Who is responsible?
The operator below is responsible for the personal information processed to provide Done Cal’s website, browser beta and mailing lists. This notice also links to the additional details for our native apps.
Operator: MAIA MOORE, LDA
Based in: Portugal
Registered office: Rua 5 de Outubro, 205, 2.º Esq., 4100-175 Porto, Portugal
Company registration: NIPC 518831418
Privacy & support: cici@aranlabs.com
This notice describes features when enabled. Preview availability does not mean accounts, calendar connections or email delivery have been activated. Guest events stay on your device; requests to the website still reach its host.
What we collect and why
Browser accounts
Your email address, verified account identifier and sign-in records let us create your account, verify it is you, maintain sessions and provide support. Done Cal’s server handles email verification and authentication; Resend delivers the sign-in codes. We do not ask you to create a password in the browser beta.
Your events and progress
When signed in, event titles, dates, times, calendar names, source identifiers, checkmarks, postponements and Focus records are saved on the Done Cal server so you can use them in another browser. Local events are copied to an account only when you choose the transfer control.
Without an account, your created or imported events and progress remain in this browser’s local storage. Downloaded backups contain calendar information and are saved wherever you choose.
Connected calendars
If you connect Google or Microsoft, we receive authorization credentials, your selected calendar names and identifiers, and calendar event responses from that provider. The server processes event titles, dates, descriptions, locations, guest details, recurrence rules, reminders and attachment links as needed to display and edit events. Detailed provider fields are fetched when you open the editor. Encrypted calendar-event operation records support retries and recovery; these can include event details and are eligible for removal during cleanup after 30 days. Google Calendar and Outlook access lets you view events and, after granting editing permission, create, edit, postpone or delete events in selected calendars you can write to. These event changes are sent to the connected provider. For supported Google recurring events, you choose whether to change one occurrence, that and following events, or the whole series. Outlook recurring edits affect only the selected occurrence. Guest invitations and update notifications are sent through the provider according to the save options and provider rules. Subscription links refresh events into Done Cal but cannot send changes back; their URLs are encrypted on the server. ICS and CSV file imports are one-time copies and do not sync subsequent changes. Completion checkmarks and Focus records stay in Done Cal.
Optional connected task lists
Google Tasks connections are not enabled in the current calendar-review release. Where connected task lists are made available and you separately enable Google Tasks or Microsoft To Do access, Done Cal reads task-list names and identifiers and the task information returned by the provider. It uses task titles, identifiers and completion states to display the lists you select and save the task changes you request. Creating, renaming, completing or deleting a connected task can change that task in Google Tasks or Microsoft To Do. This is separate from calendar-event completion checkmarks, which stay in Done Cal. Encrypted task-operation receipts support retries and matching created tasks to their source; they are retained until account deletion rather than following the 30-day calendar-event operation cleanup. Deleting your Done Cal account removes these receipts from the active service and does not delete original tasks in the provider.
Optional Google event tools
When requested, Google availability tools process guest email addresses and free/busy intervals to suggest meeting times. Google Meet links are created through Calendar. Google’s file picker grants access to the Drive files you choose; Done Cal does not request access to metadata for all your Drive files. Selected file names, identifiers, types and links are returned to the event editor. Picker authorization expires after 10 minutes; temporary selection records are encrypted and removed when the selection is closed, or during cleanup after 30 days if abandoned. Uploads and meeting notes create files in your Google Drive only when you request them. File contents are sent to Google for those operations. Files remain in Drive if you cancel the event, and their sharing permissions are managed in Drive.
Beta and launch emails
The optional signup form collects your email, optional name, main device, separate email choices and confirmation/unsubscribe records. We use those choices for beta participation and feedback, App Store launch announcements, and Google Play launch announcements. Each store is a separate choice. We confirm your email before adding you to the selected lists.
Support and security
If you contact us, we receive the information you send and use it to address your request. The website’s support-note builder does not upload its text. Web and authentication requests also involve connection information such as IP addresses and request details. Done Cal uses request counts and expiring sessions to limit abuse; hosting and authentication providers may keep security and delivery logs.
