Privacy Policy

Who We Are

Data We Collect

Account Data

Email address and name when you register. You can sign in via email or through social login providers (Google, Apple, Microsoft, GitHub, LinkedIn, Discord, Twitter/X). When using social login, we receive your name and email from the provider. Optionally, you may provide a phone number for SMS or WhatsApp notifications, or connect a Telegram account. Authentication is handled via secure, signed session tokens.

Poll Data

Polls you create (title, description, time options), your votes, and messages in poll chats. This data is visible to all participants of the respective poll.

Calendar Data

When you connect a calendar (Google Calendar, Microsoft Outlook, iCloud, CalDAV, or ICS feed), we access your events to determine availability. Event details are processed in real-time for scheduling and are not permanently stored. When a poll is finalized, calendar events may be created in your connected calendar if you have granted write access. Calendar connection credentials (OAuth tokens, CalDAV passwords) are stored encrypted (AES-256-GCM) on our servers.

Booking Data

If you create a booking page, visitor names, email addresses, phone numbers (if required), and booking details are collected and stored. Booking confirmations and reminders are sent to both parties.

Buddy Group Data

If you join a buddy group, your availability preferences, votes on meeting times, and chat messages are shared with other group members.

Notification Data

If you enable push notifications, we store device tokens to deliver notifications to your device. These tokens are removed when you sign out or uninstall the app.

Usage Data

We do not use analytics tools, tracking pixels, or advertising SDKs. We do not use cookies for tracking purposes. Session cookies are used solely for authentication. We use Sentry for error monitoring, which may collect technical error data (stack traces, browser type, OS) to help us fix bugs.

How We Use Your Data

• Providing the scheduling, availability coordination, and booking service
• Authenticating your identity and securing your account
• Reading and writing calendar data to display availability and create confirmed events
• Sending poll invitations, booking confirmations, and notifications via email, SMS, WhatsApp, or Telegram
• Responding to your support requests

Data We Do NOT Collect

• We do NOT use analytics or advertising SDKs
• We do NOT sell any data to third parties
• We do NOT share your calendar data with other users (only free/busy status)
• We do NOT permanently store calendar event details

Third-Party Services

Social Login Providers

You may sign in using Google, Apple, Microsoft, GitHub, LinkedIn, Discord, or Twitter/X. We receive your name, email address, and profile picture (if available) from the chosen provider. We do not access any other data from these providers.

Cloudflare

Our website is served via Cloudflare Workers. Cloudflare may process connection metadata (IP address, browser type) for security and performance purposes. Cloudflare Privacy Policy

Google Calendar

If you connect Google Calendar, we use Google's OAuth 2.0 to access your calendar data for availability checks. With your permission, we may also create events in your calendar when a poll is finalized. Google Privacy Policy

Microsoft Outlook

If you connect Microsoft Outlook, we use Microsoft's OAuth 2.0 (Graph API) to read your calendar events and, with your permission, create events when a poll is finalized. Microsoft Privacy Statement

Apple iCloud / CalDAV

If you connect an iCloud or CalDAV calendar, your credentials are stored encrypted on our servers and used to fetch and, where supported, create calendar events.

Resend (Email)

We use Resend to deliver transactional emails (invitations, confirmations, reminders). Resend processes recipient email addresses for delivery purposes only.

Twilio (SMS / WhatsApp)

If you enable SMS or WhatsApp notifications, your phone number is shared with Twilio for message delivery. Phone number verification is handled via Twilio Verify.

Telegram

If you connect Telegram notifications, your Telegram chat ID is stored to deliver notifications via our Telegram bot.

Zoom

If you enable Zoom integration, we create Zoom meetings on your behalf when a poll is finalized or a booking is confirmed. We store OAuth tokens to access the Zoom API.

Sentry (Error Monitoring)

We use Sentry to monitor and fix application errors. Sentry may collect technical data such as stack traces, browser type, and operating system. No personal data is intentionally sent to Sentry.

GIPHY

GIFs in chat are loaded from GIPHY. When you search for or view GIFs, your request is sent to GIPHY's servers.

Data Sharing

We share your data only in these limited cases:

• Poll Participants: Your name, votes, and chat messages are visible to other participants of polls you join
• Service Providers: Cloudflare (hosting), Resend (email), Twilio (SMS/WhatsApp), Telegram (notifications), Google and Microsoft (calendar), Zoom (video conferencing), Sentry (error monitoring), and GIPHY (GIFs) process data as described above
• Legal Requirements: If required by law or valid requests by Swiss authorities

We do NOT sell your personal data. We do NOT share data with advertisers.

Data Storage & Security

Your data is stored on a self-hosted server in Switzerland. All data transmission is encrypted via HTTPS. Calendar credentials are encrypted at rest using AES-256-GCM. Session tokens are cryptographically signed using HMAC-SHA256.

While we follow industry best practices to protect your data, no method of electronic storage or transmission is 100% secure.

Data Retention

Your account data and polls are retained as long as your account is active. Upon account deletion, your personal data, polls, and calendar connections are permanently removed. Votes and messages in other users' polls may be anonymized rather than deleted to maintain poll integrity.

Your Rights

Under Swiss law (nDSG) and GDPR (for EU/EEA residents), you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing
• Data portability
• Withdraw consent at any time (e.g., disconnect a calendar)

To exercise these rights, email info@timergy.com.

Children's Privacy

Timergy is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you are a parent and aware that your child has created an account, please contact us.

Changes

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. For material changes, we will notify registered users via email.

Contact

Questions about this Privacy Policy? Email info@timergy.com.