switching or signing out does not delete events from your phone’s calendars or from Outlook. Disconnecting Outlook removes its token from this phone.

Deleting your family account

The family account is shared by the Mate apps, so you delete it in one place: Note Mate › Settings › Account › Delete account. You can also email shreyaslinks00008@gmail.com from the address on the account. Deletion removes the Firebase account and the data we hold for it, as described in the Note Mate policy. It does not delete email or events stored with Google or Microsoft. To delete those, use your provider’s controls. Uninstalling an app does not delete your account.

5Information processed

Calendar content may reveal health, religion, relationships, employment, travel, finances or other sensitive matters. Descriptions and attendee lists are user-generated content and can include information about other people. Do not include data in an AI prompt unless you are authorized to share it and comfortable sending it to the AI service providers described below.

Calendar Mate does not request precise device location, contacts, microphone or camera access in the current app manifest. An event may still contain a location typed by you or another attendee. The app reads that text only through the calendar source or context you choose to include.

6Permissions and calendar access

Device calendars

When you grant Android READ_CALENDAR and/or WRITE_CALENDAR, Calendar Mate reads or changes records through the Android Calendar Provider. It can show events, search or inspect event details, create and edit events, manage reminder/response actions, display upcoming events and schedule alerts. The calendar account (for example, Google or another sync provider) controls whether a device calendar synchronizes elsewhere. Calendar Mate does not receive your Google password through this permission.

Microsoft calendars

If you connect Outlook/Microsoft 365, Calendar Mate uses Microsoft authorization and Microsoft Graph calendar permissions, including profile access and read/write access to calendars (such as User.Read and Calendars.ReadWrite). Microsoft access tokens are encrypted at rest using AES-GCM with an Android Keystore key. Microsoft event details are fetched from Graph over HTTPS and the app keeps the fetched result in memory temporarily (about one minute) to avoid repeated requests; it does not maintain a persistent Microsoft event database.

Disconnecting Microsoft removes the local connection/token information from Calendar Mate. To revoke the authorization grant itself, also remove the app from your Microsoft account’s connected apps/permissions. Changes made through Calendar Mate can update the connected provider and sync to other devices.

Android permissions

• Read/write calendar: show your schedule and carry out event actions you request.
• Notifications: show reminders, briefings and other alerts. A preview can include event title, time and location; Android lock-screen settings decide whether other people can see it.
• Exact alarms: deliver time-sensitive reminders at the selected time when Android permits the app to schedule them. You can manage special alarm access in Android settings.
• Boot completed/background work: restore eligible reminders after a restart or app update and refresh schedules as needed.
• Internet/network state: sign in, access Microsoft Graph and use AI or family services when you request them.
• Widgets: show upcoming event information on your home screen or other launcher surfaces.

Calendar access is optional. Revoking it stops access through Android’s calendar provider and limits schedule-based features. Notification or exact-alarm restrictions can prevent timely alerts. The app does not bypass a denied permission to obtain calendar records through another Android route.

7Phone calendars and Outlook together

Calendar Mate can show the calendars on your phone and your Outlook calendar side by side. Each event keeps the calendar it belongs to, and any change you make is sent back to that calendar.

Short-lived in-memory copy

Outlook events are fetched over HTTPS when you open a view. The result is kept in memory for about 60 seconds to avoid repeated requests, and is not saved to storage. Phone calendar events are read directly from Android each time.

When access expires

If Microsoft access expires, Calendar Mate shows a Reconnect prompt and stops using Outlook until you sign in again. Disconnecting Outlook in Settings › Account deletes the encrypted token from this phone. To fully revoke access, also remove the app in your Microsoft app permissions.

8Purposes and legal grounds

Where a privacy law requires a legal basis, the basis depends on your location, the feature and the data involved. In jurisdictions such as the EEA/UK, we generally rely on these grounds where applicable:

• Provide the service you request / contract: read the calendar source you select, display your agenda, create or update events, maintain reminders, provide widgets and answer your direct feature requests.
• Your consent or choice: connect an optional Microsoft account, grant Android calendar/notification permissions, enable AI after reviewing its separate disclosure, and choose to share context with a family app. Withdraw an optional choice by disconnecting, revoking permissions, or turning the feature off.
• Legitimate interests, balanced against your rights: secure and operate the service, prevent misuse, troubleshoot failures, enforce limits, and maintain reliable reminders and account access. You may object where the law gives you that right.
• Legal obligations and claims: respond to lawful requests, comply with legal requirements, enforce terms, and establish or defend legal claims.

