In effectEffective from

Contents
  1. Information We Collect
  2. How We Use Information
  3. Data Storage and Security
  4. Third-Party Disclosures
  5. Account Deletion and Data Retention
  6. Your Privacy Rights
  7. Age Requirements and Children’s Privacy (13+)
  8. Modifications to This Privacy Policy
  9. Contact and Privacy Inquiries

Privacy Policy

Our commitment to protecting your data and respecting your privacy in CozyCalendar

Welcome to CozyCalendar. We recognize that privacy and the confidentiality of your personal calendar data are of utmost importance. This Privacy Policy outlines clearly how we collect, use, store, protect, and handle your information across our Android and iOS applications, as well as associated web platforms.

By downloading, installing, or accessing CozyCalendar, you acknowledge and agree to the information practices described in this policy. If you do not agree with any part of this policy, please discontinue using the service.

Information We Collect

We adhere strictly to data minimization, gathering only what is required to offer you a seamless calendar and scheduling experience.

CozyCalendar is built around the principle of data minimization. Providing account credentials and syncing calendar schedules are entirely optional. Users can fully utilize the application offline or in Guest Mode without transmitting personal details off their devices.

Depending on how you actively interact with CozyCalendar, we collect the following categories of information:

  • Account Authentication Details. When creating an account via Email, Sign in with Apple, or Google, we collect your email address, display name, and avatar image. If using Guest Mode (Anonymous), you can use the app without providing any personal identifiable information.
  • Calendar and Event Data. Includes event titles, start/end dates and times, notes, locations, reminder notifications, and custom color categorizations you configure.
  • Friends and Social Scheduling Data. When using the friendship features, an 8-character unique Friend Code is generated. We record friend requests and friendship relationships to enable shared event features with your consent.
  • Technical and Device Information. Operating system details (Android/iOS), app version, device language, and push notification tokens used solely for delivering scheduled event reminders.

How We Use Information

Your information is utilized solely for lawful and transparent service operations.

We never sell, rent, or monetize your personal calendar data to third-party advertisers. We use collected data strictly for:

  • Powering core calendar operations: creating, displaying, scheduling, and alerting event alarms.
  • Synchronizing your schedule seamlessly across all your signed-in devices (Android, iOS, Web).
  • Facilitating friend connections and joint calendar interactions initiated by you.
  • Transmitting essential security alerts, account status notices, and customer support communications.
  • Preventing unauthorized activities, system abuse, and safeguarding security integrity.

Data Storage and Security

CozyCalendar enforces industry-standard cryptographic protection on both devices and backend infrastructure.

Data security is rooted deeply into our mobile architecture and server infrastructure:

  • Android Security Architecture. Session tokens are encrypted using hardware-backed AES-GCM via the Android Keystore system and isolated in noBackupFilesDir DataStore storage.
  • iOS Security Architecture. Tokens are safeguarded inside the Apple Keychain with AfterFirstUnlockThisDeviceOnly access controls. Local persistent storage is handled by GRDB SQLite.
  • Transmission and Database Encryption. All client-server network requests require TLS 1.3 encryption over HTTPS. Backend PostgreSQL databases operate behind firewalls with automated encryption and backups.

Third-Party Disclosures

We enforce strict boundaries against unwarranted third-party data sharing.

We do not disclose your personal details to outside parties, except in the specific circumstances below:

  • Authentication Partners. When authenticating via Apple or Google, identity verification proceeds according to their respective official SDK protocols and privacy guarantees.
  • Cloud Infrastructure Providers. Data is hosted on certified cloud providers conforming to SOC 2 and ISO/IEC 27001 data governance certifications.
  • Legal and Compliance Mandates. We disclose records only where formally required by applicable law, search warrants, or court orders.

The app also uses the following Google Firebase services to understand how the app is used and to fix crashes. They process data on our behalf:

Google Analytics for Firebase

Used to understand how the App is used (anonymous usage events, device information). See the Google Analytics for Firebase privacy policy.

Firebase Crashlytics

Used to collect crash reports so we can fix bugs (crash logs, device state). See the Firebase Crashlytics privacy policy.

Account Deletion and Data Retention

You hold the unreserved right to permanently purge your account and records anytime.

We believe users should always remain in total command of their digital footprint. Our deletion flow is safe and definitive:

  • Initiating Deletion Inside the App. You can trigger complete account deletion directly from the Settings screen inside CozyCalendar.
  • 30-Day Reversible Grace Window. Upon requesting deletion, your sessions are terminated immediately and your profile is masked from other users. You have a 30-day grace period to restore your account simply by signing back in.
  • Instant Purge for Guest Accounts. Anonymous guest accounts are purged immediately upon request without any grace delay.
  • Permanent Cascading Removal. After 30 days, all user records, calendar entries, friendship links, and friend codes are permanently and irrevocably wiped via database cascading deletion.

Your Privacy Rights

Your fundamental rights under GDPR, CCPA, and global privacy standards.

In accordance with statutory privacy frameworks worldwide, you are entitled to the following rights:

  • Right to access and inspect all personal data we hold about your profile.
  • Right to rectify and correct any inaccurate or outdated records.
  • Right to erasure (‘Right to be forgotten’) and account purging.
  • Right to restrict or object to specific data processing actions.
  • Right to withdraw consent at any given moment.

Age Requirements and Children’s Privacy (13+)

Our dedicated policy regarding age eligibility and child privacy protection.

CozyCalendar is designed and intended for users aged 13 and older (including teenagers aged 13–17 and adults aged 18 and over). The application is not directed to children under 13 years of age, and we do not participate in Google Play’s Designed for Families program.

We do not knowingly solicit, collect, or maintain personally identifiable information from children under 13, in strict adherence to the Children’s Online Privacy Protection Act (COPPA), GDPR, and relevant privacy statutes.

For users between 13 and 17 years of age, we recommend that a parent or legal guardian reviews and approves their account registration and online calendar sharing activities.

If a parent or guardian becomes aware that a child under 13 has submitted personal information to CozyCalendar, please contact us promptly at privacy@trongnc.com so we can permanently purge the data from our servers.

Modifications to This Privacy Policy

How we inform you of revisions or operational updates.

We may revise this Privacy Policy periodically to reflect app improvements, security enhancements, or legal directives.

Whenever material modifications occur, we will update the ‘Last Updated’ indicator and post prominent notices within CozyCalendar. We advise reviewing this statement routinely.

Contact and Privacy Inquiries

Direct channel for security and privacy feedback.

If you have inquiries, concerns, or wish to exercise your privacy rights regarding CozyCalendar, please get in touch with our team: