Privacy Policy
Short version: Zhedor Calendar keeps your schedule in sync across your phone, tablet and the web through our own server. We do not show ads and never sell or share your data with third parties. The Android app sends anonymous usage statistics (which screens are opened, how often the app is used) to Google Analytics for Firebase; you can switch this off in Settings at any time. An account is anonymous by default — no name, phone or password required.
Cloud sync — what we store on our server
So that all your devices show one schedule, the app stores on our server (operated by the developer):
- Your events — title, notes, location, start/end time, all-day flag, time zone, repeat rule, colour/emoji and reminder offsets.
- An anonymous account identifier and one or more device tokens (random secrets that let your devices reach the account). No name or password.
- Optionally, your e-mail — only if you add it as a recovery anchor (see below).
If you have other device calendars enabled inside the app, the events shown from them may also be synced to our server so your other devices and the web version display the same combined schedule. You control which calendars are visible in Settings.
Accounts and pairing
On first launch the app creates an anonymous account tied to a random device token — no sign-up, no personal details. To use your calendar on another device or in the browser, you pair them with a one-time QR code / link shown in Settings → «Open on computer». Pairing simply links the new device to the same account.
E-mail as a recovery anchor (optional)
Because an anonymous account has no password, losing your only device would mean losing the account. To prevent that you may attach an e-mail address; we then send a one-time code to confirm it. The e-mail is used only to let you recover access to your own account and is never used for marketing.
Web version
The web app at zhedor.com/app/calendar/web talks to the same server over HTTPS and shows the schedule of the account it is paired with. It stores only your account token in the browser's local storage.
Calendar permission (Android)
The app asks for calendar access to read and write events in the calendars already on your phone (for example Google accounts synced by Android), and to mirror your Zhedor events into the system calendar so widgets and other calendar apps can see them. We do not sign in to your Google account or read your Google data directly — only the events Android already exposes on the device.
Pika lessons (optional)
If you connect a personal Pika feed link in Settings, the app periodically downloads your own lesson schedule over HTTPS from that link. Nothing is sent to Pika except the request for your feed. Disconnect at any time in Settings.
Feedback (optional)
The «Send feedback» form transmits only what you type (message and, if you choose, your name and contact) to the developer. It is used solely to answer you and improve the app.
Cloud sync is opt-in
Cloud sync is off by default. Until you switch it on in Settings → Cloud account → Cloud sync (or sign in with a social account, which turns it on), the app creates no account for you and sends no events to our servers — your calendar stays on your device. Turning sync off again stops any further sending; to erase what was already stored, delete the account (below).
Anonymous usage statistics (Android, can be switched off)
To see how many people use the app and which screens they open, the Android app includes Google Analytics for Firebase. It is on by default and can be switched off at any time in Settings → Anonymous statistics; switching it off also erases the statistics identifier stored on the device. What is sent: a random app-instance identifier, app version, device model and OS version, coarse location derived from the IP address (country/region), and usage events such as «app opened» or «settings screen opened». What is never sent: your events, calendar names, e-mail, account or device tokens, and the advertising ID (advertising-ID collection and ad personalisation are disabled in the app). Statistics are processed by Google LLC (USA) under Firebase's privacy terms and kept for 2 months. The web version does not include this SDK.
Retention and deletion
Events you delete are removed from your devices and marked deleted on the server; deletion markers older than 180 days are purged automatically.
To erase everything, delete your account: in the app open Settings → Cloud account → Delete account and data, or use the public page Delete your account if the app is already uninstalled. Deletion is immediate and irreversible — the account, all synced events (including deletion markers), devices, social sign-in links, Pika connections and push subscriptions are removed at once. There is no retention window and no backup we can restore from.
What the app does NOT do
- No tracking across other apps or sites; the only analytics is the anonymous usage statistics described above, and you can turn it off.
- No advertising.
- No sale or transfer of personal data to third parties.
Contact
Questions about this policy, or account deletion requests: Telegram @zhedor.