SuperCal Privacy Policy

Last updated: October 17, 2026.

What we collect

• Account details: your name and email address, and a profile picture if Apple or Google provides one, when you sign up with email or sign in with Apple or Google. For email accounts we also store your password in hashed form (we cannot read it). If you use “Hide My Email” with Apple, we only see the relay address.
• Your content: calendars, events (titles, times, locations, notes, repeat rules), invites, friend connections, your handle, and your preferences (theme and display settings).
• Your device calendars (optional): if you turn on “Show this device’s calendars”, SuperCal reads the events in the calendars on your iPhone or iPad (for example Apple Calendar, iCloud, Google or Exchange) so it can display them. This happens on your device only: those events are never uploaded to our servers or shared with anyone. You can turn it off any time, or revoke access in iOS Settings.
• Google Calendar (optional): if you connect Google Calendar, SuperCal asks Google for read-only access to your calendars and events. We keep a long-lived access token (and your Google email address) so we can fetch your events when you open the app. The events themselves are fetched on demand to show you and are not stored on our servers. You can disconnect any time in SuperCal (this also revokes the token) or at myaccount.google.com/permissions.
• Notifications and purchases: if you turn on notifications on iPhone or iPad, we store your device’s push-notification token so we can alert you about friend requests and invites. If you subscribe to SuperCal Plus, Apple processes the payment. Our subscription provider, RevenueCat, receives your SuperCal user ID, your purchase and transaction information (such as Apple’s purchase receipt) and technical information such as your device type and operating system, so it can confirm your subscription, and it tells us whether your subscription is active. RevenueCat also provides subscription reporting and analytics, such as purchase history and subscription performance. RevenueCat acts as our data processor; see RevenueCat’s privacy policy for details. We store that status and its expiry date with your account. We never see your card or payment details.
• Technical data: your sign-in session and a user ID, which is also what identifies you to RevenueCat. For Sign in with Apple accounts we also keep Apple’s token so we can revoke it when you delete your account.

We do not collect your location, your phone’s address book, or advertising identifiers. (Friend connections you make inside SuperCal are stored as part of your account.) Apart from RevenueCat’s subscription reporting, we do not use third-party analytics. We have no advertising and do not track you across other companies’ apps or websites.

How we use it

Only to run SuperCal: to sign you in, store and sync your calendars across your devices, and deliver invites and shared calendars to the friends you choose.

SuperCal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to display it to you inside SuperCal; we do not use it for advertising, sell it, or share it with anyone, and no person at SuperCal reads it.

Who can see your data

Your calendars are private. An event or calendar is visible to another person only if you invite or share it with them, and only friends who accepted your request can receive invites. Your name, handle and picture are visible to other signed-in users who search for your handle.

Where it’s stored

Your data is stored with our backend provider, Supabase, on cloud infrastructure, and is protected in transit with TLS. We also use Apple for sign-in and payment processing, Google for sign-in and optional Calendar access, and RevenueCat to manage subscriptions as described above.

Deleting your data

You can delete your account at any time in Settings → Account → Delete my account. This permanently removes your profile, calendars, events, invites, friend connections and preferences, and revokes the Sign in with Apple token. Backups are purged on the provider’s normal schedule. You can also email us to request deletion.

Children

SuperCal is not directed to children under 13 and we do not knowingly collect their data.

Changes and contact

We’ll post any changes here. Questions: wolfy317@hotmail.com.