Privacy policy

Effective October 8, 2026

Quando is a calendar and task app for Mac and Android. This policy explains what information Quando collects, why, who it is shared with, and how you can delete it. “Quando”, “we” and “us” mean the team that runs the Quando apps and the service at quandocal.com.

Information we collect

Your account

• Email address and password. Sign-in is handled by Firebase Authentication (a Google service). Quando's servers never see your password; they receive a sign-in token that confirms your email address.
• Settings such as your time zone and your default alert for new events.

What you put in Quando

• Calendars, events (title, time, location, notes, meeting link, guests' names and email addresses, alerts) and tasks.
• An activity history of changes, so you can see and undo what you or an AI agent changed.

Connected calendar accounts (Google Calendar)

When you connect a Google account, you choose to give Quando access to it through Google's sign-in screen. Quando requests:

• Your Google account email address (email, openid), to show which account is connected.
• Your list of calendars (https://www.googleapis.com/auth/calendar.calendarlist.readonly), read-only, to show your Google calendars with their names and colours.
• Your calendar events (https://www.googleapis.com/auth/calendar.events), to read your events, be notified when they change, and write the changes you make in Quando back to Google Calendar.

Quando cannot create, delete or share Google calendars, and does not access your other Google data. Quando copies your calendars and events (from about 60 days ago onward) into your Quando account and keeps them up to date. It writes to Google Calendar only when you, or an AI agent you have approved, create, change or delete an event in Quando. Google's access tokens are stored encrypted (AES-256).

Devices

• Push tokens. On Android, Quando registers your device with Firebase Cloud Messaging so we can send event reminders. A reminder includes the event's title, time and location.
• On Mac, reminders are scheduled on your Mac as local notifications.

AI agents

If you create an access token for an AI agent or automation, we store a one-way hash of the token (not the token itself), its name, the permissions you chose, and a record of what it read, suggested and changed.

Technical logs

Our servers keep standard request logs (such as IP address, time, and the address requested) to keep the service running and secure. These are kept for 30 days.

How we use information

• To show, sync, and remind you about your calendars, events and tasks.
• To find free time and schedule tasks when you ask.
• To let AI agents you connect do what you allowed, and to ask your approval when needed.
• To keep the service secure, prevent abuse, and fix problems.
• To contact you about your account or important changes to this policy.

We do not use your information for advertising, we do not sell or rent it, and we do not use it to train AI or machine-learning models.

Google user data

• Google Calendar data is used only to provide Quando's calendar features that you can see and use in the app.
• It is not transferred to anyone else except as needed to provide those features (for example, to an AI agent you connected and allowed to read your events), to comply with the law, or as part of a merger or acquisition with your notice.
• It is never used for advertising, never sold, and never used to train AI models.
• People at Quando do not read it unless you ask us to (for example, for support), it is needed for security or to investigate abuse, or the law requires it.

You can disconnect a Google account in Quando (Settings › Accounts or Settings › Calendars). This removes its calendars and events from Quando and revokes Quando's access. You can also remove access at any time from your Google Account permissions.

Who we share information with

We use these service providers to run Quando. They process data on our behalf and may not use it for their own purposes:

AI agents you connect receive the information you allow them to access. What happens to it after that is governed by the agent provider's own terms. We may also disclose information if required by law or to protect the rights and safety of our users.

Keeping and deleting your information

• Your information is kept while your account exists.
• Delete your account in the app (Settings › Account › Delete account). This deletes your calendars, events, tasks, agents, activity, devices and connected accounts from our database right away, and deletes your sign-in account. Encrypted database backups are overwritten within about 7 days.
• Disconnecting a Google account deletes its calendars and events from Quando immediately.
• Undo history is available for 30 days.

Security

Data is encrypted in transit (HTTPS) and at rest. Google tokens are additionally encrypted with a key kept in Google Secret Manager. Access to production systems is limited to the people who run Quando.

Your choices and rights

You can view and change your information in the app, export or correct it by contacting us, and delete it as described above. Depending on where you live, you may have additional rights, such as to access, correct, delete or object to processing of your personal information. To exercise them, email us at the address below.

Children

Quando is not intended for children under 13, and we do not knowingly collect information from them.

Changes

If we change this policy, we will update the date above and, for significant changes, tell you in the app or by email before they take effect.

Contact

Questions or requests: simpleapp4u@gmail.com