Privacy Policy

Last updated: October 20, 2026

Calendar Sync (calendar.samiabid.com) is a private tool, operated by Sami Abid, that keeps Google Calendars in sync with each other. This policy explains what data the app accesses, why, how it is stored, and how you can remove it.

Google user data we access

When you sign in with Google, you are asked to grant these permissions:

• Your email address (userinfo.email) — used to identify your account and check it against the app's allowlist.
• Your calendar list (calendar.calendarlist.readonly) — used to show the calendars you can pick as a sync source or target. Read only.
• Events on your calendars (calendar.events) — used to read events on the calendars you choose to sync, and to create, update and delete the matching copies on the other calendar.

The app only reads and writes events on calendars you have set up as part of a sync. It does not access Gmail, Drive, contacts or any other Google service.

How we use that data

Google user data is used for one purpose: providing the calendar sync you configure. Specifically, the app:

• copies events from one calendar to another and keeps those copies up to date when the original changes or is deleted;
• applies your sync settings, such as which fields to copy (title, description, location, meeting links), colour and keyword filters, and privacy and reminder options;
• registers Google Calendar push notifications so changes are picked up in seconds;
• shows you the status of your syncs, recent sync activity and any errors on your dashboard.

What we store

Event contents are copied directly between your Google calendars and are not kept in our database. The app stores only what it needs to keep the sync running:

• Account details — the email address of each Google account you connect.
• OAuth tokens — Google access and refresh tokens, encrypted at rest with AES-256-GCM.
• Sync settings — the IDs and names of the calendars in each sync, and your filters (including any keywords you enter).
• Event mappings — pairs of Google event IDs linking each original event to its copy, plus the sync and push-notification identifiers Google provides.
• Sync logs — a record of each create, update or delete, which includes the event's title so you can recognise it on your dashboard. Activity logs are deleted automatically after 180 days. Error records are kept until the related sync is deleted.
• Session data — a session cookie and server-side session record that keep you signed in.

Event descriptions, locations, attendee lists and meeting links are not stored in our database.

Sharing and disclosure

We do not sell, rent or share Google user data with third parties, and we do not use it for advertising. Data is processed only by the services needed to run the app:

• Google, through the Google Calendar API, to read and write your calendar events.
• Railway, which hosts the application and its database.

Operational error alerts, which contain internal identifiers and error messages, may be sent to the operator's own monitoring channel so that problems can be fixed. We may also disclose data if required by law.

Limited Use disclosure

In particular, Google user data is not used to serve advertisements, is not transferred to data brokers or information resellers, and is not used to develop, improve or train generalised artificial intelligence or machine learning models. Humans do not read your data unless you ask for help with a specific problem, it is needed for security purposes, or it is required by law.

Security

• All traffic is served over HTTPS.
• OAuth tokens are encrypted before they are written to the database.
• Sign-in is restricted to an allowlist of approved Google accounts.
• The app requests the narrowest Calendar permissions that let it work; it does not request full Calendar access.

Retention and deletion

Data is kept for as long as you use the app. You can remove it at any time:

• Delete a sync from the dashboard to stop it, remove its push notifications and delete its event mappings and logs. You can choose to delete the copied events from your calendar at the same time.
• Disconnect a Google account from the dashboard to delete its stored tokens and any syncs that use it.
• Revoke access at any time from your Google Account permissions page. The app will stop syncing straight away.
• Delete everything by emailing [email protected]. Your account, tokens, sync settings, mappings and logs will be deleted within 30 days.

Children

Calendar Sync is not directed at children under 16 and is not intended for their use.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "Last updated" date. If a change affects how Google user data is used, you will be asked for consent again before it applies.

Contact

Questions or requests about your data: [email protected].