Calendar information is used to provide the calendar features you request, not for advertising. We do not sell calendar event content or share it for cross-context behavioral advertising. We do not use Google Workspace data or AI request content to train our own generalized AI model. Where a provider or law requires a narrower use, the stricter rule applies.

9Device storage and security

Calendar records and tokens

Events accessed through Android remain in the Android Calendar Provider and the account that synchronizes it. Microsoft Graph event data is held temporarily in app memory and is not saved as a persistent event cache. The Microsoft access token is stored in app-private preferences in encrypted form using AES-GCM and Android Keystore. The app requests Android backup be disabled.

Reminders, preferences and chat

Calendar Mate stores app settings and reminder state in app-private storage so it can display preferences, restore alarms, render widgets and run scheduled features. Android alarm/work records can contain event identifiers and selected event details needed for a reminder. Notification content and widgets may also display those details. AI conversation history (up to the latest 40 entries) is stored in app-private preferences without additional file-level encryption by Calendar Mate. Starting a new chat can clear the local conversation. These local records are removed when app data is cleared or the app is uninstalled; some queued notifications or Android system records may remain until Android clears them.

Safeguards and limits

Network requests use HTTPS. Android’s app sandbox, Keystore protection for the encrypted Microsoft token, limited in-memory event caching, access controls and disabled backup are intended to reduce exposure. No security measure can guarantee protection from an unlocked, rooted, compromised, shared, or malware-infected device, exposed notification/widget content, screenshots, or a provider incident. Calendar Mate is not an encrypted calendar or secure archive.

10Mate AI: what is sent and how to control it

Information included in an AI request

When you submit a prompt or invoke an AI feature, the app may send your prompt, feature instructions, up to the latest 10 conversation turns (within per-message limits), selected events, and app settings relevant to the request. Depending on the feature this can include event titles, dates/times, descriptions, locations, calendar names, attendee/response details, the current or upcoming schedule, your work hours or goals, and Note Mate task context for the relevant time period. The AI context builder can include events from the recent day through roughly the next 15 days (up to about 120 items) and relevant task information. The selected data varies by feature and request.

The app sends the request over HTTPS to our Cloudflare Worker, along with a family-account authentication token and app/feature identifiers. The Worker verifies/rate-limits the request and routes it to the configured model provider, currently including Groq for Calendar Mate chat; model routing can change. The selected provider receives prompt/context content to produce a response. Avoid prompts or features that include information you do not want these services to process.

AI storage, use and limitations

Conversation text is kept locally in app-private preferences for continuity (up to the latest 40 entries). Starting a new chat clears the local conversation. The service may record limited operational data such as provider/model, feature, request size, response status, usage/rate-limit information and troubleshooting errors; it is not intended to be a permanent calendar archive. Model providers may process or retain requests under their current terms and settings; this notice does not promise a provider-specific deletion period. The app does not use request content to train our own generalized model. AI responses can be wrong, incomplete or unsafe. Review suggested actions before applying them; create, update or delete actions require your confirmation in the app.

11Planning features that run on your phone

These features use your events and preferences on your device. They do not send your calendar to us or to an AI service.

12Working with Note Mate and Mail Mate

Note Mate, Mail Mate and Calendar Mate are separate apps that can work together. Every app works on its own. Connections happen only between genuine Mate apps on the same device. Android checks that they are signed with the same ShreyasLinks signing key (a signature-level permission), so other apps cannot use these connections.

Calendar Mate owns calendar access and event changes. Note Mate owns notes and tasks. Mail Mate owns mail. Notes linked to a date are stored in Note Mate, not in Calendar Mate.

• Information passes directly between apps on your device, not through our servers. If the other app is not installed, nothing is sent.
• Each app limits the size of what it accepts and keeps the original IDs, so information is never merged with something else just because it looks similar.
• Locked, archived or trashed Note Mate notes are never shared with companion apps.
• When information arrives in another Mate app, that app’s privacy policy applies to it: Note Mate, Mail Mate, Calendar Mate.

