Your schedule stays under your control.
This notice explains how Calendar Mate for Android reads and changes calendars, schedules reminders, connects to Microsoft and Mate family apps, handles optional AI requests, stores information on your device, and supports your privacy choices.
1. Scope and key points
This notice applies to Calendar Mate for Android, its widgets, alerts and background work, optional Mate AI, family-app integrations, and this policy website. It does not replace notices from Google, Microsoft, Firebase, Cloudflare, an AI model provider, Android, or the calendar provider that stores and syncs your events.
Calendar Mate has its own policy, separate from Note Mate and Mate Mail. When you deliberately share calendar, task, or note information with a Mate family app, the receiving app’s privacy notice also applies. This notice describes the current app behavior and will be updated if material features or processors change.
2. Who operates Calendar Mate
Calendar Mate is operated by Shreyas Links (“we,” “us,” or “our”). For privacy questions, rights requests, deletion requests, or complaints, contact shreyaslinks00008@gmail.com. Use the subject “Calendar Mate privacy” and describe the account or feature concerned. Do not send passwords, access tokens, or unnecessary event details.
Where privacy law uses the term, Shreyas Links acts as the controller/business for information it determines how to process for the app and its services. Google, Microsoft, or another calendar account provider independently handles events stored in its service and determines its own processing. We do not control a calendar provider’s account, synchronization, backups, or retention.
We do not publish a separate postal address or name a Data Protection Officer in this notice. If applicable law requires a local representative, DPO, or additional contact details for a particular processing activity, those details will be provided through the relevant channel.
3. Information processed
| Information | Examples | Where it comes from |
|---|---|---|
| Account and connection | Microsoft email/profile identifier, authorization state, family-account identifier and sign-in token when using AI or family services. | You, Microsoft sign-in, Firebase Authentication and the connected app state. |
| Calendar events | Event ID, title, description/body, date and time, time zone, recurrence, location text, calendar name, attendees/organizer or response state when the feature/provider supplies them. | Android Calendar Provider or Microsoft Graph after you grant access or connect a Microsoft account. |
| Event and reminder actions | Events you create, edit, move or delete; reminder time and alert state; event identifiers; snooze choices and notification content. | Your actions and local reminder scheduling. |
| Preferences and app data | Work hours, goals, alert preferences, hidden-declined choices, widget settings, onboarding and AI consent state, calendar display settings and local chat history. | Your choices, saved in app-private Android storage. |
| Family-app context | Note Mate task titles, dates and related context; event details or notes you explicitly send to or import from a trusted Mate app. | Only where you use a family integration or invoke a feature that requests relevant context. |
| AI prompt and context | Your prompt, recent conversation turns, selected event details and, when included, Note Mate tasks or preferences that help answer the request. | Only when AI is enabled and you invoke an AI feature. |
| Service and device data | Connectivity, request/response status, provider/model routing, request size, feature usage, rate-limit state and error details needed to operate, secure and troubleshoot a request. | App, Cloudflare Worker, identity and model provider systems when relevant. |
Calendar content may reveal health, religion, relationships, employment, travel, finances or other sensitive matters. Descriptions and attendee lists are user-generated content and can include information about other people. Do not include data in an AI prompt unless you are authorized to share it and comfortable sending it to the AI service providers described below.
Calendar Mate does not request precise device location, contacts, microphone or camera access in the current app manifest. An event may still contain a location typed by you or another attendee. The app reads that text only through the calendar source or context you choose to include.
4. Permissions and calendar access
Device calendars
When you grant Android READ_CALENDAR and/or WRITE_CALENDAR, Calendar Mate reads or changes records through the Android Calendar Provider. It can show events, search or inspect event details, create and edit events, manage reminder/response actions, display upcoming events and schedule alerts. The calendar account (for example, Google or another sync provider) controls whether a device calendar synchronizes elsewhere. Calendar Mate does not receive your Google password through this permission.
Microsoft calendars
If you connect Outlook/Microsoft 365, Calendar Mate uses Microsoft authorization and Microsoft Graph calendar permissions, including profile access and read/write access to calendars (such as User.Read and Calendars.ReadWrite). Microsoft access tokens are encrypted at rest using AES-GCM with an Android Keystore key. Microsoft event details are fetched from Graph over HTTPS and the app keeps the fetched result in memory temporarily (about one minute) to avoid repeated requests; it does not maintain a persistent Microsoft event database.
