Privacy Notice
for Calendars

Last updated: October 1, 2025

Key Changes to the Privacy Notice for Calendars

At Readdle, we prioritize our users, and, as Calendars evolves, we amend our Privacy Notice accordingly.

In a nutshell, we

added new details regarding the processing of support requests and feedback data, and
updated data subject rights for Canadian residents.

We encourage you to carefully read the full text of the Privacy Notice. The changes become effective as of the publication date above.

Intro

Readdle Limited (“Readdle” or “we”) welcomes you. We provide you with our application “Calendars” (“App” or “Calendars”), available on iOS, macOS, iPadOS, and watchOS subject to the terms and conditions of our Terms of Service.

This Privacy Notice outlines the types of personal data the App collects, details how it is stored, processed, and used, and explains the implications of your interactions with the App.

We collect your personal data when you use the App according to this Privacy Notice. When you use our website by following the link (“Website”), your personal data is processed in accordance with the Privacy Notice for Readdle Website.

We recognize the importance you place on your privacy and value the trust you have in us. To honor that trust, we implement the latest data security standards, continuously enhance our understanding of privacy issues, and ensure compliance with the General Data Protection Regulation (“GDPR”) and other applicable privacy laws

If you have any questions or comments about this Privacy Notice, visit our Support page for more information about the App or contact us.

About Us

We are the controller of your personal data processed through Calendars. This means that we determine the purposes and means of personal data processing.

Controller	Readdle Limited Company number: 630281 Glandore Business Centres, 26-27 Fitzwilliam Place, Fitzwilliam Hall, Dublin 2, D02T292, Ireland
Data Protection Officer	Privacity GmbH Neuer Wall 50, 20354 Hamburg, Germany
Email	rdsupport@readdle.com – for general inquiries dpo@readdle.com – for privacy inquiries

Our support team is happy to assist you with any issue related to the use of the App in any matter. We kindly request that you maintain politeness and calmness in your communications with us, as we may not respond to offensive emails or messages.

About You

When you download Calendars, you become our user ("User") and we collect and process some of your personal data.

Please note that we do not knowingly process the personal data of Users under the age of 16. If you are under 16 or you are a legal representative of such a person, please contact us.

Personal Data

Sources of Data

We collect data about you when you download our App and interact with it based on your activities within the App. Please review the details provided below carefully.

You have the option to modify your personal data within the App, either by exercising your right to rectification or through the App’s functionalities. Please be aware that the same lawful bases and storage durations apply to the updated data.

We may also, although we do not necessarily do so, receive data from third parties. It depends on your settings and the features you use.

Lawful Basis for Processing

To process your personal data, we rely on one of the following lawful bases:

performance of the contract — for the processing of personal data necessary for the negotiating on, conclusion, and performance of a contract (mainly, Terms of Service) with you;
legal obligation — for the processing as required by applicable laws (for example, to comply with tax or KYC/AML regulations) or if requested by a law enforcement agency, court, supervisory authority, or another state-authorized public body;
legitimate interest — for the processing necessary for the development of our services and security, taking into consideration your interests, rights, and expectations;
consent — for additional processing for specific purposes.

Personal Data in Calendars

We collect your personal data according to this Privacy Notice when you install and use the App, depending on how you interact with it, what features you use, and what subscription you have.

Technical Data

When you use the App, we collect certain technical data

Data	Reasons for Processing	Lawful Basis	Data Storage
User ID	Providing you with the functionality of the App	Performance of the contract	We store the data during your use of the App and for six (6) years after you stopped activities in the App
Device info (device ID, IP address, phone settings, name, local time, country and city, language, other characteristics)
Crash and error log data
Device info (device ID, IP address, phone settings, name, local time, country and city, language, other characteristics)	Improvement of the app	Legitimate interest	We store the data until you object to the processing where we have your email and can identify you
Crash and error log data
Analytics ID (for example, IP address, HTTP user agent)
Interactions with the App, its screens and features (e.g. activation of the feature, activation of the trial, tapping a push notification)

Information about you

Before you access the App’s features, we may request some personal information to assist us in enhancing the App. Additionally, we might ask for your email address to send you useful information about the App.

Data	Reasons for Processing	Lawful Basis	Data Storage
Your aims for the App	Improvement of the app	Consent	We store the data until you withdraw your consent
Reasons for using the App
Work area
Apps for task managements you use
Desktop platform you use
Your expectations from the App
Email	To send you recommendations, tips, news about the product and the company, special offers	Consent
Email	To ask for your feedback, suggest participation in the users’ surveys, inform you about major events and special offers for other products of the company and its partners	Legitimate interest

Payment data

We collect some additional data to process your payments.

