Family Calendar privacy policy

Last updated: 27 October 2026. Version 2026-09-26.

Family Calendar is a shared calendar for Singapore families, made by Ray (rayjevis.com). This policy explains what we collect, why, and your choices. Questions or complaints: our Data Protection Officer at [email protected]. We reply within 30 days. You can also contact the Personal Data Protection Commission (www.pdpc.gov.sg).

What we collect

Your email address, to send you sign-in codes. There are no passwords.
Your name or nickname, colour and role (parent, grandparent, helper or other), so your family knows who's who.
Profiles that family members add for people without the app, such as children: a first name or nickname and a colour only. We never ask for a child's birthday, school or photo.
Your family's calendar: event titles, times, places, notes, links, who each event is for, repeats and reminder settings.
Invite codes: who made each code and who joined with it.
That you confirmed you are 18 or older and accepted this policy and the terms, and when.
If you make a private calendar link: a scrambled fingerprint (hash) of it, whether it includes notes, and when you made it. We never keep the link itself.
From the app's own version: a push token, so your phone can get notifications.

We do not collect NRIC/FIN or other ID numbers, your location, contacts, photos or advertising IDs, and we use no analytics or advertising tools.

Why we use it

To run your family's shared calendar: showing events to your family, reminders and notifications, invites, keeping accounts secure, and answering you. That's all. No ads, ever. We don't sell or share your data, don't profile you, and don't use it to train AI.

Who can see it

Only the people in your family. Family admins invite people, add children's profiles, choose the family's helper (who sees only the events they're tagged in) and remove people.

Your private calendar link, if you make one (Settings → Calendar link): when you add it to Google Calendar or Apple Calendar, they fetch your family's events from us and keep a copy, overseas and under their own privacy policies, refreshed on their own schedule. The link shows what you can see in the app: titles, times and places, notes only if you switch them on, and never who an event is for. Anyone who has the link can see what it shows, so keep it to yourself. Reset it or turn it off at any time and the old link stops working at once; it also stops when you leave the family or delete your account.

Our service providers process data only for us: Supabase (database and sign-in, in Singapore), Resend (sends sign-in emails, overseas) and, in the app's own version, Expo, Apple and Google (deliver notifications, overseas). Notification and email texts are kept short and don't include what your events are unless you turn on "Show details in notifications". We would share data with authorities only if Singapore law requires it.

Where it's kept

Your family's data is stored in Singapore (Supabase, region ap-southeast-1).

How long we keep it

Until you delete it. Deleting your account (in the app: Settings → Delete my account) removes your login and your place in the family straight away; events you added stay for your family. If you are the only adult in the family, the family, its events and the children's profiles are deleted too. Deleted events are kept for 30 days so they can be restored, then removed. Backups roll off within the provider's backup period.

Your choices

See and correct your data in the app at any time.
Export it: Settings → Export the calendar (.ics) and Export my data (JSON).
Delete it: in the app, or send us a message with the contact form (rayjevis.com/about/#contact) from the email you sign in with. We'll delete it within 7 days.
Turn off your calendar link at any time: Settings → Calendar link.
Withdraw consent by deleting your account.
Ask us anything at [email protected].

Children

Family Calendar is for adults. Children don't have accounts; a parent adds them as a profile (name or nickname and a colour), visible only to their family. A parent can ask us to delete a child's profile at any time (or delete it in the app).

Security

Every table is protected by row-level security, so the database itself refuses to show a family's data to anyone outside it; this is checked by automated tests. Data is encrypted in transit. If a data breach is likely to cause significant harm, we will tell the PDPC within 3 days of deciding so, and tell the people affected.

Changes

If we change this policy in a way that matters, the app will ask you to accept it again.

Also for the Family Calendar app: Family Calendar terms of use