Last updated: September 18, 2026
Core Calendar ("Core Calendar," "we," "us," or "our") is a shared family calendar, list, and meal-planning app. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By creating an account or using Core Calendar, you agree to the practices described here.
Account information: your name, email address, and (if you sign up with email/password) a password, which is stored and verified by Firebase Authentication — we never see or store your password ourselves. If you sign in with Google or Apple, we receive only the name, email, and profile photo those services choose to share.
Family & shared content: your family name, invite code, and the names, colors, roles, and photos of the family members you add; every calendar event, list, list item, meal plan entry, and recipe you or another family member creates. This content is shared with — and visible to — every member of your family group, by design.
Calendar sync data: if you connect an external calendar (Google Calendar, Outlook, or a calendar link/webcal URL), we read that calendar's events (read-only) and store them so they appear alongside your own. Outlook access tokens are stored only in your device's secure keystore and are never sent to or stored on our servers. A connected calendar link (webcal/ICS URL) is stored so we can re-fetch it on your behalf.
Device & local storage: a local, on-device cache of your family's calendar, lists, and recipes for fast, offline-friendly loading, and locally scheduled event-reminder notifications — both stay on your device.
Push notification token: a device token used to deliver notifications about shared family updates.
Usage analytics: we use Google Firebase Analytics to understand, in aggregate, how the app is used — for example, which screens are opened and whether people complete steps like creating a family or saving an event. This includes basic device and app information (device model, operating system version, app version, and approximate country) and a randomly generated app-instance identifier. We do not send the content of your calendar, lists, recipes, or family (names, event titles, and so on) to analytics, and we configure it not to collect your device's advertising identifier or use it for ad personalization.
Advertising (free plan only): if your family is on the free plan, we use Google AdMob to show ads — Gold subscribers see none. AdMob may collect your device's advertising identifier, approximate location (derived from your IP address), and ad interaction data (which ads you're shown and how you interact with them) to personalize the ads you see. On iOS, this only happens if you allow tracking when prompted, per Apple's App Tracking Transparency framework. See Section 9 for AdMob's own privacy policy.
To provide and operate the app: create your account, sync your family's shared calendar, lists, and meal plans across devices, keep connected calendars up to date, and deliver the reminders and notifications you've enabled. We also use it to respond to support requests, maintain and improve the app, and comply with legal obligations.
For Gold subscribers, certain features — such as AI-assisted meal and recipe suggestions — use a third-party artificial intelligence service to generate content based on information you provide (for example, your family's existing recipes, dietary preferences, or meal-planning history). Content generated this way is clearly labeled as AI-generated within the app.
AI-generated suggestions are offered for convenience and inspiration only. We do not independently verify their accuracy, nutritional information, or safety — including for food allergies or dietary restrictions — and you should use your own judgment, and consult a medical professional where appropriate, before acting on any AI-generated suggestion, especially where health, safety, or an allergy is a concern.
Information sent to the AI service provider to generate a suggestion may include your meal-planning inputs and the account/family context needed to produce a useful result. That information is processed solely to generate the response and is handled according to the provider's own privacy and data-use policies; we do not use your family's private calendar, list, or recipe data to train any AI model.
With your family: anything you or another member adds to your shared family calendar, lists, or meal plan is visible to every member of that family — that sharing is the core purpose of the app.
With calendar providers you connect: if you link Google Calendar or Outlook, your use of that connection is also governed by Google's or Microsoft's own privacy policy.
With service providers: we use Google Firebase (Authentication, Firestore database, Cloud Storage, Cloud Messaging, App Check, and Analytics) to host and operate the app's backend. These providers process data on our behalf and are not permitted to use it for their own purposes.
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.
Core Calendar is a family organizer, and we recognize that an adult account holder may add children as family members (for example, to assign them chores or track their activities). A child does not create their own separate account, sign in, or provide any information to us directly — only the adult who creates and manages the family account does. That adult is responsible for any information entered about a minor family member.
We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us with personal information directly (outside of an adult's family account), please contact us using the information below and we will promptly remove it.
We retain your information for as long as your account and family are active. You can delete your own account at any time from Profile → Delete Account — this permanently removes your sign-in and personal profile, and removes you from your family. Because calendar events, lists, and recipes are shared family content rather than any one member's individual data, deleting your own account does not delete that shared content — it remains available to your remaining family members. If you'd like your family's shared data fully deleted (for example, because your family is disbanding the account entirely), contact us using the information below.
You can review and update your account information, disconnect a synced calendar, and turn notifications on or off at any time from within the app. Depending on where you live, you may have additional rights over your personal information — including the right to access, correct, or request deletion of it, or to object to certain uses — under laws such as the EU/UK General Data Protection Regulation (GDPR). To exercise any of these rights, contact us using the information below.
California residents (CCPA/CPRA): California law gives you the right to know what personal information we've collected about you, to request its deletion, and to correct inaccurate information. We do not sell or share your personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for any purpose other than providing the Service — so there is nothing to opt out of in that regard. We will not discriminate against you for exercising any of these rights. To submit a request, contact us using the information below; we may need to verify your identity before fulfilling it.
We use industry-standard measures to protect your information, including encrypted network connections (TLS), Firebase Authentication for account security, and your device's own secure keystore for sensitive calendar-sync credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Core Calendar is built on Google Firebase, and optionally integrates with Google Calendar/Sign-In, Microsoft's identity platform and Graph API (privacy.microsoft.com), and Sign in with Apple, depending on which features you choose to use. Gold's AI-assisted meal suggestions (see Section 3) also rely on a third-party AI service provider. For free-plan users, we use Google AdMob to serve ads. Your use of these integrations is also subject to each provider's own terms and privacy policy.
Core Calendar is operated from the United States, and the services we rely on (Google Firebase) process and store data on infrastructure that may be located in the United States or other countries. By using the app, you consent to this transfer and processing.
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you within the app.
Questions about this Privacy Policy or your information? Contact us at core.calendar.app@gmail.com.