CalChime Privacy Policy

1. Who we are

CalChime is an iPhone app published on the App Store by Benjamin Haberman under the Confidere name (“Confidere”, “we”, “us”). If you have a question about this policy or about your data, email ben@confidere.biz.

This policy covers the CalChime app. The confidere.biz website, including this page, is covered by the Confidere website privacy policy.

2. What CalChime accesses

CalChime reads calendar events from one of two sources: Google Calendar, directly from Google, or the calendars on your iPhone, which iOS keeps on the phone. You choose one when you set up the app. You can change it later in Settings with Switch calendar source. CalChime uses one source at a time, never both. If you switch, it keeps the alarms it has already set until you have chosen calendars from the new source, and tells you how many it will replace before you save.

Google Calendar

If you choose Google Calendar, you sign in with Google. Google’s sign-in shares your basic profile with the app (the third item below), and the app asks Google for read-only access to the following, and nothing else:

• Your list of calendars, so you can choose which ones get alarms. For each calendar the app keeps its name and the identifier Google uses for it. For your main calendar that identifier is usually your email address.
  https://www.googleapis.com/auth/calendar.calendarlist.readonly
• The events on your calendars, so the app knows when to set an alarm and what to call it. The app asks only for events in roughly the next seven days, and only for the parts it needs: each event’s title, start time and time zone, whether it is all-day, whether it repeats and, for a moved repeat, its original time, whether it has been cancelled, when Google last changed it, whether you declined it (Google answers this with guests’ reply status, without names or email addresses; the app looks only at your own), and the identifiers Google uses for the event and its calendar. It does not ask for descriptions, locations, links or attachments, or for other guests’ names or email addresses. On your phone it keeps the title, the start time and time zone, whether the event is all-day, cancelled or declined by you, the identifiers, and a marker of when Google last changed it, used to notice updates. The repeat rule and your reply status are used to work those out and are not kept.
  https://www.googleapis.com/auth/calendar.events.readonly
• Basic sign-in information. Signing in with Google gives the app your Google account ID and your email address and, as part of Google’s standard sign-in, your name and profile picture (if your account has one). CalChime saves the account ID, to keep you signed in and to tell which account its saved events belong to. It shows your email address in Settings while you are signed in, so you can see which account is connected, but does not save it itself. It does not use your name or picture at all. Google’s sign-in software keeps your sign-in session, which can include these details, in your iPhone’s secure keychain until you sign out. That is everything the app itself takes from the sign-in. What Google handles on its own side during sign-in is described in section 5.

Both Google calendar permissions are read-only. On this route CalChime cannot create, change or delete anything in your calendar. It does not ask for access to your Gmail messages, contacts, files or any other part of your Google account.

The calendars on your iPhone

If you choose Use the calendars on this iPhone, CalChime reads the calendars that iOS already keeps on your phone: those from the accounts added in your iPhone’s Settings › Apps › Calendar › Calendar Accounts, and calendars you subscribe to. CalChime does not sign in to those accounts or contact them. iOS does the syncing.

The permission is Apple’s. The behavior is ours. iOS asks you to allow Full Access to your calendars. iOS has no read-only calendar permission: Full Access is the only permission that lets an app read events, and it would also let an app add, change or delete them. CalChime only reads. It does not create, change or delete anything in your calendars, and the app contains no code that writes to them. The message iOS shows with the request says: “CalChime reads the calendars on this iPhone to set alarms for your events. iOS calls this permission Full Access; CalChime only reads your calendars and never changes them.”

Full Access lets an app see every event in every calendar on the iPhone, including details such as locations, notes and guest lists. CalChime uses only the following:

• The names of your calendars, so you can choose which ones get alarms, and the identifier iOS uses for each calendar. With each name, the app reads the name iOS shows for the account the calendar belongs to, which can be an email address. It uses that only to tell apart calendars with the same name, for example “Work account · Calendar”, and keeps it on your phone as part of the calendar’s name.
• For the calendars you choose, the upcoming events it may set alarms for: each event’s title, start time and time zone, whether it is all-day, whether it has been cancelled, and whether you declined it (the app looks only at your own reply), together with the identifiers iOS uses for the event and, for a repeating event, which occurrence it is, so the app can recognise its alarms later. To work out the occurrence, the app also reads whether the event repeats and whether it is a changed occurrence of a repeating event; it keeps only the resulting identifier.

