Privacy Policy

1. Who We Are and How to Contact Us

The Service is operated by ConfluxCalendar. If you have questions or requests related to support or privacy, you can contact us at:

2. Who May Use ConfluxCalendar

ConfluxCalendar is designed for adults. You may use the Service only if you are:

• At least 18 years old, and
• A parent, guardian, coach, team manager, or adult user with authority to manage schedules and information about the participants in your household or on your teams.

We do not knowingly allow children under 13 to create an account or use the Service directly. Parents and guardians may import or enter information about their children's sports, school, and extracurricular schedules so they can manage family calendars in one place. See “Children's Privacy” below for additional details.

3. Information We Collect

We collect information in three main ways:

1. Information you provide to us directly
2. Information we receive when you import external calendar feeds or connect authentication providers
3. Information collected automatically when you use the Service

3.1 Information You Provide Directly

When you create an account or use the Service, you may provide:

• Account & Profile Information: Your email address, authentication credentials (passwords are cryptographically hashed by Firebase Authentication and never stored in plain text), timezone preferences, and acceptance timestamps for our legal terms.
• Manual Calendars, Events & Customizations: Calendar names, display colors, manual single or recurring events (titles, dates, times, locations, descriptions, statuses), and automation rules (such as child/team name prefixes, time offsets, duration overrides, and split event templates).
• Billing & Subscription Information: When you subscribe to a paid plan, payment details are collected and processed directly by Stripe. We store only non-sensitive billing metadata such as your selected plan tier, billing interval, trial status, and Stripe customer/subscription identifiers.
• Support Communications: Any messages or details you send to us via email.

3.2 Information from Imported Schedules and Third-Party Sources

A core feature of ConfluxCalendar is combining schedules from third-party sports and calendar platforms (such as TeamSnap, GameChanger, SwimTopia, SportEasy, BYGA, MOJO, Google Calendar, and Outlook). When you add a source .ics or webcal:// URL, our servers periodically fetch and parse that feed. Imported feeds may contain:

• Team, school, club, or organization names
• Player or participant names or nicknames (including children)
• Event details, including dates, times, locations, descriptions, statuses, and RSVP links

You are responsible for ensuring you have permission to provide and synchronize these calendar feeds with ConfluxCalendar.

3.3 Information Collected Automatically

When you access the Service or when calendar clients request your outbound feeds, our infrastructure automatically collects standard technical and log data, including IP address, browser or calendar client user-agent, device type, dates and times of access, and HTTP caching headers (such as ETags). We also use essential browser storage and cookies to maintain your authenticated session and theme preferences (light/dark mode).

If you use the free Basic plan, third-party advertising partners (such as Google AdSense) may serve display advertisements and use cookies or device identifiers to measure ad impressions and prevent fraud. You can manage your ad personalization settings at Google Ads Settings. Paid subscription plans (Family and Pro) are completely ad-free and do not load any third-party advertising scripts.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: Creating and authenticating your account, periodically syncing your imported calendar feeds in the background, applying your custom automation rules, and serving your unified outbound .ics feeds.
• To Send Notifications and Transactional Emails: Sending email verification links, password reset emails, billing updates, and (for eligible plans) automated 24-hour schedule change alert emails when events in your imported feeds are added, modified, or cancelled.
• To Process Subscriptions: Managing your free trial, subscription tier limits, renewals, and billing portal sessions via Stripe.
• For Security, Rate Limiting, and Legal Compliance: Protecting the security and integrity of the Service, preventing abuse or unauthorized access, and complying with legal obligations.

We do not sell your personal information or your family's schedule data to third parties.

5. Outbound Calendar Feeds and Sharing Visibility

When you create an outbound calendar export in ConfluxCalendar, we generate a unique subscription URL containing a cryptographically generated unguessable identifier.