You may purchase our premium subscriptions and paid features through the App Store, other platforms, or our authorized resellers. Depending on the payment method, we may receive some or all of the data specified below.

We also maintain the history of payments, as this is a legal requirement. We store this information as mandated by law and cannot delete it until the legally required retention period expires.

Data Storage
Data	Reasons for Processing	Lawful Basis
Subscription and payment information charging platform name information about the payment subscription start and expiration dates chosen payment plan subscription status trial status status of the subscription autorenewal	Confirming the payment for compliance with the applicable law	Legal obligation
	Confirming the payment for providing you with the paid features of the App	Performance of the contract
We store the data during your use of the App and six (6) years after the termination of the agreement between Readdle and you

Events and App’s Features

You may sync all your calendars in the App and manage your events or tasks.

Pay attention to the fact that Calendars for watchOS does not sync data from the calendar accounts directly. It receives all data from Calendars that runs on other devices.

Data	Reasons for Processing	Lawful Basis	Data Storage
iCloud account information	Providing you with the functionality of the App	Performance of the contract	We do not store your data
Local calendar information
Information about the third-party calendars you connect to the App
Account data from the third-party calendars
Information on the events: name, time frames, colour, notification settings, name of service and link to video calls, notes, location, and others
Your working schedule and planning time
Tasks
Reminders
Reservation of conference room
Emails of the invited events’ participants
Calendars of your team members
Geolocation	To indicate the event’s location and provide you with local weather forecasts and improve event location suggestions	Consent	We do not store your data
Contact	To make the invitations in the App easier for you	Consent	We do not store your data

Support Request’ Data

When you address your request to the support service in the App, we collect some information to help you. We may collect analytics on the categories of User requests to improve our services and responses to the requests. We may retain AI providers to define the category of your request more efficiently. The requests are pseudonymised before such processing. No data will be used for training.

Depending on the case, we may collect your detailed log files to help you with your problem. These log files may contain sensitive personal information.

Please be advised how we may use the log files:

detailed logging – when you address your support request, you can choose whether to add detailed log files or not;
general logging – when you address your support request, we collect your log files by default.

Privacy requests
Data	Reasons for Processing	Lawful Basis	Data Storage
Name	To fulfill your support request	Performance of a contract	We store the data during communication and for six (6) years after the last communication on the ticket
Email
Type of device and OS version
Text of the request
Logs
If you contact us through our DPO mailbox, we will process your request with the help of Spark Mail.

Feedback Data

Where we have your email address, we may reach out to request your feedback. Your insights are invaluable to us for enhancing the App and improving user experience.

Data	Reasons for Processing	Lawful Basis	Data storage
Email	To ask for your feedback or suggest participation in the users’ surveys	Legitimate interest	We process data in this way until you unsubscribe
Data used for the improvement of the App

When you submit your feedback about the App to us directly or via third-party platforms, we process the personal data in your feedback, which may include any of the data listed below:

Feedback Provided to us Directly
Data	Reasons for Processing	Lawful Basis	Data storage
Email	Communication regarding your feedback and consent	Legitimate interest	We store the data for six (6) years from feedback or the last communication on feedback or until you withdraw the consent
Name or username	Communication regarding your feedback and consent
Attachments and/or photos	Improvement of the Service
Other information about you, such as social handles, occupation etc.	Use in marketing activities	Consent
Feedback, including text feedback, answers to the review forms, or feedback provided orally in the meeting	Improvement of the Service	Legitimate interest
Other information related to your feedback such as rating, the date of the feedback, etc.	Use in marketing activities	Legitimate interest
Meeting records	Improvement of the Service and/or use in marketing activities	Consent

Feedback Provided via a Third-party Platform
Data	Reasons for Processing	Lawful Basis	Data Storage
Name or username	To use your feedback in our product development and/or marketing activities	Legitimate interest	We store the data for two (2) years from feedback or the last communication on feedback
Feedback, including text feedback and rating
Any other information related to your feedback such as the date of the feedback, etc.

We may collect analytics on the categories of issues mentioned in the feedback to improve our services. We may retain AI providers to define the category of your feedback more efficiently. The feedback is pseudonymised before such processing. No data will be used for training.

Data Received from Third Parties

We may receive some personal data from third parties.

The amount of data collected, the purposes, and the legal basis for processing are determined by the respective privacy documents of these parties.

Third Party	Privacy Documents
Google	Privacy Policy
Exchange	Exchange Server Privacy Statement \| Microsoft Learn
Outlook	Privacy
Office 365	Microsoft Privacy Statement
iCloud	Privacy – Apple
Zoom	Privacy Statement
GoTo	Privacy Policy
Setapp	Privacy Policy

Data Sharing with Third Parties

We may share your personal data with third parties without causing you any harm and in strict compliance with applicable privacy laws. Additionally, we maintain organizational and technical measures to secure your personal data during its transfer to third parties.

