Only these three Google accounts can sign in. Anyone else is turned away and nothing is saved for them.

• robertbotto88@gmail.com
• robert@adly.com
• taybotto@gmail.com

Your Google Calendar events and your free and busy times, plus your name and email address from Google sign-in. The app reads only your own calendars, not other people's calendars your account happens to be able to see.

It asks Google for exactly these 5 permissions, nothing more:

• openidConfirms which Google account is signing in.
• userinfo.emailYour email address, to check it is on the household list.
• userinfo.profileYour basic Google profile (name), shared by Google at sign-in.
• calendar.eventsRead your calendar events, and add a shared event when one of you asks the app to.
• calendar.events.freebusySee when you are busy or free, to find time together.

It does not ask for Gmail, contacts, Drive, or permission to share or delete your calendars.

When you sign in, Google gives the app a refresh token so it can keep reading your calendar without asking you to sign in every day. That token is stored encrypted with AES-GCM in the app's database, together with your email address. It is never shown in the browser and never shared with anyone.

Your device keeps a signed sign-in cookie that holds only your email address, so the app knows which household member is using it.

Event details (titles, times, places, notes) are fetched live from Google when you open the app. They are not saved in the app's database.

• No analytics or tracking.
• No ads.
• Your data is never sold, and never shared with anyone outside the household.

Botto Calendar's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Email robertbotto88@gmail.com and Robert will disconnect your account in the app. Disconnecting deletes that account's stored tokens from the app's database.

You can also remove the app's access yourself at any time from your Google Account, under Security, Third-party apps and services (myaccount.google.com/connections). After that the app can no longer read your calendar, and it deletes your stored tokens the next time it tries to renew access.

Email robertbotto88@gmail.com.