Calendar Scheduler (“the App”) turns a photo of your schedule into events on your Google Calendar. This policy explains exactly what Google user data the App accesses, how it is used, who it is shared with, how it is protected, and how long it is kept.
1. Data we access
The App accesses the following Google user data, and nothing else:
- Basic profile information (via the
openid, email, and profile scopes) — your name, email address, and profile picture. Used to sign you in and show who is signed in. - Google Calendar events (via the
calendar.events scope). The App uses this permission in three specific ways:- Creating events — adding the shifts you approve to your primary calendar.
- Reading your upcoming events — the App reads the next few events on your primary calendar (title, date, and time) to display them in the “Your calendar” panel, so you can see new shifts appear after an import. This read includes events the App did not create.
- Checking for duplicates — before adding a shift, the App checks whether it already added an identical one, so re-uploading the same photo does not double-book you.
The App never modifies or deletes events, and never accesses any calendar other than your primary one.
The App also processes content you provide directly: the schedule photos you upload, and any optional text hint you type into the “Shared schedule?” field to identify your own shifts. These are your own content, not Google user data.
The App does not access any other Google service, and does not create aggregated or anonymized derivatives of your Google user data.
2. How we use your data
- Your profile information is used solely to authenticate you and display your identity in the App.
- Calendar access is used solely to deliver the App’s core function: adding schedule events you have reviewed and approved, showing your upcoming events back to you, and avoiding duplicate entries.
- Uploaded photos are used solely to extract the dates, times, and titles shown to you for review.
Your data is never used for advertising, profiling, credit or lending decisions, or resale. Nothing is added to your calendar without your explicit confirmation on the review screen.
3. Data we share
We do not sell your data, and we do not share it with data brokers, advertisers, or any third party for their own purposes. Data is shared only with the service providers required to operate the App:
- Google Gemini API — receives the schedule photo you upload and your optional text hint, in order to extract event details. No Google Calendar data and no profile information is ever sent to Gemini — only the image you chose to upload.
- Google Calendar API — receives the events you approve, so they can be written to your calendar.
- Hosting and database providers — the App runs on Vercel and stores account records in a hosted PostgreSQL database. These providers process data only to run the service on our behalf.
4. How we protect your data
- All traffic is encrypted in transit over HTTPS.
- Google OAuth tokens are stored server-side in our database and are never exposed to the browser or included in any page the App serves.
- Calendar requests are made server-side only; your tokens are never handed to client-side code.
- Access to the database and to API credentials is restricted to the App’s maintainer.
- The App requests the narrowest Google permission that supports its features, and requests no additional scopes.
5. Data retention and deletion
- Uploaded photos are not retained. Your image is held in memory only for the length of the request needed to read it, and is never written to disk or to our database.
- Extracted events are not retained. They exist only in your browser during review; after you confirm, they live in your Google Calendar, not with us.
- Account records are retained — your user record (name, email, profile picture), Google OAuth tokens, and session records are kept for as long as your account is connected, so you stay signed in and the App can reach your calendar.
To delete your data: revoke the App’s access from your Google Account permissions page, which immediately ends the App’s ability to reach your calendar. To also erase your stored account record and tokens from our database, email 9cguizar2004@gmail.com and we will delete them within 30 days. Events already added to your calendar belong to you and can be removed in Google Calendar at any time.
6. Limited Use compliance
Calendar Scheduler’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, regarding artificial intelligence and machine learning: Google Workspace API data (including all Google Calendar data) is never used to develop, improve, or train any generalized AI/ML model, and is never transferred to any third-party AI/ML service. The only data sent to an AI model is the schedule photo you choose to upload, which is your own content and is not obtained from any Google Workspace API.
7. Children’s privacy
The App is not directed at children under 13, and we do not knowingly collect data from them.
8. Changes to this policy
We may update this policy as the App changes. The effective date above will be updated when we do.