Disconnecting Microsoft removes the local connection/token information from Calendar Mate. To revoke the authorization grant itself, also remove the app from your Microsoft account’s connected apps/permissions. Changes made through Calendar Mate can update the connected provider and sync to other devices.
Android permissions
- Read/write calendar: show your schedule and carry out event actions you request.
- Notifications: show reminders, briefings and other alerts. A preview can include event title, time and location; Android lock-screen settings decide whether other people can see it.
- Exact alarms: deliver time-sensitive reminders at the selected time when Android permits the app to schedule them. You can manage special alarm access in Android settings.
- Boot completed/background work: restore eligible reminders after a restart or app update and refresh schedules as needed.
- Internet/network state: sign in, access Microsoft Graph and use AI or family services when you request them.
- Widgets: show upcoming event information on your home screen or other launcher surfaces.
Calendar access is optional. Revoking it stops access through Android’s calendar provider and limits schedule-based features. Notification or exact-alarm restrictions can prevent timely alerts. The app does not bypass a denied permission to obtain calendar records through another Android route.
5. Purposes and legal grounds
Where a privacy law requires a legal basis, the basis depends on your location, the feature and the data involved. In jurisdictions such as the EEA/UK, we generally rely on these grounds where applicable:
- Provide the service you request / contract: read the calendar source you select, display your agenda, create or update events, maintain reminders, provide widgets and answer your direct feature requests.
- Your consent or choice: connect an optional Microsoft account, grant Android calendar/notification permissions, enable AI after reviewing its separate disclosure, and choose to share context with a family app. Withdraw an optional choice by disconnecting, revoking permissions, or turning the feature off.
- Legitimate interests, balanced against your rights: secure and operate the service, prevent misuse, troubleshoot failures, enforce limits, and maintain reliable reminders and account access. You may object where the law gives you that right.
- Legal obligations and claims: respond to lawful requests, comply with legal requirements, enforce terms, and establish or defend legal claims.
Calendar information is used to provide the calendar features you request, not for advertising. We do not sell calendar event content or share it for cross-context behavioral advertising. We do not use Google Workspace data or AI request content to train our own generalized AI model. Where a provider or law requires a narrower use, the stricter rule applies.
6. Device storage and security
Calendar records and tokens
Events accessed through Android remain in the Android Calendar Provider and the account that synchronizes it. Microsoft Graph event data is held temporarily in app memory and is not saved as a persistent event cache. The Microsoft access token is stored in app-private preferences in encrypted form using AES-GCM and Android Keystore. The app requests Android backup be disabled.
Reminders, preferences and chat
Calendar Mate stores app settings and reminder state in app-private storage so it can display preferences, restore alarms, render widgets and run scheduled features. Android alarm/work records can contain event identifiers and selected event details needed for a reminder. Notification content and widgets may also display those details. AI conversation history (up to the latest 40 entries) is stored in app-private preferences without additional file-level encryption by Calendar Mate. Starting a new chat can clear the local conversation. These local records are removed when app data is cleared or the app is uninstalled; some queued notifications or Android system records may remain until Android clears them.
Safeguards and limits
Network requests use HTTPS. Android’s app sandbox, Keystore protection for the encrypted Microsoft token, limited in-memory event caching, access controls and disabled backup are intended to reduce exposure. No security measure can guarantee protection from an unlocked, rooted, compromised, shared, or malware-infected device, exposed notification/widget content, screenshots, or a provider incident. Calendar Mate is not an encrypted calendar or secure archive.
7. Mate AI: what is sent and how to control it
Information included in an AI request
When you submit a prompt or invoke an AI feature, the app may send your prompt, feature instructions, up to the latest 10 conversation turns (within per-message limits), selected events, and app settings relevant to the request. Depending on the feature this can include event titles, dates/times, descriptions, locations, calendar names, attendee/response details, the current or upcoming schedule, your work hours or goals, and Note Mate task context for the relevant time period. The AI context builder can include events from the recent day through roughly the next 15 days (up to about 120 items) and relevant task information. The selected data varies by feature and request.
The app sends the request over HTTPS to our Cloudflare Worker, along with a family-account authentication token and app/feature identifiers. The Worker verifies/rate-limits the request and routes it to the configured model provider, currently including Groq for Calendar Mate chat; model routing can change. The selected provider receives prompt/context content to produce a response. Avoid prompts or features that include information you do not want these services to process.
