Calendar Privacy Policy
This privacy policy applies to the Calendar app (hereby referred to as "Application") for Meta Quest devices that was created by Savva (hereby referred to as "Service Provider") as a Free service. This service is intended for use "AS IS".
Information Collection and Use
The Application has no accounts, no ads, and no analytics. The Service Provider does not run any servers and does not collect, sell, or share any of your personal information. To show your schedule, the Application connects to your own Google account with your explicit authorization (see Google sign-in below) and keeps a local cache of your calendar data on your device only:
- Your Google account identifier (email address and display name, obtained from Google when you sign in)
- Your calendars and their events — cached locally so the month, week, day, and agenda views load quickly and can be refreshed
- Your OAuth credentials (access and refresh tokens) that the Application uses to reach the Google Calendar API on your behalf
- Your app settings (preferred view, which calendars are shown, colors, search and filters)
The Application does not gather precise information about the location of your VR device, does not access your contacts, camera, or microphone, and does not use advertising identifiers.
Google sign-in and the Google Calendar API
The Application requires you to sign in with Google to fetch and, where you choose, update your calendar data. Sign-in uses the standard Google consent screen (OAuth 2.0 with PKCE); you decide which permissions to grant, and you can review or revoke them at any time in your Google account settings. With your authorization the Application may:
- Read the list of your calendars and their events, in order to display them.
- Create, modify, or delete events when you add or edit an event inside the Application; such changes are written back to your Google Calendar.
The Application requests the Google Calendar scope plus basic identity scopes (your account email, name, and sign-in identity). Your calendar data remains in your Google account; the Application does not move it to any server of the Service Provider. The way Google collects, uses, and discloses information in connection with your Google account and the Google Calendar service is governed by Google’s Privacy Policy and Terms of Service.
Optional Meta telemetry
The Application uses the Meta Spatial SDK. Meta may offer optional, opt-in diagnostics/telemetry for Meta SDKs; this is governed by Meta’s own privacy policy and terms (see Meta Privacy Policy). Telemetry is disabled unless you opt in through the system or SDK prompts, and opting in is not required to use the Application. The Service Provider does not receive, access, or review any telemetry data.
Permissions
The Application requests only the Internet and Network state permissions, which it needs to reach the Google services described above. It requests no other runtime permissions.
Where Your Data Is Stored
All Application data is stored on your device only:
- A local database that caches your calendars, events, and the last sync time.
- An encrypted preferences store (AES-encrypted, via Android’s Jetpack Security) that holds your OAuth tokens, so your refresh token never touches disk in plain text.
- App preferences (view and display settings).
The Service Provider has no server-side copies of any of this data and cannot access it.
Third Party Access
The only third party that receives any of your information is Google, because your calendar lives in your Google account and the Application reaches it through Google’s API under the authorization you grant. Google’s handling of that information is subject to Google’s own policies. The Application does not otherwise share, sell, or transmit your information to any third party.
The Service Provider may disclose information:
- as required by law, such as to comply with a subpoena, or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Your Data and Your Choices
You stay in control of your Google data:
- Revoke access in your Google account settings (Security → Third-party apps) to stop the Application from reaching your calendar.
- Sign out of the account inside the Application; this removes the Application’s local tokens and cached data for that account.
- Uninstall the Application to remove all of its local data (cache, tokens, and settings) from the device.
Because the Application stores nothing server-side, signing out or deleting the app fully removes your information from the Service Provider’s side; your Google Calendar itself is managed by Google.
Data Retention Policy
All Application data (cached calendars and events, tokens, settings) is stored only on your device and is retained only as long as the Application is installed and signed in. The Service Provider has no server-side copies of your data and cannot access your data. If you sign out or delete the Application, your local data is deleted with it.
Children
The Application is intended for users 13 years of age or older. The Service Provider does not knowingly collect personally identifiable information from children under 13, and does not market to them. If you believe a child has provided information to us, please contact the Service Provider at oisurka@gmail.com so that they can take any necessary actions.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. The Application keeps your data on-device and stores your OAuth tokens in an AES-encrypted store; the calendar cache is kept in the app’s private local database. Because the Service Provider does not host your data, there is no server to breach. The Service Provider provides physical, electronic, and procedural safeguards for any information they process or maintain. No method of transmission or storage is 100% secure, and the Service Provider cannot guarantee absolute security.
Changes
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.
This privacy policy is effective as of 2026-10-31.
Your Consent
By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at oisurka@gmail.com.