Privacy Policy

Effective August 15, 2026

Callie is a family calendar. The honest summary: we store what the product needs to show your family its week, and nothing else. No ads, no analytics trackers, no selling or sharing of data — your family's schedule is nobody's business but yours.

What we store

Your account — a username, your passkey's public key and/or a salted, hashed password (we never see or store the password itself), and an optional recovery email address.
Your family's setup — the family name, the people you add (names, nicknames, colors), calendar feed links, lists, reminders, tagging rules, and which devices you've linked.
Calendar events — fetched from the feed links you provide and kept in a short-lived cache so your boards load quickly. Event details are used only to display your calendar and are never analyzed, profiled, or shared.
Operational basics — IP addresses appear briefly in rate-limiting counters and routine server logs, and sign-in sessions record when they were last used so you can review and revoke them.

What never reaches us

Photos. The slideshow loads your iCloud Shared Album directly from Apple on your own devices. Your photos never pass through or rest on our servers.
Passwords for your calendars. Callie uses the read-only feed links that iCloud and Google publish — we never ask for, receive, or store your Apple or Google credentials.

Who else touches data

Only the services that run Callie: our hosting provider (where the server and its database live) and our email provider (Resend), which receives your recovery email address only when we send you a password-reset link. Neither is permitted to use your data for anything else. We do not sell, rent, or share personal data with anyone else, and there are no third-party trackers on the site or in the apps.

Children

Callie accounts are for adults; children typically appear in Callie only as a name and a color that a parent added. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we'll remove it.

Security

Everything travels over TLS. Sign-in is passkey-first; passwords, where used, are stored only as salted scrypt hashes. Idle sessions expire automatically, and you can see and revoke every signed-in browser and linked device from the app's Devices panel.

Keeping and deleting data

We keep your data for as long as your family uses Callie. To delete your account or your whole family — config, accounts, everything — email us and we'll do it within 30 days. Your underlying calendars are never held hostage: they live with iCloud or Google, and Callie only ever read them.

Your rights

You can ask us at any time for a copy of the data we hold about your family, ask us to correct it, or ask us to delete it. Email works: hello@callie.so.

Changes

If this policy changes, the new version appears here with a new effective date. If a change meaningfully reduces your privacy, we'll say so plainly on the sign-in screen first.

Questions: hello@callie.so