AI storage, use and limitations
Conversation text is kept locally in app-private preferences for continuity (up to the latest 40 entries). Starting a new chat clears the local conversation. The service may record limited operational data such as provider/model, feature, request size, response status, usage/rate-limit information and troubleshooting errors; it is not intended to be a permanent calendar archive. Model providers may process or retain requests under their current terms and settings; this notice does not promise a provider-specific deletion period. The app does not use request content to train our own generalized model. AI responses can be wrong, incomplete or unsafe. Review suggested actions before applying them; create, update or delete actions require your confirmation in the app.
8. Recipients and integrations
- Android Calendar Provider and calendar account provider: receives or returns event operations through the device calendar. If the source calendar syncs with Google, Microsoft or another provider, that provider handles synchronization and its own processing.
- Microsoft: provides account sign-in and Microsoft Graph calendar APIs when you connect Outlook; it receives the Graph requests required to read or change events.
- Cloudflare: hosts the AI proxy and this policy page. The Worker receives AI request content, authenticates and rate-limits the request, routes it to the model provider, and records limited operational information. Cloudflare may process technical information to operate and secure its services.
- AI model provider: currently configured providers such as Groq process the prompt and context to generate a response. Their retention and processing terms can change; review current provider terms before enabling AI.
- Firebase: Firebase Authentication supports the Mate family account and issues the authentication token used by family AI services. Firebase may process account, device and authentication metadata under its own terms.
- Note Mate and Mate Mail: a signature-protected family integration can provide Note Mate tasks or pass event/task information when you use the connected feature. The receiving app’s separate privacy notice applies.
- Android and launcher apps: Android handles notifications, alarms, widgets and background scheduling. Widget/notification content may be visible to a person with access to your device or screen.
We use service providers to deliver or secure features you request and do not authorize them to sell calendar content or use it for their own advertising. We may disclose information where necessary to comply with law, protect users or services, investigate abuse, or handle a business transfer, subject to applicable legal requirements.
9. Reminders, widgets and other features
Alerts and snooze
Calendar Mate schedules event alerts locally through Android alarm/background services. It can restore eligible alerts after restart and periodically refresh upcoming event information. A notification can include the event title, time, location and a shortened description; snooze actions can temporarily carry event details needed to reschedule the alert. Android may keep notification content visible until dismissed or cleared. You can adjust reminder settings, disable notifications, revoke exact-alarm access, or clear alerts in Android.
Widgets and briefings
Home-screen widgets and optional briefings can show upcoming event titles, times, locations and calendar names, including multiple upcoming events. A widget may be visible without opening the app. Remove it or change launcher/device visibility settings if other people can view your screen. Local weekly recaps or morning briefings may use calendar data on-device to prepare information for display. They do not send that content to AI unless you separately enabled AI and invoke a feature that transmits context.
Calendar and family actions
When you ask Calendar Mate to create, edit, respond to or delete an event, it sends the action to the selected calendar source. Imported Note Mate tasks or email-derived event details are handled only through a feature you choose. A change to a synchronized calendar can appear on other devices and to people who have access to that calendar.
10. Retention and deletion
We retain information only as long as needed for the purposes above, unless a longer period is required or permitted by law. Calendar records usually remain with the calendar provider, not in a Calendar Mate server database.
| Data | Typical retention / how to remove |
|---|---|
| Device calendar events | Remain in Android Calendar Provider and the connected calendar account until you or that provider deletes them. Use Calendar Mate or the calendar provider to edit/delete; synchronized changes may propagate. |
| Microsoft event responses | Held in memory temporarily (about one minute) to support the current view. Disconnecting Microsoft removes local connection/token information; it does not delete provider events. |
| Microsoft token | Stored encrypted in app-private preferences until expiry, disconnect, clear app data or uninstall. Revoke the OAuth grant separately in Microsoft account settings. |
| Reminder and app preferences | Kept locally while needed for alerts, widgets and selected settings. Remove reminders or clear app data/uninstall; Android may retain queued notifications/system alarm state briefly. |
| Local AI conversation | Up to the latest 40 entries in app-private preferences. Start a new chat to clear it, or clear app data/uninstall. |
| AI provider processing | Cloudflare and the selected model provider may retain operational data or request content under current terms and configuration. This notice does not promise a fixed provider-side deletion period. |
Uninstalling Calendar Mate does not delete events stored in Android Calendar Provider, Google, Microsoft, or another synced account. To disconnect or revoke account access, use the app’s settings and the relevant provider’s connected-app controls. For an AI request already sent, turn-off or deletion of local history does not erase provider-side copies.
