Skip to main content
Timenora

My Calendar Privacy Policy

Last updated: 2026-10-27

Summary

  • This policy covers the My Calendar app for Windows, made by KineApps Ltd, Finland.
  • We run no servers for My Calendar. Your calendars, events, tasks and birthdays go only between your device and your own Microsoft or Google account. We never receive them.
  • The app contains no third-party advertising and shares no data with advertisers. It may promote Pro Pack and our other apps. We never sell your data.
  • Crash reports and usage statistics are off by default. You choose whether to send them, and you can change your choice at any time in Settings.
  • Purchases go through the Microsoft Store. No payment details reach us.

The rest of this policy gives the details.

Who we are

KineApps Ltd (KineApps Oy), Finland, Business ID 3257225-7, is the data controller for the personal data we receive through the My Calendar app: crash reports and usage data, and emails you send us. Your calendars, tasks and other data stay on your device and in your own Microsoft or Google account; the app works on them for you, and we do not receive them.

Scope

This policy applies to the My Calendar app ("the app", "My Calendar") for Windows, distributed through the Microsoft Store. It does not apply to the kineapps.com website, which has its own privacy policy.

Data the app processes

For each kind of data, this section tells you what the app processes, why, how long it is kept and who receives it. For the data we receive, it also gives our legal basis under Article 6(1) of the GDPR.

Microsoft or Google account sign-in

You can use the app without an account. To sync, you sign in with a Microsoft account (personal, work or school) or a Google account.

  • What: your name and email address from your account profile, and the sign-in tokens that let the app reach your data. For a Google account the app also receives Google's account identifier. The app asks for these permissions:
    • Microsoft: sign-in and your profile; read and write your calendars; read and write the app's own folder in your OneDrive; read files in your OneDrive, used only for the app's own data; and read and write your Microsoft To Do lists and tasks, including lists shared with you.
    • Google: sign-in and your profile (name and email address), and read and write your Google Calendar. The app does not use Google Tasks.
  • Why: to sign you in and to show and edit your calendars and tasks in the app.
  • How long: on your device until you remove the account in the app or uninstall the app (see "Deleting your data").
  • Who receives it: nobody but you; the app talks directly to Microsoft or Google. With a personal account, Microsoft or Google runs the sign-in under its own privacy policy, as an independent controller. With a work or school account, your organization is the controller and Microsoft or Google processes the data on its behalf; ask your administrator about it.

Calendars, events, tasks, birthdays and attachments

  • What: the app reads and writes, in your own Microsoft or Google account:
    • calendars and events with their details, such as subject, time, location, attendees and online-meeting links;
    • with a Microsoft account, Microsoft To Do lists and tasks with their details, and files you attach to a task;
    • with a Microsoft account, birthdays you add and other app data, stored in the app's own folder in your OneDrive.
  • Why: this is the service: to show your calendars and tasks and let you change them.
  • How long: in your account, until you delete it there. The app keeps a copy on your device (see "Data kept on your device").
  • Who receives it: Microsoft or Google, which store it in your account. We never receive it.

Calendar subscriptions and holiday calendars

  • What:
    • Subscriptions. When you subscribe to a calendar by its web address (ICS or webcal), the app downloads it from that address. The request contains only what any download needs, including your IP address, and identifies the app as "MyCalendar/1.0". It sends no account details.
    • Holiday calendars. When you add public holidays, the app downloads a public Google calendar for the country and language you choose. Google receives your IP address and the country and language of the calendar.
    • Name days and special days are built into the app and need no download.
  • Why: to show the calendars you subscribed to and the holidays you chose.
  • How long: the subscription's address and its events are kept on your device until you remove the subscription or uninstall the app.
  • Who receives it: the operator of the server at the address you subscribed to, and Google for holiday calendars, each under its own privacy policy.

Imported calendar files

  • What: when you import an .ics file, the app reads the file on your device. It then adds the file's events to the Microsoft or Google calendar you choose.
  • Why: to bring events from another calendar into yours.
  • How long: the events stay in your calendar until you delete them there. The file itself is not copied.
  • Who receives it: Microsoft or Google, which store the events in your account.