13Recipients and integrations

• Android Calendar Provider and calendar account provider: receives or returns event operations through the device calendar. If the source calendar syncs with Google, Microsoft or another provider, that provider handles synchronization and its own processing.
• Microsoft: provides account sign-in and Microsoft Graph calendar APIs when you connect Outlook; it receives the Graph requests required to read or change events.
• Cloudflare: hosts the AI proxy and this policy page. The Worker receives AI request content, authenticates and rate-limits the request, routes it to the model provider, and records limited operational information. Cloudflare may process technical information to operate and secure its services.
• AI model provider: currently configured providers such as Groq process the prompt and context to generate a response. Their retention and processing terms can change; review current provider terms before enabling AI.
• Firebase: Firebase Authentication supports the Mate family account and issues the authentication token used by family AI services. Firebase may process account, device and authentication metadata under its own terms.
• Note Mate and Mail Mate: a signature-protected family integration can provide Note Mate tasks or pass event/task information when you use the connected feature. The receiving app’s separate privacy notice applies.
• Android and launcher apps: Android handles notifications, alarms, widgets and background scheduling. Widget/notification content may be visible to a person with access to your device or screen.

We use service providers to deliver or secure features you request and do not authorize them to sell calendar content or use it for their own advertising. We may disclose information where necessary to comply with law, protect users or services, investigate abuse, or handle a business transfer, subject to applicable legal requirements.

14Reminders, widgets and other features

Alerts and snooze

Calendar Mate schedules event alerts locally through Android alarm/background services. It can restore eligible alerts after restart and periodically refresh upcoming event information. A notification can include the event title, time, location and a shortened description; snooze actions can temporarily carry event details needed to reschedule the alert. Android may keep notification content visible until dismissed or cleared. You can adjust reminder settings, disable notifications, revoke exact-alarm access, or clear alerts in Android.

Widgets and briefings

Home-screen widgets and optional briefings can show upcoming event titles, times, locations and calendar names, including multiple upcoming events. A widget may be visible without opening the app. Remove it or change launcher/device visibility settings if other people can view your screen. Local weekly recaps or morning briefings may use calendar data on-device to prepare information for display. They do not send that content to AI unless you separately enabled AI and invoke a feature that transmits context.

Calendar and family actions

When you ask Calendar Mate to create, edit, respond to or delete an event, it sends the action to the selected calendar source. Imported Note Mate tasks or email-derived event details are handled only through a feature you choose. A change to a synchronized calendar can appear on other devices and to people who have access to that calendar.

15How we protect your information

Security is built into how the app works rather than added on top. The main measures are:

• Encrypted tokens. The Microsoft access token is encrypted with AES-256-GCM, using a key held in Android Keystore.
• No stored copy of Outlook. Outlook events are held only in memory, briefly, and are not saved to storage.
• No passwords. Sign-in happens on Google’s or Microsoft’s own page. Calendar Mate never sees your password.
• HTTPS everywhere. All network traffic to Microsoft, Firebase and our AI service uses HTTPS.
• Backup disabled. Android cloud backup is turned off for app data.
• Signed family connections. Other Mate apps can connect only if they are signed with the ShreyasLinks key. Locked Note Mate notes are never shared.
• Least access. The app asks for only calendar, notification, alarm and network permissions. It does not access location, contacts, camera, microphone or files.

No system is perfectly secure. If we learn of a security incident that affects your personal information, we will notify you and the relevant authorities when the law requires it.

16Data safety summary

This table summarises what the app handles, using the categories Google Play asks developers to disclose. “Leaves the device” means the data is sent off your phone, for example to your email provider or to the AI service when you use AI. “Stored by us” means we keep it on servers we control.

Calendar Mate does not include advertising or analytics SDKs. Data in transit is encrypted with HTTPS. You can ask us to delete data we hold (see “Your choices and privacy rights”).

17Retention and deletion

We retain information only as long as needed for the purposes above, unless a longer period is required or permitted by law. Calendar records usually remain with the calendar provider, not in a Calendar Mate server database.

Uninstalling Calendar Mate does not delete events stored in Android Calendar Provider, Google, Microsoft, or another synced account. To disconnect or revoke account access, use the app’s settings and the relevant provider’s connected-app controls. For an AI request already sent, turn-off or deletion of local history does not erase provider-side copies.

18Your choices and privacy rights

You can choose which calendar to connect, grant or revoke Android calendar permissions, manage Microsoft connection, adjust reminders and widgets, disable notifications/exact alarms, and turn AI off. You may ask us to access, correct, erase, restrict or explain personal information processed by us, or exercise other rights provided under local law. Where applicable you may object, request portability, withdraw consent, or complain to a data-protection authority.