The app also reads what kind of account each calendar belongs to (for example an Exchange account, a subscribed calendar, or a calendar kept only on your phone). It does not use, show or keep that. It does not use events’ locations, notes, links, attachments, or other guests’ names or email addresses, and it reads nothing from the calendars you have not chosen except their names, their account names, the kind of account and their identifiers. Nothing from your iPhone’s calendars leaves your phone.

3. How it is used

For two things only, both on your iPhone:

• to show your upcoming events inside the app; and
• to set iPhone alarms for the timed events in the calendars you chose (at the event’s start, or 5, 10, 15 or 30 minutes before; 1 hour or 2 hours before with CalChime Pro).

That is the whole list. Your calendar data is not used for anything else, whichever source it comes from. If you use Google Calendar, your Google sign-in is used only to keep you connected to Google and to show which account is connected.

4. Where it is stored

On your iPhone, and only there. These things are kept on your phone:

• Your event and calendar details, as listed in section 2 for the source you use, together with the calendars you chose and your alarm settings, in the app’s own storage. With the calendars on your iPhone, each calendar’s name is kept together with its account name, which can be an email address. None of it leaves the phone.
• Your Google sign-in, if you use Google Calendar, in the iPhone’s secure keychain. Google’s sign-in software puts it there so you do not have to sign in every time you open the app.
• An activity log of when the app was opened and went to the background, when it checked your calendar, what it asked the iPhone’s alarm system to do and what the system reported back, and which kind of audio output (speaker, headphones, car) was in use at the time. It is a rolling log: it keeps the most recent 600 entries and drops older ones. It contains no event names, calendar names or account details. It leaves the phone only if you share it yourself, for example by sending it to us when you ask for help, using Share activity log under Settings, Diagnostics.
• A note of whether you have CalChime Pro, so the app keeps working without a connection (section 8).

There is no CalChime server and you do not create an account with us. With Google Calendar, the app talks to Google directly from your phone. With the calendars on your iPhone, the app reads them from iOS on the phone and contacts no calendar service at all; iOS itself keeps those calendars and syncs them with the accounts you added. Nothing from your calendar is sent to Confidere, so we never see it and have no copy of it.

All of this stays on your phone until you remove it. Section 7 says how long each thing is kept and how to remove it.

5. Sharing, selling, advertising and AI

Your calendar data is:

• not shared with or transferred to anyone. It stays on your phone;
• not sold;
• not used for advertising; and
• not used to develop, improve or train artificial-intelligence or machine-learning models, including general-purpose models. Google’s rules for apps that use Google Calendar require this, we follow them, and we apply the same rule to the calendars on your iPhone.

The app contains no advertising software and it does not track you. It contains software from two other companies:

• Google’s sign-in software, which signs you in to your Google account if you choose Google Calendar. Google’s own disclosure for this software, the privacy manifest it ships inside the app, says it may collect: your name, email address and phone number; your Google account identifier, which Google says it records to log the permission you gave; an identifier for your device; your general location estimated from your internet address, which Google says it uses to prevent fraud; information about how sign-in is used; and other data that Google’s disclosure does not itemise. This goes to Google, not to us, and is covered by Google’s privacy policy. Google says it does not use your sign-in information for ads. The app itself receives back only what section 2 lists.
• RevenueCat, which checks CalChime Pro purchases. Its software runs in the app for everyone, so RevenueCat holds a record for every installation whether or not you ever buy anything. It receives nothing from your Google account or from any calendar. Section 8 explains what it does receive and what it does with it.

