Pair CalendarPair Calendar
Privacy Policy
Effective October 20, 2026
Pair Calendar is free, has no ads and never sells data. We keep only what the calendar needs to work between the two of you, and you can erase everything at any time, inside the app.
Who we are and how to reach us
Pair Calendar is a shared calendar app for couples, built and run by Fabrício, an individual developer based in Brazil. For this policy, he is the controller of your data.
Any question, request or complaint about privacy can be sent through the contact page. We reply to the email you provide.
What this policy covers
The Pair Calendar app on Android (Google Play), on iPhone and in the browser at paircalendar.com/app, the server services that sync the calendar between both phones, and the paircalendar.com website.
Information we collect
What you give us
| Data | Exactly what | Why |
|---|---|---|
| Account | Email, display name, password (stored only as a bcrypt hash), language, color theme and, if you want, gender. | Create and keep your account. |
| Google account | If you sign in with Google: your Google ID, email and name. | Sign in without a password. |
| Calendar | Events (title, date, time, location, notes, type, color, recurrence and reminder), shifts, saved titles, fixed commitments and special dates (name, date, emoji). | The app itself: both calendars on one screen. |
| Partner | Your account's invite code and the link to the couple's group. | Connect your account to your partner's. |
What is collected automatically
- Device and notifications: platform, device name, last sync time and the notification token (Firebase Cloud Messaging on Android and iPhone; Web Push in the browser).
- Server logs: IP address, browser and time of each request, used for security (login attempt limits) and error diagnostics.
- Website (paircalendar.com home only): Google Analytics 4 measures visits in aggregate, with Google's own cookies. The app has no analytics and no advertising SDKs.
What we do not collect: location, contacts, call logs, photos from your gallery, biometric data (biometrics are checked by your phone's operating system and never leave it).
How we use it
- Keep your account and sync the calendar between you and your partner.
- Send notifications when your partner creates or changes an event, and the reminders you set.
- Show your country's public holidays (the app queries the public Nager.Date service, which only receives your IP address).
- Authenticate you securely (signed sessions valid for up to 90 days) and protect the service from abuse.
- Reply when you contact us.
We do not use your data for advertising, profiling or anything beyond making the app work. If the purpose changes, we tell you first, inside the app.
Your Google account data
Google Sign-In asks only for the basics (identity, email and name). We use them solely to create and recognize your account, never for advertising, and we do not transfer them to anyone. You can revoke access at any time at myaccount.google.com/permissions. Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Where data lives and international transfers
Your account and calendar live on Hostinger servers in Brazil. The Google and Apple services listed above may process data in the United States, under the safeguards of article 33 of Brazil's LGPD (standard contractual clauses and those providers' own data protection policies).
How long we keep it
- Account and calendar: as long as the account exists. When you delete the account in the app, everything is erased immediately.
- Notification tokens: removed when you log out or delete the account.
- Server logs: kept for a limited time, only for security and diagnostics, and deleted automatically.
- Backups: database backups may hold already-deleted data for up to 30 days, until they are overwritten.
Security
- All communication uses HTTPS (TLS). The website sends HSTS and a Content Security Policy.
- Passwords are never stored in plain text, only as bcrypt hashes.
- Sessions use signed tokens (JWT HS256) with limited validity.
- Server access is by SSH key only; sign-in attempts are rate-limited per address.
- On your phone, preferences and cache live in the app's protected storage.
No system is 100% secure. If an incident affects your data, we will notify you and, where the law requires, the competent authority.
Your rights
Under Brazil's General Data Protection Law (LGPD, article 18) you may, at any time and free of charge: confirm that we process your data; access it; correct incomplete or outdated data; request anonymization, blocking or deletion of unnecessary data; request portability; delete data processed with your consent; know who we share it with; be informed about the option not to consent and its consequences; and withdraw consent. You may also petition Brazil's National Data Protection Authority (ANPD).
How: name and theme you fix in the app's Settings; events you delete one by one; the whole account under Settings › Delete my account. For access or portability requests, reach us through the contact page; we answer within 15 days.
If you live outside Brazil, the same rights of access, correction and deletion apply to you, through the same paths.
Delete your account
Inside the app: Settings › Account › Delete my account. After two confirmations, the account, events, shifts, special dates, tokens and the link with your partner are deleted immediately. Events you created disappear from your partner's calendar too. This cannot be undone.
Without the app installed, you can request deletion through the account deletion page; we complete it within 30 days.
Children
Pair Calendar is made for adults. We do not knowingly collect data from anyone under 18; if you know of a minor's account, tell us through the contact page and we will remove it.
Changes to this policy
When this policy changes, we update the date at the top and, if the change affects how your data is used, we tell you inside the app before it takes effect, so you can decide whether to continue.