Send a request to shreyaslinks00008@gmail.com. Include “Calendar Mate privacy request,” your country/region, account email if relevant, the request you want to make, and a way to contact you. We may request proportionate verification to protect the account and respond within the legal deadline. An authorized representative may submit a request where local law allows it.

Calendar events held by Google, Microsoft, Android or another provider must generally be managed with that provider. A request to us cannot automatically delete those event copies, invitations sent to attendees, synchronized devices, or backups outside our control. We may retain information where permitted for legal obligations, security, dispute resolution or completion of a requested feature.

California and other US state rights

Depending on applicable law and eligibility, residents may have rights to know/access, correct, delete, obtain a portable copy, opt out of sale or targeted advertising, limit certain sensitive-data uses, and appeal a denied request. Calendar Mate does not sell calendar content or share it for cross-context behavioral advertising and does not use event details for targeted advertising. We will not discriminate against you for exercising a privacy right. Contact us to submit a request; verification may be required.

India

Where applicable under India’s data-protection framework and its effective provisions, you may have rights to access information about processing, correction and erasure, grievance redressal, and nomination. Contact us through the details above. We will handle requests under the provisions in force at the relevant time and applicable rules.

19International transfers

Microsoft, Firebase, Cloudflare and AI model providers may process information in countries other than where you live. Laws and protections can differ across countries. Where transfer restrictions apply, we will use a valid transfer mechanism and safeguards required by applicable law, such as an adequacy decision or contractual safeguards, and provide further information on request where required. Provider documentation describes its own processing locations and safeguards.

20Children

Calendar Mate is a general productivity app and is not designed for children under 13, or below the minimum age for independent consent required in the child’s jurisdiction. We do not knowingly direct the service to children or knowingly collect children’s personal information for independent use. Contact us if you believe a child has provided personal information; we will assess and take appropriate steps. A parent or guardian should supervise any permitted use and calendar account connection.

21Changes, complaints and contact

We may update this policy to reflect product features, processors, security practices or legal requirements. We will update the effective date and, when a change materially affects processing, provide an appropriate notice in the app, on this page or through another required channel. Continued use does not replace consent if a law requires a separate choice.

For questions or complaints, email shreyaslinks00008@gmail.com. You may also contact your local privacy or data-protection regulator. For a provider’s independent processing, contact Google, Microsoft, Firebase, Cloudflare or the relevant model provider as appropriate.

22Regional and platform information

We aim to describe current data practices and follow privacy requirements that apply to this service. The laws and platform programs below may apply depending on location, eligibility and distribution. Their inclusion is not a representation that every law applies to every user or that this page alone certifies legal compliance.

• European Union / EEA and UK: transparency, legal bases, individual rights, retention and international-transfer requirements may apply. See the official EU GDPR text.
• India: the Digital Personal Data Protection Act and rules apply as their provisions take effect. See MeitY’s DPDP Rules, 2025.
• California: if the California Consumer Privacy Act applies, additional rights and disclosures may be available. See the California Privacy Protection Agency’s CCPA statute and regulations.
• Microsoft Graph: Microsoft’s permission scopes and data handling are described in the Graph permissions reference and Microsoft Privacy Statement.
• Google calendar data: device calendar access is controlled through Android’s Calendar Provider and its account sync settings. For Google account data used through other Google Workspace APIs, see the Google Workspace user data policy.

A public notice is one part of privacy compliance. Operational measures such as contracts, transfer safeguards, provider configurations, access controls, retention settings and required registrations or assessments must be maintained separately where applicable.

23Quick answers

24Terms used in this policy

Family account

The ShreyasLinks sign-in shared by Note Mate, Mail Mate and Calendar Mate. A Google sign-in and a Microsoft sign-in are always separate family accounts.

Calendar Provider

Android’s built-in calendar store, which holds the calendars synced by the accounts on your phone.

Microsoft Graph

Microsoft’s API that Calendar Mate uses to read and change your Outlook calendar.

Exact alarm

An Android permission that lets reminders fire at a precise time.

Android Keystore

A secure Android facility that holds encryption keys so other apps cannot extract them.

Cloudflare Worker

Our small server program that checks your sign-in, applies usage limits and forwards AI requests to the model provider.