Privacy Policy

Who operates the service

My Calendar Todo is a personal project operated by Quentin Mayo through Programming Securely. This policy covers the website and its iOS and Android companion apps. Contact admin@programmingsecurely.com about your information or privacy choices.

Account and workspace information

Creating an account sends your email address and password to our authentication service over HTTPS. The service keeps account identifiers and password verification information. The mobile app saves its sign-in session using device secure storage; it does not deliberately save your password in the task workspace.

We store the tasks, notes, priorities, scheduled times, durations and lists you choose to save so they can sync between your devices. Optional website features also store profile details, uploaded images, contacts and contact groups, sharing choices and preferences. A list you explicitly share is available to its permitted members. Private profile and contact images require an authenticated owner request.

The mobile app displays events from optional Google Calendar connections; it does not read the device address book or device calendar through a native permission.

Google Calendar information

Connecting Google Calendar is optional and uses a separate Google permission screen. We request read-only access to your calendar list and events. We store the connection credentials, calendar identifiers and names, and imported event information returned by Google. Event information can include titles, descriptions, times, locations, attendees, recurrence and other event metadata.

We use this information to sync and display events beside your tasks and to create a task when you choose to convert an event. This integration cannot create, edit or delete events in Google Calendar. Disconnect a calendar in Integrations to stop its sync and remove its saved connection and event copies. Account deletion also removes saved calendar connections and imported copies; your source Google calendars and events stay in Google.

Google Calendar information is not used for advertising, sold, or used to train general-purpose AI models. Its use and transfer follow the Google API Services User Data Policy, including the Limited Use requirements.

Reminders on your device

Task reminders are optional local notifications. Their preference and queued task details are saved on the device. This reminder feature does not register a remote push token or send the task to an advertising network. Task titles may be visible on your lock screen. You can turn reminders off in Account or change notification permissions in device settings.

Support and beta requests

When you submit a bug report or feature request, we send its title, description, optional contact email and signed-in account information to the Programming Securely feedback service. The report includes the screen, app version, operating system, locale, time zone and viewport information shown in the form to help investigate.

Joining the separate beta interest list is optional and requires your consent. It records your email, selected projects, consent and app context so we can contact you about that testing. A signup does not subscribe you to a paid plan. Workspace deletion does not automatically erase these separate support or portfolio beta records; contact admin@programmingsecurely.com to request their deletion or withdraw beta contact consent.

Operational information and website analytics

Our hosting and authentication services process technical request information, including IP addresses, browser or app information and authentication events, to operate and protect the service. Website pages also use Umami for visit analytics and Sentry for error reporting. These website services are separate from the native task and reminder features. Do not include passwords, payment details or other secrets in support reports.

My Calendar Todo does not include advertising or an advertising SDK. We do not sell workspace information or use it for advertising across other companies and apps. We use service providers for hosting, authentication, transactional email and operational support. User-directed sharing and calendar connections are used to provide the features you choose.

Retention, access and deletion

Workspace information is retained while you use the service or until you remove it. You can edit tasks and profile details through the available app and website controls. To request a copy of account information or help with another privacy request, contact admin@programmingsecurely.com.

Open Account → Delete account in the mobile app, or use the account deletion page. Sign in and confirm the removal there. This removes your saved workspace, owned shared lists, integration records, private uploaded images and authentication account. Other members lose access to lists you own. Return to each mobile device and sign out to clear its local session and reminders.

Limited security or operational logs and backup copies may remain under their separate retention cycles. Support reports and portfolio beta interest records are handled as described above. Information another person independently saved or received through sharing may remain with that person.

Security and browser choices

Connections to the service use HTTPS. Account access and database or storage permissions restrict access to private workspace data. These safeguards do not guarantee that every security incident can be prevented. Website sign-in uses cookies to maintain the session; blocking those cookies can prevent sign-in from working.

Children and policy updates

The service is not designed for children under 13. Contact us if a child has provided personal information so we can investigate and remove the relevant account information. We will post changes to this policy here and update the date above.