LEGAL · X CALENDAR
Privacy Policy
X Calendar Privacy Policy
Last updated: 1 November 2026 · Last reviewed: 1 November 2026
X Calendar is designed to keep your information private and simple. This policy explains what the app and the services it uses process.
Built by Cam provides X Calendar and is the data controller for the personal data described here. Contact hello@xcalendar.app with privacy questions or requests.
Information We Store
Account information
Your Firebase account ID, email address, sign-in provider and optional display name are used to provide your account. For email sign-in, Firebase Authentication receives your email and password to authenticate you; X Calendar does not store your password. If you use Sign in with Apple, Apple and Firebase handle the sign-in credential; X Calendar does not store your Apple password or raw sign-in token. If you use Google Sign-In, Google supplies your account identifier, email address and optional profile name to authenticate with Firebase. X Calendar does not store your Google password. Google’s and Firebase’s SDKs keep the credentials needed to restore your session. Linking Google to an existing signed-in account requires your confirmation. We also store account setup and Terms acceptance timestamps.
Calendar information
Calendar names, marked dates and their recording times, Daily Note text and its associated calendar day, creation and update dates, pinned state, ordering, deleted/restored state, and calendar customisation are stored. Customisation can include X, Tick, Block or Emoji marker style, marker colour and calendar colour. Marked dates are the underlying X history and are not changed by visual customisation. You decide what to write in a Daily Note; it may contain sensitive information.
Preferences
Depending on the features you use, preferences include appearance and app-icon choice, Home screen sorting/display/filter choices, Face ID preference, notification and reminder settings, onboarding and release-note state, and local review-request safeguards. Many are stored on the device. Appearance mode, onboarding completion, notification preferences and Premium calendar-access choices may also be stored with your signed-in account so they can be restored.
Premium status
X Calendar stores the entitlement state needed to decide which Premium features are available, including subscription or lifetime access and calendar-access choices. Apple processes purchases and payment details through the App Store. X Calendar does not receive or store your payment-card details. StoreKit supplies verified transaction status such as product, expiry or revocation information. The app may keep limited transaction identifiers on your device to avoid counting the same purchase more than once in analytics; it does not keep a complete App Store transaction ledger.
Purchase Processing with RevenueCat
We use RevenueCat to process App Store purchase history alongside X Calendar’s StoreKit purchase system, including synchronising purchases made before RevenueCat was introduced. RevenueCat receives purchase and subscription records and an app-specific customer identifier. Its SDK also sends technical information such as app and operating-system versions, device model, preferred languages, storefront information and Apple’s identifier for vendor when available. This supports purchase validation, purchase-history synchronisation and purchase-related reporting. X Calendar does not send your calendar contents, name, email address or Firebase account ID to RevenueCat through this integration. Apple processes payments; X Calendar and RevenueCat do not receive your payment-card details.
RevenueCat uses a separate SDK-generated customer identifier rather than your X Calendar account ID. Purchase processing can continue when the app starts or returns to the foreground and when transactions are synchronised; it is not limited to the one-time migration of older purchases.
How Your Data Is Used
Your data is used to sign you in, sync and restore calendars, show your calendar history and insights, provide widgets, schedule reminders, enable Premium features, create exports you request, and keep the app reliable. Your data is never sold.
Purposes and Legal Bases
We use account, calendar, Daily Note and purchase-status data to provide the features and Premium access you request under our contract with you. We use limited usage analytics and crash diagnostics to understand feature use, investigate faults and improve reliability on the basis of our legitimate interests in operating X Calendar. We may retain information where needed to meet legal obligations or handle disputes. Notifications are optional and can be switched off in the app or iPhone Settings.
Account Backup and Cloud Sync
When you are signed in, your account profile, calendars, marked dates, Daily Notes, calendar customisation, selected preferences and relevant Premium access state may be stored in cloud records linked to your X Calendar account so they can sync across supported sessions and be restored after reinstalling. X Calendar uses Firebase Authentication and Cloud Firestore for this service.
Analytics and Crash Diagnostics
Firebase Analytics receives events about feature use, such as onboarding completion, calendar creation or opening, marking or unmarking a date, reminders, Premium screen views, purchases and native review-prompt requests. These events use limited counts or plan labels where needed and do not include calendar names, marked dates or other calendar-entered text. Firebase may also process standard app, device, session and app-instance technical information.
Firebase Crashlytics receives crash and diagnostic reports to identify crashes and reliability problems. X Calendar may attach technical context such as the current screen, Premium access state, calendar count, data-loading state, lifecycle state and malformed-data diagnostics. It does not intentionally attach calendar titles, marked dates or user-entered text to these reports.
