Privacy
Last updated 5 August 2026. Contact: hello@heycalendar.app.
What this service does
HeyCalendar reads calendar sharing links (ICS feeds) that you provide, and copies the events from them into a single Google calendar that it creates in your Google account. It then sends you a notification shortly before an event starts.
Google access
Signing in grants one Google Calendar permission,
calendar.app.created, which allows this service to create its
own calendar and manage only calendars it created. It cannot read,
modify, or delete any calendar that already existed in your account.
It also receives your email address and Google account identifier, used to identify your account and nothing else.
You can revoke this access at any time at myaccount.google.com/permissions.
What is stored
| Email address and Google account id | To identify your account. |
| Google access and refresh tokens | Encrypted at rest. Needed to write to your calendar every five minutes. |
| Your calendar links, prefixes and colours | The configuration you entered. |
| Titles you renamed by hand | So a rename is not overwritten by the next sync. |
| Pushover keys, Telegram chat id | Pushover credentials are encrypted at rest. Only used to send your alerts. |
| Timezone | Detected from your browser. Used to decide when your day starts. |
| Which alerts have been sent | So you are not alerted twice. Deleted after 2 days. |
| Job history | Whether syncs succeeded, for diagnosing failures. Deleted after 14 days. |
Event details are not stored in this service's database. They are written to your Google calendar and read back from it when needed.
Who else is involved
Running this service means data passes through these providers:
| Sign-in and your calendar. | |
| Vercel | Hosts the application. |
| Supabase | Hosts the database. |
| Your calendar providers | Whoever publishes the links you add, e.g. Microsoft or Google. |
| Pushover | Only if you set it up. Receives the event title and time. |
| Telegram | Only if you link it. Receives the event title and time. |
Nothing is sold, and there is no advertising or analytics tracking.
Your data, on your terms
Export — the dashboard produces a JSON file of your configuration at any time.
Deletion — deleting your account from the dashboard removes every row belonging to you, revokes the Google token, and deletes the calendar this service created. It is immediate and cannot be undone.
Questions or requests — email hello@heycalendar.app.
Security
Google refresh tokens and Pushover credentials are encrypted before being stored. Traffic is HTTPS only. That said, this is a small free service run by one person, not an enterprise product — if you would not be comfortable with a calendar link leaking, do not add it here.