Privacy Policy
Last updated: June 28, 2026
1. Who we are
Qualendar is a shared family calendar service, accessible at qualendar.app. For any privacy-related questions or requests, contact us at [email protected].
2. What data we collect and why
Account data
When you create an account, we collect your name, email address, and a hashed password. This is necessary to provide you with a secure, personal account (legal basis: performance of a contract).
Calendar and event data
We store the calendars, events, and scheduling details you and your family members create on Qualendar, along with any display names you provide. This data is necessary to operate the service (legal basis: performance of a contract).
Calendar access credentials
We store only a one-way hash of each app password and of your account password — never the passwords themselves. A newly generated app password is shown once, when it is created, and cannot be retrieved afterwards; if it is lost, you generate a new one.
Server logs
Like any web service, our hosting provider automatically records IP addresses, browser type, and pages or calendar endpoints accessed as part of standard server operation. These logs are retained for a limited period for security and diagnostic purposes (legal basis: legitimate interests).
Cookies
We use only the following cookies, which are strictly necessary for the service to function:
| Cookie | Purpose |
|---|---|
| Session cookie | Keeps you logged in during your visit |
| CSRF token | Protects against cross-site request forgery attacks |
| Remember-me cookie | Keeps you logged in across visits (only if you opt in on the login page) |
We also remember your light or dark theme choice in your browser's local storage — this is not a cookie and is never sent to our servers.
We do not use analytics cookies, advertising cookies, or any third-party tracking.
3. Who we share your data with
We do not sell or rent your personal data. We rely on a small number of service providers to operate Qualendar:
| Service | Purpose | Location |
|---|---|---|
| DigitalOcean | Hosting and data storage | Toronto, Canada region (DigitalOcean is a US company) |
| Fastmail | Transactional email (e.g. email verification, password reset) | Australia (servers in the United States) |
Each provider is bound by its own privacy policy and by applicable data protection law, and processes data only as needed to deliver its service to us.
4. International data transfers
Where a service provider processes data outside Canada or the European Economic Area, we rely on appropriate safeguards — including standard contractual clauses where applicable — to protect your information.
5. How long we keep your data
We retain your personal data for as long as your account is active. If you delete your account, your personal data — including your calendars, events, and access credentials — is deleted within 30 days, except where retention is required by law or for legitimate security purposes (e.g. server logs).
6. Your rights
Whoever and wherever you are, you have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Portability — request your data in a machine-readable format
- Objection — object to certain types of processing
- Withdrawal of consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you are in Québec, you may also file a complaint with the Commission d'accès à l'information du Québec (CAI) under Law 25 (Act respecting the protection of personal information in the private sector). If you are in the European Economic Area, you have the right to lodge a complaint with your local data protection authority under the GDPR.
7. Children
Qualendar is designed for families and may be used to keep track of children's schedules by a responsible adult. Accounts must be created and managed by someone aged 16 or older, in accordance with our Terms of Use. We do not knowingly let anyone under 16 create their own account.
8. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email or a notice on the service at least 30 days before they take effect.
9. Contact
Qualendar
[email protected]