To share your data, we rely on the lawful bases such as, consent, compliance with the law, legitimate interest and performance of a contract, depending on the specific circumstances.

Third Party	Description
Analytics tools	We use analytics tools to understand and promote our business.
Messengers	We use messengers to communicate with you in ways that are convenient for you.
Contractors	We cooperate with contractors to operate, develop, and improve the features and functionality of the App, fulfill your support requests, etc. We sign data processing, transfer or sharing agreements with them, as may be applicable, and impose various security measures to ensure your data is safe.
Services Calendars uses	We use third-party services to provide you with the functionality of the App. For example, we use Open AI functionality to help you generate tasks by suggesting content. You can find Open AI’s privacy document following the link.
Services our team uses	We use CRM systems, messengers, and other services in our organization to provide you with our services. To manage and fulfill privacy requests we use: Spark for processing requests and communication with the user; Jira for internal tracking and timely involvement of responsible ones for handling the request.
State authorities, courts, law enforcement agencies, etc	We may be obliged to transfer some of your data to tax authorities, courts, law enforcement agencies, and other governmental bodies: to comply with a government request, court order, or applicable law; to prevent unlawful use of the App; to protect against claims of third parties; to help prevent or investigate fraud.
To get a detailed list of the third-party recipients of your personal data, contact us

Data Transfer Outside the European Economic Area

The personal data we collect is stored on the US servers, which participate in the Data Privacy Framework and European Economic Area (“EEA”) servers, which fall under the General Data Protection Regulation.

We may share personal data with the recipients in the USA and other countries, including non-EEA ones, ensuring that your data is protected and processed in accordance with the General Data Protection Regulation. For example, we share some data with our contractors in Ukraine.

To share the data outside the EEA, we rely on the adequacy decision by the European Commission or the Data Privacy Framework participation of the recipient.

If the recipient does not participate in the Data Privacy Framework and its country is not deemed to provide an adequate level of protection for your personal data, we adopt Standard Contractual Clauses based on legislation assessments for data protection during transfer and storage.

You can read more detailed measures to protect your personal data here.

Security Measures

We routinely conduct Data Protection Impact Assessments to guarantee the implementation of adequate technical and organizational measures. These measures aim to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.

To enhance the protection of your personal data, we employ HTTPS and encryption, establish segmented group and individual access (as necessary), utilize an alarm system, implement a corporate VPN, and adhere to formally approved internal policies, including those for password management and physical access.

Furthermore, we consistently monitor the state of the art of our technologies and diligently maintain backups. Additionally, all our contractors are bound by contractual obligations that comply with the GDPR and other privacy legislation requirements.

You can contact us with any questions regarding security issues.

Here, you can find information about the specific steps we mentioned above:

Physical Measures
Limited Access to Premises
Organizational Measures
Policies and Instructions Password policy Monitoring and physical access policy Contractual obligations and corporate VPN Internal security policy Access control policy	Transfer Protection Data Transfer Agreements Standard Contactual Clauses Data Privacy Framework
Contractor and Staff Training	Agreements Non-disclosure Agreements Data Processing Agreements
Regular Access and Policy Review	Privacy Protection: Privacy by design and by default Internal procedures for GDPR compliance
Code Review
Technical Measures
Encryption Technologies: Encryption in transit Backup encryption State-of-the-art methods of cryptographic keys	Backup: Regular backup of the entire system Redundant operation of the critical services in multiple data centers and controlled by a high-availability system
Two-factor Authentication	Stress-tests
Static Analysis	Quality Assurance
Regular Patch Management	Dependency and Supply Chain Vulnerability Check

Data Subjects Rights

As a data subject, you have the right to access, manage, and control your data either directly or by submitting a request to us. This section outlines these rights and explains how you can exercise them based on your place of residence.

European Economic Area and United Kingdom Residents

Right	Description
Right to access	You can request an explanation of the processing of your personal data.
Right to rectification	You can change the data if it is inaccurate or incomplete.
Right to erasure	You can send us a request to delete your personal data from our systems. We will remove them unless otherwise provided by law.
Right to restrict the processing	You may partially or completely prohibit us from processing your personal data.
Right to data portability	You can request all the data that you provided to us, as well as request to transfer data to another controller.
Right to object	You may object to the processing of your personal data.
Right to withdraw consent	You can withdraw your consent at any time.
Right to file a complaint	If your request was not satisfied, you can file a complaint to the regulatory body.
To exercise your rights, contact us
For EEA residents: we will answer your request within one (1) month. If your request is not satisfied, you can submit a complaint to your local Data Protection Authority. You may find it here.
For UK residents: we will answer your request within one (1) month. If your request is not satisfied, you can submit a complaint at the Information Commissioner’s Office via number 0303-123-1113 or go online at www.ico.org.uk/concerns.