Both companies are bound to protect this data. RevenueCat handles purchase records only on our documented instructions, under its data-processing addendum. RevenueCat says it uses app users’ information only to provide its service to us, apart from the aggregated, de-identified analysis its terms allow (section 8). It says it protects data in transit and at rest, keeps it with Amazon Web Services in the United States, and has its security controls audited every year by an independent firm (RevenueCat’s security page). Google is bound by its own privacy policy, which describes the security it applies to account data, and it says it does not use your sign-in information for ads.

CalChime’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Apple’s role

CalChime’s alarms are scheduled through Apple’s alarm system on your iPhone. So that an alarm can show which event it is for, the app hands that system the event’s title, the time the alarm should ring, and an internal reference built from the event’s identifiers (with Google Calendar, these include your Google account ID), so the app can recognise its own alarms later. This happens on your phone.

If you use the calendars on your iPhone, CalChime reads them through Apple’s calendar framework on the phone, with the Full Access permission described in section 2. iOS, not CalChime, syncs those calendars with the accounts you added, so CalChime sees a change only after iOS has synced it.

7. How long data is kept, and how to remove it or revoke access

How long it is kept. There is no fixed period on our side, because we hold nothing. Here is where each thing lives and how long it stays:

• On your iPhone: your event and calendar details, your Google sign-in if you use Google Calendar, the activity log and the Pro note (section 4) stay until you remove them with the steps below.
• In your calendars: CalChime does not change or delete anything there. Your calendars stay where iOS and your calendar accounts keep them, whether or not you use CalChime.
• At Google: if you use Google Calendar, Google keeps its own records of your sign-in and of the permission you gave CalChime, under Google’s privacy policy. Google explains how it retains data on its data retention page. We cannot state a period for it.
• At RevenueCat: a record for your installation (and your purchase details, if you bought CalChime Pro) stays in RevenueCat at least for as long as CalChime uses RevenueCat, unless you ask us to delete it. RevenueCat does not publish a fixed period for app users’ records. Section 8 has the details and the deletion route.
• At Apple: Apple keeps its own record of your purchases under its App Store privacy notice. Apple says it keeps that record for at least as long as you have an Apple Account, and longer where financial-reporting laws require. We cannot change or delete Apple’s records.
• With us: only the emails you choose to send us (section 11).

Removing it. You are in control, and you do not need to ask us:

• Google Calendar: sign out in the app. Open CalChime, go to Settings and tap Sign out of Google. CalChime forgets your Google sign-in and the events saved on your iPhone. Alarms that are already set will still ring until you remove them. Signing out does not by itself withdraw the permission you gave Google; revoking access at Google, below, does that. The activity log and the Pro note stay on the phone until you delete the app.
• iPhone calendars: stop using them in the app. In Settings, tap Stop using iPhone calendars. CalChime stops reading your iPhone’s calendars and forgets the events it saved from them. Alarms already set stay until you update or remove them. This does not by itself turn off the Full Access permission; turning off access in iPhone Settings, below, does that. The activity log and the Pro note stay on the phone until you delete the app.
• Remove the alarms. In Settings, tap Remove CalChime alarms. This removes the alarms CalChime set. Your calendar and your other iPhone alarms are not touched.
• Delete the app. Deleting CalChime from your iPhone removes the app, your saved events, the activity log and the Pro note. If you use Google Calendar, sign out first, so that the saved Google sign-in is removed too. Remove the alarms first, because we cannot promise that iOS removes an app’s alarms by itself. Deleting the app does not remove CalChime from the list of apps with access in your Google Account, does not delete the record RevenueCat holds (or Apple’s own purchase records), and does not cancel a subscription (section 8).
• Google Calendar: revoke access at Google. Go to myaccount.google.com/permissions, choose CalChime and remove its access. After that the app can no longer read your calendar unless you connect it again. This does not remove the events already saved on your iPhone; sign out in the app or delete the app to remove those.
• iPhone calendars: turn off access in iPhone Settings. Open Settings › Privacy & Security › Calendars, tap CalChime and choose None. After that CalChime can no longer read your iPhone’s calendars unless you allow it again. Alarms that are already set still ring until you remove them. The events already saved stay on your phone until you tap Stop using iPhone calendars or delete the app.

