TimeVale

Privacy Policy

Version 1.8 · Last updated 11 October 2026

A private calendar you share only with people you choose. TimeVale is operated by the TimeVale developer (“we”, “us”). Questions: Contactdotvale@gmail.com.

Your content is end-to-end encrypted

Everything you write — your name, your event titles, notes and locations, your tasks, when your events and tasks happen, your notes, your profile picture and all cycle-tracking data — is encrypted on your own device before it’s saved, and stored only as unreadable ciphertext. We cannot read it, the hosting provider cannot read it, and nobody without your key can read it. The keys come from your password and recovery code, which the app never sees in readable form.

Which means: if you lose both your password and your recovery code, everything private is gone for good — your private events, your notes and your cycle tracking. Nobody can bring them back: not us, not the hosting provider, not anyone. There is no reset, no back door and no support request that can undo it. Keep your recovery code somewhere safe.

Events shared with a group are not lost that way: the group holds its own key, so its owner can invite you back and every shared event opens again, including the ones you made. An event a friend shared with you comes back the same way, once they share it again.

Some things are not encrypted:

• The colours on your calendar — an event’s colour, which says nothing about what it is. When an event happens — its day, its time, whether it repeats — is encrypted along with its title, so the server cannot tell that an account has anything on a Tuesday at 3.
• Who is connected to whom — never by name, because names are encrypted. The server can tell that two accounts share a group, or are friends, with each account being an email address and nothing more.
• Your email address, because it is what you log in with.
• Your country/time-zone, if you set one.
• Your subscription, if you buy one — which plan, when it renews or ends, and the store’s purchase number — so the app knows who has paid. Payment itself is handled by the App Store or Google Play; card details never reach us.
• The name you give a group — a label you made up, and you can call it anything you like. It says nothing about who is in the group: every member’s name inside it is encrypted, and so is everything they put in the calendar. A group called Family tells the server only that a group is called Family.

Where it’s stored

Data is stored using Supabase, hosted in the United Kingdom (AWS London region). Because your content is end-to-end encrypted, that provider only ever holds ciphertext for your private fields.

Every night a locked copy of the server is saved at GitHub, so it can be restored if something goes wrong. Only we hold the key that opens it, and each copy is deleted after 30 days. Because your content is end-to-end encrypted, it stays unreadable inside these copies too.

Who else is involved

• Apple. The app is distributed through the App Store. If you turn notifications on, alerts reach your phone through Apple’s push service, which sees your device’s notification address and the words of the alert. Those words are deliberately kept vague — “Someone changed an event”, never the event’s title. If you buy a subscription on an iPhone, Apple takes the payment and tells us only which plan it is and until when.
• Google. On Android the app is distributed through Google Play, and a subscription there is bought through Google Play, which takes the payment and tells us only which plan it is and until when.
• Wikipedia. If you tap a public holiday to read what it is, your device asks Wikipedia for that description. Nothing about you or your calendar is sent with the request.

Beyond those, the app shows no ads, contains no third-party tracking or analytics, and your data is never sold or shared with anyone else.

Who can see your content

Your events are visible only to the members of a family or group you share them with — an event with no circles is private to you alone. Your notes are private to you and are never shared with anyone.

Why the app is allowed to hold it

The legal basis is your consent, which you give when you create an account. You can withdraw it at any time by deleting your account (see below).

Children

TimeVale is for people aged 13 and over. When you register, the app asks your birth month and year only to check that you are 13 or older. The answer is checked and then discarded — it is never saved anywhere.

How long it’s kept

Your data is kept for as long as your account is in use. When you delete your account, your profile, private events, tasks, notes, cycle data, encryption keys and notification details are erased immediately and permanently. Events you made in a shared group stay with the group, under its owner and no longer linked to your name. A group with nobody else in it is deleted with you. The record of a subscription you bought stays, with only the store’s purchase number and no longer linked to any account.

We also apply automatic retention limits:

• Old events are deleted automatically ten years after the event itself finishes — for a repeating event, ten years after its last occurrence. Because the server can no longer see when your events happen, this is worked out on your own device. A repeat with no end date is kept for as long as the account exists.
• A deleted note goes to the app’s bin and is erased 12 months later, or as soon as you empty the bin yourself.
• An encrypted note saying who deleted a shared event or task, or took someone off it, is deleted after 30 days.
• Inactive accounts are deleted automatically after 12 months with no activity, along with all their data.

Your rights

You can, at any time, from Settings → My Account:

• Access & export your data — “Download My Data” gives you a copy of everything held about you, your events, tasks and notes included.
• Correct your information — edit your profile, events, tasks and notes directly.
• Erase everything — “Delete Account” removes it all immediately.
• Withdraw consent — by deleting your account.

You also have the right to lodge a complaint with your local data-protection authority.

Cookies & tracking

The app uses only the essential on-device storage needed to keep you logged in and to work offline. It sets no advertising or tracking cookies.

Changes

If this policy changes, the version and date at the top will be updated, and you may be asked to agree again.

Contact

Questions or requests: Contactdotvale@gmail.com