Widgets and On-Device Storage
X Calendar stores a local calendar archive in an iOS app-group area shared with its widget. The archive includes calendar records, Daily Notes and the account identifier. To display Home Screen widgets, it also creates a smaller snapshot with calendar IDs and names, marked-date keys, totals and recent-date metrics, marker style and colour, calendar colour, Premium locking state and widget appearance. These device copies are not a separate cloud account.
Notifications and Reminders
General and Smart Reminders are scheduled with Apple’s local notification system. Reminder text, calendar names and related scheduling information are placed on your device for notification delivery; they are not sent through a separate X Calendar push-notification server. Reminder preferences and Smart Reminder choices may also be stored in your signed-in account so they can be restored. You can disable notifications in X Calendar or iPhone Settings.
Exports
CSV and PDF exports are created on your device only when you request them. They can contain calendar names, marked dates, statistics and the full text and dates of Daily Notes. Check the file before sharing it: recipients and services you choose can see its contents. You choose where to save or share the file using Apple’s share sheet.
Third-Party Services
X Calendar uses Apple Sign in with Apple and StoreKit/App Store services, Google Sign-In, Firebase Authentication for account sign-in, Cloud Firestore for signed-in sync and backup, Firebase Analytics for usage measurement, Firebase Crashlytics for crash diagnostics, and RevenueCat for App Store purchase-history processing, synchronisation and purchase-related reporting. These providers process information under their own terms and privacy policies. Apple controls App Store purchase records and payment information independently of X Calendar.
Account Deletion
You can delete your X Calendar account in Settings → Account after the required identity check. The app removes your profile and cloud calendar documents, then your sign-in account, and reports completion only after those deletions are confirmed. Deletion requires an internet connection; keep the app open while it runs. If deletion is interrupted or fails, some data may already have been deleted. Return to the app and retry. A pending deletion restricts account data operations on that device and prevents retained local calendars from being uploaded. On confirmed completion, X Calendar signs you out and removes the deleted account’s managed calendar archive, widget snapshot and selected account preferences on that device. If local cleanup cannot finish, the app reports the problem and retains retry information.
Account deletion cannot remotely erase offline copies on other devices or files you have exported or shared. SDK-managed caches and some device preferences may remain until the app or operating system clears them; this process is not a secure erase of every stored byte. Another account’s locally stored calendars are preserved.
Minimal deletion and retry records, including the account identifier and pending-deletion state, may be retained locally to protect against stale uploads and allow another attempt. Content-free cloud safeguards for previously deleted calendar IDs may also remain. These safeguards do not copy calendar names or marked-date history. Deletion runs in the app and can be retried after an interruption. Apple-controlled purchase records and App Store account information are not deleted by X Calendar; manage those through Apple.
Deleting your X Calendar account does not cancel an App Store subscription or automatically delete Apple’s purchase records. RevenueCat maintains separate purchase-processing records; in-app account deletion does not automatically erase those records. Contact hello@xcalendar.app with questions or requests concerning purchase-related personal data. We may need additional information to locate and verify the separate purchase-processing record; your email address alone may not identify it.
Purchase-related records are handled under the applicable provider agreements and privacy policies, including retention needed for legal obligations, disputes and purchase validation. Account deletion does not prevent a later app installation or purchase synchronisation from sending App Store purchase information to RevenueCat again.
Analytics, crash diagnostics, service logs and backups are subject to the relevant provider’s retention and privacy procedures; account deletion does not automatically erase these separate records. Contact us about privacy requests affecting them. We do not promise immediate erasure from every provider backup or independently saved export.
Website Visits
Visiting xcalendar.app does not require an X Calendar account. Our website host may process your IP address, browser and device information, pages requested and request times to deliver and protect the site. If you email us, we receive the information you choose to send. Links to other websites are governed by their own privacy notices.
Retention and Security
We keep account and cloud calendar content while your account remains active, unless you delete it or ask us to act on a valid data request. Limited deletion safeguards and retry records, provider backups, purchase records and service logs may remain for the purposes described above and for as long as the relevant provider or legal obligation requires. You control exported copies and files you share. The app uses Firebase sign-in for cloud access and an identity check before account deletion. The local calendar archive is shared with X Calendar’s widget. No storage or transmission method is completely secure.
International Processing
Our service providers may process information outside the United Kingdom, including in the United States. Transfers can be subject to an adequacy decision or contractual safeguards, depending on the provider and destination. Contact hello@xcalendar.app for details of the safeguards applicable to your information.
Your Rights
Depending on applicable law and the circumstances, you may ask to access, correct, erase or restrict your personal data, receive a portable copy, or withdraw consent where we rely on it. You may object to processing based on legitimate interests, including usage analytics. Contact hello@xcalendar.app to exercise these rights or ask a privacy question. UK users may also complain to the Information Commissioner’s Office; users elsewhere may contact their local data protection authority.