Privacy Policy

What this app is

Kaizen Calendar is a private scheduling tool used by the members of one EO forum (the Kaizen forum) to find meeting and retreat dates. It is not a public service and has no users outside the forum.

What we access

You can connect a calendar three ways. In every case the app only learns when you are busy, never event titles, descriptions, locations, or attendees.

• Google: we request the Google Calendar free/busy scope only, which exposes busy start and end times and nothing else.
• Microsoft: we request Calendars.ReadBasic, the lowest Microsoft 365 calendar permission, and our queries select only start, end, busy status, and all-day flags. Event bodies, attendees, and locations are never requested.
• Calendar link: you can paste a view-only ICS link, for example an Outlook "can view when I'm busy" publish link. We read only what that link exposes; we recommend the busy-only option.

With Google and Microsoft sign-in we also receive your email address and name to identify you.

What we store

• Your name and email address, so we know which forum member you are.
• An encrypted Google or Microsoft refresh token, or your encrypted calendar link URL, so the app can query your busy times when the forum admin searches for dates. All of these are encrypted at rest with AES-256-GCM.
• Any manual unavailable date ranges you add yourself.

We do not store your calendar events. Busy times are fetched on demand, used to rank candidate dates, and discarded (calendar-link data may be cached for up to 15 minutes to avoid repeated fetches).

What we share

The forum admin can see whether you are free or busy for specific candidate dates. Nobody can see why you are busy. We never sell, share, or transfer data to third parties. Data lives on Cloudflare infrastructure.

Deleting your data

Open your personal link and tap Disconnect on any connected source. This deletes the stored token or link immediately (and revokes Google tokens with Google). You can also revoke access yourself at any time: Google at myaccount.google.com/permissions, Microsoft at account.live.com/consent/Manage or myapps.microsoft.com, or simply unpublish a calendar link. Or email steve@drinkhyro.com to have everything removed.

Google API disclosure

Kaizen Calendar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Use of Microsoft Graph is limited to the same purpose: reading busy times to schedule forum events.

Contact

Steve Chapman, steve@drinkhyro.com