Why we are allowed to use it
Where GDPR applies, we rely on performing our agreement with you for account access, requested calendar features and related service messages. We rely on your consent for optional beta and store-launch emails. You can withdraw that consent without losing access to the browser app.
We rely on legitimate interests for proportionate fraud prevention, service security and responding to general enquiries, balanced against your rights. Where a specific legal requirement applies, we may process or retain information to meet that obligation. Calendar-provider permission is separate from mailing-list consent and is not, by itself, a GDPR legal basis. We obtain account and signup information from you, calendar information from your selected provider, and technical records from your requests and service providers. Avoid entering sensitive information, such as health details, into event titles or sending it to support; the service does not require it.
An email address is needed for an account or mailing-list subscription. Your name is optional. Connecting a provider is optional: you can create events or import a calendar file instead. The main-device field is required only on the beta signup form so we can understand participation across platforms.
Who receives information?
- Resend delivers sign-in codes and other emails, and provides the selected Done Cal mailing lists. This includes recipient details, message content, delivery status and suppression information. It is not sent your calendar database by the mailing-list integration.
- Google or Microsoft handles the provider account you choose to connect, under its own terms and privacy notice.
- Our hosting provider and authorized operators support the server and its security. Railway hosts the browser application in Europe West (Netherlands). Railway’s primary processing operations, including relevant administration and support, take place in the United States. Its authorized subprocessors may process data elsewhere. The current service volume has no scheduled or existing Railway volume backups. Railway’s Pro log viewer provides a 30-day browsing window; that window is not a verified deadline for destruction of every infrastructure log.
We may disclose information when legally required, or where necessary to protect people and the service, subject to applicable law. Done Cal does not sell calendar or signup information or use it for advertising profiles. The browser service does not use automated decisions that produce legal or similarly significant effects about you.
Where processing happens
Railway hosts the browser application in the Netherlands. MAIA MOORE, LDA operates from Portugal. Resend processes email data in the United States even when email is sent from a European region. This does not mean every provider operation, support function or subprocessor is confined to the EU. Railway and Resend publish data-processing terms and subprocessor information.
We have a signed data-processing agreement with Railway and an executed Resend agreement. Their terms incorporate EU Standard Contractual Clauses and applicable UK transfer terms for covered transfers. Our application region is the Netherlands; Resend stores email data in the United States. Provider support and subprocessors can involve further international processing. Contact cici@aranlabs.com for information about the safeguards applicable to your data or a copy, with necessary confidential details removed.
Provider terms include Railway’s DPA and Resend’s GDPR terms. These describe contractual safeguards, including standard contractual clauses. Resend states that its DPA takes effect at signup, that stored customer data is in the United States, and that standard-plan email and log data is retained for 30 days with seven-day backups. Sending-region selection does not change its storage location. Our Railway data-processing agreement has been signed, and Resend’s executed data-processing terms are retained in our provider records. Contractual safeguards do not mean all processing takes place in Europe. Contact us for information about applicable safeguards or a copy, subject to necessary redactions.
EU establishment: MAIA MOORE, LDA is established in Portugal. Privacy requests can be sent directly to the contact and registered office above.
How long information is kept
Accounts and saved events: Your account, saved calendar copies, completion and Focus records remain while the account exists; we do not automatically delete inactive accounts. Disconnecting removes that provider connection and its current event copies from Done Cal. Account deletion removes active private account records and queues related provider cleanup, which retries when unavailable. Minimal retired account identifiers remain to prevent stale devices restoring deleted data; completed deletion-job receipts are kept for seven days. Original Google or Microsoft events and files remain with their provider. Calendar-operation records are eligible for cleanup after 30 days; task-operation receipts, where enabled, remain until account deletion. The current Railway service volume has no configured snapshots or backup schedule. Removing active database rows is not a promise of immediate secure erasure from every storage layer or provider log.