Data kept on your device

The app keeps a copy of your data on your device so it can work quickly and offline. It is stored in the app's own folders, for your Windows user only.

  • Encrypted: your account details, sign-in tokens, and the cached copy of your calendars, tasks and reminders.
  • Not encrypted: calendar subscriptions, your calendar choices, and a copy of the app's data from your OneDrive, such as birthdays.
  • Settings: your app settings, including your purchases and privacy choices.

When you remove an account in the app, its data is deleted from your device. Calendar subscriptions, the copy of the app's OneDrive data and your settings stay until you remove them or uninstall the app. Uninstalling the app removes all of its data from your device.

We hold no copy of this data.

Crash reports and usage data

These are off by default. When you first start the app, it asks you whether to "Help improve the app by sharing crash reports and usage statistics". You can change your answer at any time in the app settings.

  • What: we use Sentry to collect:

    • error and crash reports: the error, where in the app it happened, the pages you opened and the actions you took just before it, device and app details such as the app version, Windows version, device type, language and time zone, and which kinds of accounts you use;
    • usage data: when the app starts and whether it crashed; once a day, which kinds of accounts you use; and, when an account is signed out, the provider and the reason, with no account details;
    • consent data: when you turned reporting on and which version of this policy you accepted.

    Reports are pseudonymous: they identify the app installation by a random identifier, not by your account. In rare cases, if that identifier cannot be saved on your device, Sentry uses one based on your device's network adapter or name instead. They do not include the content of your calendars, events, tasks or files, and before a report leaves your device the app removes email addresses, file names and Windows user names from it. A report can contain the internal identifiers the app gives your accounts and calendars. Sentry derives an approximate location (country and city) from the IP address a report is sent from, but does not store the IP address.

  • Why: to find and fix errors and crashes, to understand which kinds of accounts people use, and to be able to show that you agreed to sending this data.

  • Legal basis: consent (a). You give it with the toggle and withdraw it the same way. Turning it off stops collection and deletes crash reports that have not been sent yet.

  • How long: 30 days. Sentry also keeps backup copies, which it deletes within 90 days after making each backup.

  • Who receives it: Functional Software, Inc. (Sentry), which stores the data in the European Union (Frankfurt, Germany).

Purchases

  • What: Pro Pack is sold through the Microsoft Store. The app asks the Store which add-ons you own, and keeps only that answer on your device. No payment details or receipts reach us.
  • Why: to unlock what you bought.
  • How long: on your device until you uninstall the app.
  • Who receives it: Microsoft runs the Store and handles the payment under its own privacy statement, as an independent controller.

Notifications

The app shows reminders for your events and tasks, with their subject, time and location, as Windows notifications. They are scheduled on your device; we send no push messages. Starting the app when you sign in to Windows is off by default.

Emails you send us

  • What: when you email us, we receive your email address, name and whatever you write.
  • Why: to answer your questions and fix your problems.
  • Legal basis: legitimate interest (f) in supporting our users. Where your request is about a purchase, also contract (b).
  • How long: 2 years from when we receive them.
  • Who receives it: Microsoft (Microsoft 365, data stored in the European Union and EFTA).

What is required

  • Signing in is optional. You need a Microsoft or Google account only to sync your calendars and tasks.
  • Crash reports and usage data are optional. The app works the same whether they are on or off.
  • Other people's data. Events can contain other people's names and email addresses, for example attendees. They are stored in your own account, and you are responsible for having the right to use them.

Purposes and legal bases

  • Finding and fixing errors, and account-type statistics — crash reports and usage data — consent (a)
  • Support — emails you send us — legitimate interest (f): helping our users; contract (b) for purchase matters
  • Establishing, exercising or defending legal claims — only the data a claim concerns, kept only as long as the claim requires — legitimate interest (f)
  • Disclosure to authorities — what the law requires — legal obligation (c)

Google user data

My Calendar's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • Google user data is used only to show and edit your calendars in the app.
  • It goes only between your device and Google. It is not sent to us, not used for advertising and not sold.
  • Nobody reads it, unless you ask us to look at specific data, it is necessary for security purposes such as investigating abuse, or the law requires it.

