Privacy Policy
The short version. Aslan Family Calendar is a household calendar and chore board for a wall-mounted tablet. Everything you enter stays on that tablet. The app has no accounts of its own, no servers, no analytics and no advertising. If you choose to connect a Google account, the app reads (and, when you turn on two-way sync, writes) events in the Google calendars you pick — and nothing else.
Who we are
The app is developed and published by Aslan ("we", "us"). It is a personal project intended for a single household. Questions about this policy can be sent to aaslanx@gmail.com.
What the app stores, and where
The app keeps its data in a local database on the device it is installed on. It never uploads that data to us or to any third party.
| Data | Why it is stored | Where |
|---|---|---|
| Household members (name, initials, chosen colour) | To show whose calendar and chores are whose | On the device only |
| Events (title, date, time, location, notes) | To display the calendar | On the device only |
| Chores (title, assignee, due day, repeat rule, steps, notes, done state) | To display the chore board | On the device only |
| Display settings (24-hour clock, weekends, kiosk mode, calendar visibility) | To remember your preferences | On the device only |
| Google connection state (account e-mail, chosen calendars, two-way flag, last sync time) | To keep a connected account synced | On the device only |
Uninstalling the app deletes all of it. There is no cloud copy to delete.
Google Calendar (optional)
You can connect one Google account from Settings. When you do, the app uses Google's sign-in and Google's Calendar API. It requests these permissions:
calendar.readonly— to list the calendars in your account and read events from the ones you choose to sync.calendar.events— only while Two-way sync is switched on, to create, update or delete events in a synced calendar when you do so on the tablet.
What the app does with that access:
- It shows you the account's calendar list and syncs only the calendars you tick. You can change the selection or disconnect at any time.
- It imports events from roughly one week in the past to ninety days ahead and stores them on the device so the calendar works offline. Imported events are refreshed about once an hour while the account is connected.
- With two-way sync on, events you add, move or edit on the tablet in a synced calendar are sent to that Google calendar; deleting a synced event on the tablet deletes it in Google. You can turn this off per event ("Keep on Google Calendar") or globally.
- Access tokens are issued by Google Play services on the device; the app does not see or store your Google password. Disconnecting revokes the app's access and deletes every imported event from the device.
The app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the calendar features described here; it is never sold, never used for advertising, never used to train models, and never transferred to anyone except as needed to provide those features or as required by law.
How Google user data is protected
Security procedures are in place to protect the confidentiality of your data, and we use encryption to protect your information. Specifically:
- Encryption in transit. Every request to Google (sign-in and the Calendar API) is made over HTTPS/TLS. The app makes no other network requests.
- Encryption at rest. Imported calendar data and the Google connection state are kept in the app's private storage on the device, which Android isolates from every other app and encrypts with the device's file-based encryption when the device has a screen lock.
- No servers, no copies. Google user data is processed only on the device. It is never uploaded to us, to a backup service we run, or to any third party; there is no server-side copy to secure.
- Credentials. The app never sees your Google password. Access tokens are issued by Google Play services on the device, are short-lived, are held in memory only for the duration of a sync and are never written to storage. The app stores only the account e-mail address and the ids of the calendars you chose.
- Least privilege. The app asks for
calendar.readonlyat connection time and requestscalendar.eventsonly if and when you switch on two-way sync. Access can be revoked at any time from Settings or from your Google Account. - Access. Nobody but the people using the tablet can see the data. We (the developer) have no access to it: there is no dashboard, export or diagnostics channel through which it could reach us. Google user data is never read by a human on our side, and is never used for advertising, sold, or used to train machine-learning models.
- Incidents. If we ever learn of a vulnerability in the app that could expose Google user data, we will fix it in an update and describe it on this page.
Retention and deletion
- Imported Google Calendar events are kept on the device only while the account is connected and are replaced on every sync (about once an hour) — an event deleted in Google disappears from the tablet on the next sync.
- Disconnecting the account in Settings revokes the app's access with Google and immediately deletes every imported event and the stored connection state from the device.
- Uninstalling the app deletes all of its data, including any imported Google data.
- We hold no data about you, so there is nothing for us to retain or delete on our side. If you have any question or request about your data, write to aaslanx@gmail.com.
Sharing
We do not share, transfer or disclose Google user data to anyone. The only party that receives data from the app is Google itself, and only when you use two-way sync to create, change or delete an event in your own Google calendar.
What the app does not do
- No analytics, crash reporting, tracking or advertising SDKs.
- No accounts, passwords or profiles of its own.
- No network traffic at all unless a Google account is connected, and then only to Google's sign-in and Calendar endpoints.
- No access to contacts, location, camera, microphone or photos.
Permissions the app asks Android for
- Internet / network state — only used for Google Calendar sync.
- Keep screen on, immersive mode, launcher / lock-task (kiosk) — so the tablet can stay on the calendar all day. These do not involve personal data.
Children
The app is a household tool operated by adults. Children in the household may appear as members by name, colour and chores; that information stays on the family's own device and is never sent to us.
Your choices
- Remove a member, event or chore from within the app to delete it.
- Disconnect the Google account in Settings to revoke access and remove imported events.
- You can also revoke the app's access from your Google Account at myaccount.google.com/permissions.
- Uninstall the app to delete all local data.
Changes to this policy
If the app starts doing something new with data, this page will be updated and the effective date above will change.