This Privacy Policy explains how Really Big Calendar (the "Service") collects, uses, and protects your information. By using the Service you agree to this policy.
1. Who we are
The Service is operated by:
For privacy questions, use the in-app contact form when signed in.
2. What we collect
Account information
When you register, we collect your email address and a hashed password. Your password is never stored in plain text.
Calendar content
We store the content you create in the Service so it can be shown back to you. This includes:
- Calendar items, events, and notes
- Multi-day items
- Ideas
- Habits and habit progress
- Labels and label settings
- Stickers you generate or upload (including any generated images stored as part of your calendar)
- Calendar settings, sharing preferences, and notification preferences
Sticker generation
When you use the sticker generation feature, we record the request, the resulting image, and metadata about the generation (timestamp and the account that triggered it). Generation requests are rate-limited.
Contact form
When you submit a message through the in-app contact form, we collect the message content along with your account email so we can reply. Submissions are rate-limited.
Technical and log data
When you access the Service, we automatically receive and log:
- Your IP address (used for rate limiting, abuse prevention, and security)
- Browser and device information sent in standard request headers
- Authentication tokens and session identifiers
- Request timestamps and the API endpoints you access
- Error and diagnostic logs
3. How we use your information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Authenticate you and keep your account secure
- Save and display the calendar content you create
- Generate stickers you request
- Apply rate limits and detect or prevent abuse
- Reply to messages you send through the contact form
- Send you account-related notifications you have enabled
- Comply with legal obligations
4. Cookies and similar technologies
We use cookies and equivalent local storage to keep you signed in, remember your preferences, and operate basic features of the Service. Disabling these may break sign-in and core functionality.
5. How long we keep your data
We keep your account data and calendar content for as long as your account is active. Log data (including IP addresses) is retained for a limited period for security and operational purposes and then deleted or rotated. You can delete your account at any time from the app, which removes your account record and the calendar content associated with it. Backups and routine logs may persist for a short additional period before being overwritten.
6. Security
We hash passwords, transmit data over HTTPS, restrict server access, apply rate limiting on authentication and other sensitive endpoints, and follow standard practices for protecting user data. No system can be guaranteed 100% secure, but we work hard to protect your information.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can exercise most of these rights directly inside the app — including deleting your account and exporting your calendar data. For other requests, use the in-app contact form.
8. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the app.
10. Contact
This Service is operated by:
For privacy questions or requests, use the contact form available inside the app.