Processors, independent controllers and international transfers

Processors process data on our behalf and may use it only for the purpose we give them. Independent controllers decide themselves how they process the data.

  • Sentry — Functional Software, Inc., United States — processor — crash reports and usage data (opt-in) — stored in the European Union (Frankfurt, Germany)
  • Microsoft 365 — Microsoft — processor — support email — European Union and EFTA
  • Microsoft account, Outlook calendar, OneDrive, Microsoft To Do — Microsoft — independent controller for a personal account; for a work or school account, processor for your organization — sign-in, your calendars, tasks and birthdays — under Microsoft's privacy statement, or your organization's contract with Microsoft
  • Microsoft Store — Microsoft — independent controller — purchases — under Microsoft's privacy statement
  • Google account, Google Calendar, holiday calendars — Google — independent controller for a personal account and for holiday calendars; for a work or school account, processor for your organization — sign-in, your calendars, public holiday calendars — under Google's privacy policy, or your organization's contract with Google
  • Calendar subscription servers — the operator of each address you subscribe to — independent controller — downloads of the calendars you subscribed to — under that operator's own terms

Transfers outside the EU. Microsoft, Google and Functional Software (Sentry) are certified under the EU–US Data Privacy Framework. Sentry's data processing addendum also includes the European Commission's Standard Contractual Clauses, and Microsoft offers them in its data protection addendum. For the services they control, Microsoft and Google transfer data under their own privacy policies.

Access by our staff. We have no access to your calendars, tasks or account. We see crash reports and the emails you send us, and only to support you and fix problems.

Authorities and legal claims. We disclose data when the law requires it, for example to a court or a public authority. We check that a request is valid and disclose only what it requires. We may also use data to establish, exercise or defend legal claims.

Deleting your data

  • Removing an account in Settings › accounts deletes its data from your device. For a Google account, the app also asks Google to revoke its access.
  • Revoking access yourself. You can remove My Calendar's access to your account at any time:
  • Data in your Microsoft or Google account stays there under their control until you delete it there.

Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you and get a copy of it.
  • Rectify data that is wrong or incomplete.
  • Erase your data ("right to be forgotten").
  • Restrict processing in certain cases, for example while we check a correction.
  • Portability: receive the data you gave us in a machine-readable format, where we process it based on your consent or a contract.
  • Object to processing based on legitimate interest.
  • Withdraw consent at any time, without affecting processing that happened before.

How to use them:

  • Calendars, tasks and birthdays: we hold none of this data. View, correct, export or delete it in your Microsoft or Google account, or ask Microsoft or Google.
  • Data on your device: remove the account in the app, or uninstall the app.
  • Crash reports: turn them off in the app settings. Reports carry no account details, so we cannot tell which are yours. If you can tell us when an error happened and what you saw, email info@kineapps.com. If we can reliably find your reports, we will give you a copy or delete them. Otherwise they are deleted after 30 days, and backup copies within 90 days.
  • Emails you sent us, and anything else: email info@kineapps.com.

Requests are free of charge. We answer within one month; for complex requests we may extend this by two months and will tell you. We may ask you to confirm your identity first.

You can also complain to a data protection authority: in Finland the Office of the Data Protection Ombudsman (tietosuoja.fi), or the authority of the EU country where you live.

Children

My Calendar is not directed at children under 16, and we do not knowingly collect their data.

Security

  • The app connects to Microsoft, Google and Sentry over encrypted connections. A calendar subscription you add with an http:// address is downloaded unencrypted; use https:// where the calendar offers it.
  • The app encrypts your sign-in tokens, account list, cached calendars and tasks, and reminders on your device (see "Data kept on your device").
  • Our staff see crash reports and support emails only when needed to support you or fix problems.

Changes to this policy

The "Last updated" date at the top shows the current version. If we change this policy in a way that matters to you, for example by collecting new data or using it for a new purpose, the app will tell you and ask for your acceptance again where the law requires it. Smaller changes, such as clarifications, are made without notice.

Contact

KineApps Ltd, Finland, Business ID 3257225-7