Privacy policy

Last updated 21 October 2026

In short: Uniqal stores your account email and the calendar events it needs to show you, so it can display your calendars together and make the changes you ask for. It never sells your data, shows ads, copies events between your calendars, or uses your calendars to train AI. You can remove a linked calendar account, or your whole Uniqal account, at any time.

Who we are

Uniqal is run by Konstantinos Yiannatsos, an individual developer based in Cyprus ("we", "us"). We are the controller of the personal data described here. Contact: hello@uniqalapp.com.

This policy covers the Uniqal apps for iPhone and Android, the Uniqal web app, and this website (uniqalapp.com).

What we collect

Your Uniqal account

Email address, to sign you in and send you account emails.
Password. Stored only as a one-way hash by our sign-in provider; we can't see it. You can also sign in with one-time codes sent to your email.
Plan (free or paid) and how many calendar accounts it allows.

Calendar accounts you link (Google, Microsoft)

When you link an account, you sign in with that provider and choose to give Uniqal access. We then store:

The linked account's email address and the provider's ID for it.
Access tokens that let Uniqal reach your calendars without your password. They are encrypted (AES-256-GCM) with a key that is kept separately from the database.
Your calendars' names, colours and whether you can edit them.
Events from 30 days ago to one year ahead: title, start and end time, time zone, whether it's all-day, location, description/notes, whether it's tentative, and which repeating series it belongs to. We don't store attendees, attachments or meeting chat.

Older and later events stay with Google or Microsoft and are not copied to us. We never read your email, contacts, files or anything outside your calendars.

Permissions we ask for

Provider	Permission	Why
Google	See and edit events on all your calendars (`calendar.events`)	To show your events and create, change or delete the ones you ask us to.
Google	See the list of your calendars (`calendar.calendarlist.readonly`)	To list your calendars with their names and colours, and know which you can edit.
Google	Your email address (`email`, `openid`)	To show which Google account is linked.
Microsoft	Read and write your calendars (`Calendars.ReadWrite`)	To show your events and create, change or delete the ones you ask us to.
Microsoft	Sign you in and read your profile (`User.Read`, `openid`, `email`, `profile`)	To show which Microsoft account is linked.
Microsoft	Keep access (`offline_access`)	So your calendars stay up to date without signing in every hour.

Technical data

Server logs: when the apps talk to our servers, our hosting providers record the request, time, IP address and browser or device type. We use these only to keep the service running and secure.
On your device: the apps keep you signed in by storing a session on the device (encrypted with a key in the iPhone Keychain or Android Keystore; in the browser's local storage on the web), plus small preferences such as which view you last used.

This website sets no cookies and uses no analytics or tracking. The apps contain no advertising or analytics SDKs.

How we use it

To show your linked calendars together and keep them up to date.
To create, change and delete events when you ask us to, in the calendar you choose.
To send you account emails: confirming your address, sign-in codes, password resets, and a notice if a linked account stops working and needs reconnecting.
To keep the service secure and fix problems.

We don't sell your data, use it for advertising, build profiles of you, let people read your events, or use it to train artificial intelligence. Uniqal never copies events from one of your calendars into another.

Legal basis (GDPR): providing the service you signed up for (contract, Art. 6(1)(b)); keeping it secure and working (legitimate interests, Art. 6(1)(f)).

Google user data

Uniqal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, data from your Google account is used only to provide the features described above, is not transferred to others except to provide them (through the service providers listed below), as required by law, or as part of a merger or sale with your notice, is never used for advertising, and is never read by a person unless you ask us to for support, it's needed for security or the law, or it's been made anonymous. We don't use it to train AI models.

Where it's stored, and who helps us

Service	What for	Where
Supabase	Database and sign-in	Ireland (EU)
Railway	Server that talks to Google and Microsoft	Netherlands (EU)
Cloudflare	Hosting the web app and this website	Global network
Resend	Sending account emails	Ireland (EU)
Google, Microsoft	Your calendars, which you link	Under their own privacy policies

These providers process data only on our instructions. Some are US companies; where data leaves the EU, it is protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

Events are kept only within the 30-days-back to one-year-ahead window and are removed as they fall out of it.
Removing a linked account in Uniqal deletes its tokens, calendars and events from our database straight away and stops change notifications. For Google we also revoke our access. Microsoft has no way for an app to give up access itself; you can remove Uniqal at account.microsoft.com, though without our stored token we can no longer use it.
Deleting your Uniqal account deletes everything above. See how to delete your account.
Database backups kept by our providers are overwritten within 30 days. Server logs are kept for a short time.

Security

All connections use HTTPS. Access tokens are encrypted, each user can only read their own data, and secrets are kept out of our code. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Your rights

You can ask us for a copy of your data, to correct it, delete it, limit or object to how we use it, or to receive it in a portable format. Email hello@uniqalapp.com from your account's address. You can also complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy) or your local data protection authority.

Children

Uniqal isn't meant for children under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date at the top. If the change is significant, we'll tell you by email or in the app before it takes effect.