United States Residents

Your rights may vary depending on the state of your residency, as indicated below.

Right	Description	Area
Right to access	You can request an explanation of the processing of your personal data.	California, Colorado, Connecticut, Indiana, Iowa	Montana, Tennessee, Texas, Utah, Virginia
Right to correct	You can change the data if it is inaccurate or incomplete.	California, Colorado, Connecticut, Indiana	Montana, Tennessee, Texas, Virginia
Right to delete	You can send us a request to delete your personal data from our systems.	California, Colorado, Connecticut, Indiana, Iowa	Montana, Tennessee, Texas, Utah, Virginia
Right to portability	You can request all the data that you provided to us, as well as request to transfer data to another controller.	California, Colorado, Connecticut, Indiana, Iowa	Montana, Tennessee, Texas, Utah, Virginia
Right to opt out of sales	The right to opt out of the sale of personal data to third parties.	California, Colorado, Connecticut, Indiana, Iowa	Montana, Tennessee, Texas, Utah, Virginia
Right to opt out of certain purposes	The right to opt out of processing for profiling/targeted advertising purposes.	Colorado, Connecticut, Indiana, Montana	Tennessee, Texas, Utah, Virginia
Right to opt out of the processing of sensitive data	The right to opt out of the processing of sensitive data.	California
Right to opt in for sensitive data processing	The right to opt in before the processing of sensitive data.	Colorado, Connecticut, Indiana, Montana	Tennessee, Texas, Virginia
Right against automated decision-making	A prohibition against a business making decisions about a consumer based solely on an automated process without human input.	California, Colorado, Connecticut, Indiana, Iowa	Montana, Tennessee, Texas, Virginia
Private right of action	The right to seek civil damages from a controller for violations of a statute.	California
To exercise your rights, contact us
We will answer your request thirty (30) to sixty (60), depending on the state and legislative requirements. If your complaint is not satisfied, you can submit a complaint with the Federal Trade Commission.
Please note! Some states do not have privacy laws. The rights of residents of such states are governed by U.S. federal law. If your state is not on the list, please contact us.

Do Not Sell My Personal Information

Under the California Consumer Privacy Act (CCPA), California residents possess the right to opt out of the “sale” of their personal information by entities governed by the CCPA.

We do not sell your personal information to anyone, nor do we use your data as a business model. Ensuring your privacy is our top priority, and we are fully committed to safeguarding it.

We adhere to the CCPA by providing California residents the option to opt out of any potential future sale of their personal information. If you wish to register your preference that we do not sell your data in the future, please contact us at dpo@readdle.com.

Do-Not-Track Requests

California residents using our App have the option to request that we do not automatically collect and track information related to their online browsing activities across the Internet.

These requests can usually be made via web browser settings that manage signals or other mechanisms, enabling consumers to express their preferences concerning the collection of personal data about their online activities over time and across third-party websites or online services.

We currently do not have the ability to honor these requests. However, we may update this Privacy Notice as our capabilities evolve.

Canada Residents

Right	Description
Right to be informed	With the help of this Notice and Terms of Service, we enable your right to be informed of the purposes of the processing, including automated processing, the categories of personal data processed, the recipients or categories of recipients of such data, and the storage periods.
Right to access	You can request an explanation of how your personal data is processed.
Right to correction/rectification	You can change the data if it is inaccurate or incomplete.
Right to delete (Quebec residents only)	You can send us a request to delete your personal data from our systems. We will remove all data except of what we are obliged to store in compliance with the law requirements.
Right to data portability (Quebec residents only)	You can request all the data you provided to us and request a data transfer to another controller.
Right to withdraw consent	You can withdraw your consent at any time.
Right not to be subject to automated decision-making	You can object to being subject to automated-based processing to know if there are consequences concerning them due to such processing.
Right to lodge a complaint	If your request is not satisfied, you can file a complaint to the regulatory body.
To exercise your rights, contact us
We will answer your request within thirty (30) days. If your complaint is not satisfied, you can submit a complaint to the Office of the Privacy Commissioner of Canada.

Privacy Notice Updates

Please note that laws and requirements for processing personal data can evolve. In the event of changes, we will release an updated version of the Privacy Notice in our App to reflect these modifications.

If we make substantial changes to the Privacy Notice or the App that affect your data privacy rights, we will notify you by email or display information in the App and ask you to read it. You will be notified in advance, and if you continue to use the App after these changes take effect, it will be considered that you have consented to and accepted the revised Privacy Notice.

Privacy Noticefor Calendars