Last updated: August 2026
PalCal ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information the PalCal apps for iOS and Android handle, how it is stored, and the choices you have.
PalCal exists to let a small group of friends share a calendar. We hold only what is needed to make that work. We do not sell your data, we run no advertising, and the app contains no third-party analytics, attribution, or tracking SDKs.
PalCal's backend runs on Google Firebase (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions and Firebase Cloud Messaging), operated by Google as our processor on servers in the United States. Google processes this data on our instructions in order to provide the service; it does not use it for its own purposes. Previous versions of PalCal stored data in Apple's CloudKit; that is no longer the case.
The app also keeps a local copy of your calendars on your device so it works offline, and (on iOS) shares a small extract with the PalCal home-screen widget through a private app group on the same device.
Account information. When you sign in with Apple or with Google, we receive a stable account identifier and, depending on the provider and your choices, your name and email address. We store your display name, your email address, and your profile photo if you set one. If you use Sign in with Apple's private-relay option, we only ever see the relay address.
Content you create. Calendars and their settings, events, RSVPs, comments, reactions, polls, chat messages, voice notes, background images and event recap photos. This content is stored so it can be shown to the other members of the calendars you belong to.
Technical information. A push notification token for your device (used only to deliver PalCal's own notifications), and your subscription status so the app knows whether to unlock premium features.
We do not collect advertising identifiers, browsing history, contacts, or precise background location.
Adding a place to an event is optional. If you use the map picker, the app may ask permission to use your device's location while you are using it, purely to centre the map near you; that position is not sent to us. Only the place you deliberately attach to an event is stored, and it is visible to that calendar's members.
PalCal asks for camera, photo library and microphone access only when you choose to add a photo or record a voice note. Nothing is captured in the background, and nothing is uploaded unless you send it.
If you enable notifications, we use Firebase Cloud Messaging to tell you about invitations, new events, messages and reminders in your calendars. You can turn notifications off at any time in your device settings.
PalCal Pro is sold through the App Store and Google Play. Payment is handled entirely by Apple or Google — we never see or store your payment details. We receive only the fact that a subscription is active.
Your calendars, events, messages and shared media are visible to the members of those calendars, and to no one else. Membership is by invitation only: a person can join only with a calendar's invite code and the approval of that calendar. Your name and profile photo are visible to people who share a calendar with you.
We do not sell, rent or share your personal information with third parties. The only external parties involved are the infrastructure and platform providers described above (Google, Apple), acting on our behalf, and any disclosure required by law or necessary to investigate a serious safety violation such as those covered by our Child Safety Standards.
Deleted data is removed from our Firebase project. Content you posted into a shared calendar may remain visible to that calendar's other members if you leave without deleting it. Backups and system logs may retain residual copies for a short period before they expire.
Data is encrypted in transit and at rest by the Firebase platform. Access to stored data is enforced by server-side security rules that check your identity and calendar membership on every request. On iOS, the app additionally offers optional Face ID / Touch ID locking. No system is perfectly secure, but we take reasonable measures to protect your information.
Our Firebase project is hosted in the United States. If you use PalCal from outside the United States, your information will be transferred to and processed there.
Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to its processing. Most of this is available directly in the app; for anything else, write to us at the address below and we will respond.
PalCal is not intended for children under 13, and we do not knowingly collect personal information from them. If we learn that an account belongs to a child under 13, we delete it. See our Child Safety Standards for how we handle child safety concerns.
We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date above.
If you have questions about this Privacy Policy, please contact us at b@alpugan.com.