Mailing-list records: A signup confirmation link is valid for 48 hours; expiry does not itself delete the signup record. Confirmed waiting-list records remain until the request or subscription is removed. Unsubscribing stops marketing eligibility, with provider-list removal queued for synchronization. We retain only the consent or suppression information needed to record your choice, respect opt-outs and address applicable legal obligations or claims. Those records do not have an automatic expiry timer. Resend’s standard-plan email and delivery-log retention is 30 days, with backups retained for seven days; contacts require a separate deletion action. Requests for deletion can be sent to cici@aranlabs.com.
Support correspondence: We keep correspondence to resolve and document your request and address applicable legal obligations or claims. We review whether it is still needed when the request closes; our mailbox does not have an automatic deletion timer. You can ask us to delete unnecessary information at cici@aranlabs.com.
Browser account sessions last up to 30 days and sign-in challenges last 10 minutes. Provider-connection authorization attempts expire after 10 minutes. These validity periods are not the retention period for the account itself. Local browser data remains until you remove it or your browser clears it.
Unsubscribing stops Done Cal marketing eligibility immediately; removal from Resend lists is queued for synchronization. Consent and suppression records may need to remain for the approved retention period to respect your choice. Signing out does not delete an account, and deleting an app does not cancel an Apple subscription.
Your rights and controls
You can request access, correction, deletion or restriction of personal information, and portability where it applies. You can object to processing based on legitimate interests for reasons relating to your situation; we must stop unless we demonstrate overriding compelling grounds or need the information for legal claims. Your objection to direct marketing is unconditional: we must stop that use. You can withdraw consent to optional emails at any time, as easily as giving it. These rights depend on the circumstances and applicable law; withdrawing consent does not change the lawfulness of earlier processing.
Use Your data choices for the available controls and contact route. We may ask for proportionate identity verification. Under GDPR, we normally respond within one month; if complexity or the number of requests requires an extension of up to two further months, we explain why within the first month. Requests are normally free. A reasonable fee or refusal is possible only where the law permits, such as a demonstrably manifestly unfounded or excessive request. If we refuse, we explain our reasons and your complaint and judicial-remedy options.
You may complain to a supervisory authority, including where you live, work or believe an infringement occurred. Find your authority in the EDPB directory. You do not have to contact us first.
Google data
Done Cal’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google data is used only to provide the calendar, connected task-list, progress, availability, attachment and meeting-note features you request, not to build advertising profiles or train general-purpose AI models.
A short guide for younger users
Your email lets you sign in. Your calendar can contain private things about you and other people. Only connect calendars you are allowed to use, and check who can see a calendar before sharing it. Do not share your sign-in code. You can export your data, delete your account or ask us for help using Your data choices. Optional email lists are separate from your account; you can unsubscribe without deleting it.
Security and your device
Saved account calendar content and provider credentials are encrypted on the server, and account requests are checked against the signed-in user. This is server encryption, not end-to-end encryption: the service must read records to provide its features. Keep downloaded backups private and sign out on shared devices.
New browser accounts and beta access requests are for people aged 13 or older. Optional marketing is available from age 16 and requires a separate opt-in. We keep a marketing eligibility flag, not your age or date of birth. We ask for your age before signup, use it to check eligibility, and do not retain your age or date of birth. The beta is a general planning service and is not directed at children under 13. If you believe a child has provided information inappropriately, contact us so we can review it.
Native apps and cookies
The optional account-calendar mode on iPhone and iPad uses this browser service and the data handling described above. It does not copy device calendars or their progress into the account. In device-calendar mode, the iPhone and iPad app uses device calendar access and private iCloud completion records. Its current storage and purchase identity are separate from browser accounts. Read the native app privacy details for EventKit, iCloud, widgets, Watch and TelemetryDeck analytics.
Our Cookies & storage notice explains the essential browser storage. Creating an account does not automatically join an email list.
Changes and questions
We update the version date when this notice changes and provide additional notice for material changes where required. A new optional email purpose requires its own choice. Contact: cici@aranlabs.com.