11. Your choices and privacy rights
You can choose which calendar to connect, grant or revoke Android calendar permissions, manage Microsoft connection, adjust reminders and widgets, disable notifications/exact alarms, and turn AI off. You may ask us to access, correct, erase, restrict or explain personal information processed by us, or exercise other rights provided under local law. Where applicable you may object, request portability, withdraw consent, or complain to a data-protection authority.
Send a request to shreyaslinks00008@gmail.com. Include “Calendar Mate privacy request,” your country/region, account email if relevant, the request you want to make, and a way to contact you. We may request proportionate verification to protect the account and respond within the legal deadline. An authorized representative may submit a request where local law allows it.
Calendar events held by Google, Microsoft, Android or another provider must generally be managed with that provider. A request to us cannot automatically delete those event copies, invitations sent to attendees, synchronized devices, or backups outside our control. We may retain information where permitted for legal obligations, security, dispute resolution or completion of a requested feature.
California and other US state rights
Depending on applicable law and eligibility, residents may have rights to know/access, correct, delete, obtain a portable copy, opt out of sale or targeted advertising, limit certain sensitive-data uses, and appeal a denied request. Calendar Mate does not sell calendar content or share it for cross-context behavioral advertising and does not use event details for targeted advertising. We will not discriminate against you for exercising a privacy right. Contact us to submit a request; verification may be required.
India
Where applicable under India’s data-protection framework and its effective provisions, you may have rights to access information about processing, correction and erasure, grievance redressal, and nomination. Contact us through the details above. We will handle requests under the provisions in force at the relevant time and applicable rules.
12. International transfers
Microsoft, Firebase, Cloudflare and AI model providers may process information in countries other than where you live. Laws and protections can differ across countries. Where transfer restrictions apply, we will use a valid transfer mechanism and safeguards required by applicable law, such as an adequacy decision or contractual safeguards, and provide further information on request where required. Provider documentation describes its own processing locations and safeguards.
13. Children
Calendar Mate is a general productivity app and is not designed for children under 13, or below the minimum age for independent consent required in the child’s jurisdiction. We do not knowingly direct the service to children or knowingly collect children’s personal information for independent use. Contact us if you believe a child has provided personal information; we will assess and take appropriate steps. A parent or guardian should supervise any permitted use and calendar account connection.
14. Changes, complaints and contact
We may update this policy to reflect product features, processors, security practices or legal requirements. We will update the effective date and, when a change materially affects processing, provide an appropriate notice in the app, on this page or through another required channel. Continued use does not replace consent if a law requires a separate choice.
For questions or complaints, email shreyaslinks00008@gmail.com. You may also contact your local privacy or data-protection regulator. For a provider’s independent processing, contact Google, Microsoft, Firebase, Cloudflare or the relevant model provider as appropriate.
15. Regional and platform information
We aim to describe current data practices and follow privacy requirements that apply to this service. The laws and platform programs below may apply depending on location, eligibility and distribution. Their inclusion is not a representation that every law applies to every user or that this page alone certifies legal compliance.
- European Union / EEA and UK: transparency, legal bases, individual rights, retention and international-transfer requirements may apply. See the official EU GDPR text.
- India: the Digital Personal Data Protection Act and rules apply as their provisions take effect. See MeitY’s DPDP Rules, 2025.
- California: if the California Consumer Privacy Act applies, additional rights and disclosures may be available. See the California Privacy Protection Agency’s CCPA statute and regulations.
- Microsoft Graph: Microsoft’s permission scopes and data handling are described in the Graph permissions reference and Microsoft Privacy Statement.
- Google calendar data: device calendar access is controlled through Android’s Calendar Provider and its account sync settings. For Google account data used through other Google Workspace APIs, see the Google Workspace user data policy.
A public notice is one part of privacy compliance. Operational measures such as contracts, transfer safeguards, provider configurations, access controls, retention settings and required registrations or assessments must be maintained separately where applicable.