• Unlisted by Default: Outbound calendar feed URLs are unlisted and are not indexed by search engines or publicly searchable.
• Access Control: Standard calendar applications (like Apple Calendar, Google Calendar, and Outlook) require unauthenticated read access to poll .ics subscription URLs. Anyone with whom you share an outbound subscription URL can subscribe to and view the events in that feed.
• Revoking Access: You retain full control over your outbound feeds and can modify which source calendars are included or delete an outbound export feed at any time from your dashboard to immediately revoke access.

6. Third-Party Service Providers

To deliver the Service reliably and securely, we rely on trusted third-party service providers that process data strictly on our behalf:

• Cloud Hosting, Authentication & Database (Google Firebase / Google Cloud): Used to authenticate users, store account and event data in Cloud Firestore, cache .ics feeds in Cloud Storage, and run background synchronization tasks.
• Payment Processing (Stripe): Used to process subscription checkouts, manage billing cycles, and host the customer billing portal.
• Transactional Email Delivery (Resend): Used to deliver urgent 24-hour schedule change alert emails and service notifications.
• Advertising & Affiliate Networks (Google AdSense, Amazon Associates): Used to support the free Basic plan with non-intrusive banner advertisements and curated affiliate links. ConfluxCalendar is a participant in affiliate programs (including the Amazon Services LLC Associates Program), earning commissions from qualifying purchases at no additional cost to you. We do not provide your imported calendar events, family details, or children's schedules to ad networks.

These service providers are permitted to use your information only as necessary to provide these services to ConfluxCalendar and are not permitted to sell your personal information or use it for their own independent marketing.

7. How We Share Information

We share your information only in the following limited circumstances:

1. At Your Direction: When you share an outbound .ics subscription link with family members, coaches, or calendar applications.
2. With Service Providers: As described in Section 6 above, to host, operate, bill, and support the Service.
3. For Legal and Safety Reasons: When required to comply with applicable law, regulation, legal process, or enforceable governmental request, or to enforce our Terms of Service and protect the security, rights, or safety of ConfluxCalendar, our users, or the public.
4. Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case we will provide notice where required by law.

We do not sell your personal information.

8. Children's Privacy

ConfluxCalendar accounts are intended exclusively for adults (18 years and older). We do not knowingly collect personal information directly from children under 13 or allow children under 13 to register for an account.

Adult parents, guardians, and coaches may import schedules or create rules that include children's names or activities for family scheduling purposes. If you believe a child under 13 has created an account or provided personal information directly to us without parental consent, please contact us at privacy@confluxcalendar.com and we will promptly delete the account and associated data.

9. Data Retention and Security

We retain your account and schedule information for as long as your account remains active and as needed to provide the Service. When you delete an imported calendar, manual event, automation rule, or outbound export feed in the app, it is removed from your active calendars and cached export files are invalidated. We may retain limited backup, billing, or audit records for a reasonable period after deletion as required to comply with legal or financial obligations, resolve disputes, and enforce our agreements.

We implement reasonable administrative, technical, and physical safeguards—including encrypted HTTPS transport, strict tenant isolation in our database rules, and server-side validation—designed to protect your information against unauthorized access, loss, or alteration. However, no method of internet transmission or electronic storage is 100% secure, and you are responsible for maintaining a strong password and safeguarding your private feed links.

10. Your Choices and Rights

You can manage and control your data in the following ways:

• Access and Update: You can view and update your timezone, imported calendars, manual events, automation rules, and outbound export feeds directly in your Dashboard.
• Delete Schedules or Exports: You can delete any imported calendar, manual event, rule, or outbound export feed at any time within the app.
• Delete Your Account: You may request complete deletion of your account and associated personal data by contacting us at privacy@confluxcalendar.com or support@confluxcalendar.com.

Depending on your jurisdiction (including applicable US state privacy laws), you may have additional rights to request access to, correction of, or deletion of your personal information. Contact us at the email address above and we will respond in accordance with applicable law.

11. International Use

ConfluxCalendar is operated in and primarily intended for users located in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States or other jurisdictions where our cloud infrastructure providers operate.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date at the top of this page and may provide additional notice (such as by email or an in-app notification). Your continued use of the Service after any changes take effect constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: