Privacy policy

Who this is for

Family Calendar (also known as Karaman Calendar) is a private household calendar dashboard for a single family. It is not a public or multi-family product.

Sign-in

Calendars, family data, and Google connections require a shared household login. That session is kept in an HTTP-only cookie for 12 hours. This privacy policy is public and does not require that login.

Google Calendar

Connecting Google Calendar requests only openid, email, profile, and read-only Calendar access (https://www.googleapis.com/auth/calendar.readonly). The app cannot create, change, or delete Google events.

Google events are displayed on the household dashboard. They are not imported as family events.

Where Google credentials are stored

Google access and refresh tokens are encrypted with AES-256-GCM and stored in Postgres. The browser never receives those provider credentials. It only receives the event details needed to draw the calendar.

A short server-side cache of Google events may be kept so the calendar loads quickly. That cache is not an import into the family calendar, and it is deleted when the Google account is disconnected.

Household data

Family events, family members, and preferences (calendar views and AI Planner settings) are stored in Postgres for this single-family deployment.

Notifications

If Web Push reminders are enabled on an installed device, the push subscription is stored encrypted in Postgres.

AI Planner

When an authenticated user submits a planning request, scheduling text and any attached calendar screenshots may be sent to the selected model through Vercel AI Gateway. That happens only for that request. The planner does not save events until the user confirms the proposals.

Selling and sharing

We do not sell this data. We do not use it for advertising.

Disconnecting Google

Disconnecting a Google account revokes the Google grant and deletes the stored encrypted credentials for that account.

Contact

Questions about this policy: alexkaraman85@gmail.com.