Nothing from your calendars or your Google account is held by us or by anyone on our behalf, so there is nothing of that to delete. The one record kept for us elsewhere is your installation’s record at RevenueCat, with purchase details if you bought CalChime Pro; section 8 says how to have it deleted. If you are unsure about any of this, email ben@confidere.biz and we will help.

8. Purchases

CalChime is free to use. CalChime Pro is an optional paid upgrade, sold inside the app as a yearly subscription or a one-time lifetime purchase.

Apple takes the payment. You buy with your Apple Account, and Apple handles your card or other payment method. CalChime never asks for, sees or stores your payment details. Apple gives the app a receipt for the purchase: which product you bought, what you paid and in which currency, the purchase and expiry dates, Apple’s transaction identifiers and your App Store country. Apple says these receipts contain no personal data; they never include your name, email address or payment method.

RevenueCat holds a record for your installation. To check purchases with Apple and tell the app whether you have CalChime Pro, the app uses a service called RevenueCat, which works on our behalf. Its software starts with the app, so RevenueCat creates a record for you the first time you open CalChime, whether or not you ever buy anything. For everyone, RevenueCat receives:

• a random identifier that RevenueCat’s software creates on your phone the first time the app runs. It is not your name, your email address or your Google account;
• the identifier Apple calls the identifier for vendor. Your iPhone gives the same value to every app from the same developer and a different value to other developers’ apps. It is not the advertising identifier. It changes if you delete all of our apps from your iPhone and later install one again. RevenueCat’s software sends it with every request it makes to RevenueCat. We have not asked RevenueCat to do anything with it, and we have not turned on the advertising-attribution features that RevenueCat documents such device identifiers for; RevenueCat’s privacy policy governs it; and
• the technical details that any app sends when it contacts a server: your IP address, which RevenueCat says it does not keep once it has used it to work out your country; the model of your iPhone; its language settings; your App Store country; the versions of the app and of iOS; and the time the app last contacted RevenueCat.

If you buy CalChime Pro, the record also holds your purchase details from Apple’s receipt: which plan you bought, when, what you paid, and whether it is still active.

RevenueCat does not receive your calendars, your events, your Google account ID or your email address.

What is done with these records. RevenueCat uses them to check your purchase with Apple and to tell the app whether CalChime Pro is active. It also shows us, in its dashboard, each purchase record under its random identifier, and charts and totals built from everyone’s records, such as how many people have CalChime Pro, how many renew, refunds and revenue. We look at those totals to run CalChime; we do not use them to profile individual people. We cannot tell whose a record is unless you tell us, for example when you email us for help with a purchase. RevenueCat says it uses app users’ information only to provide its service to us and acts as a processor on our instructions. Its terms also let it analyse information about how its service is used, including information derived from these records, to improve its service, and to disclose that only in aggregated or de-identified form. RevenueCat keeps the records with Amazon Web Services in the United States and uses the sub-processors listed in its data-processing addendum. Its own handling of data is described in its privacy policy.

How long RevenueCat keeps the record. The record stays in RevenueCat at least for as long as CalChime uses RevenueCat, unless you ask us to delete it. RevenueCat does not publish a fixed period for app users’ records. Its privacy policy says that after a deletion request it keeps data under its own retention policy and only as far as it must to meet legal obligations, resolve disputes and enforce its agreements. If we stop using RevenueCat, our agreement with it lets us have the records destroyed or returned, subject to RevenueCat’s backup practices. Deleting the app from your iPhone does not delete the record. Reinstalling the app creates a new identifier and a new record, and tapping Restore purchases may connect your earlier purchase to that new identifier.

Deleting the record. Email ben@confidere.biz and we will delete your record in RevenueCat. RevenueCat says this clears all of the data it holds under that identifier and is enough to meet a GDPR erasure request. RevenueCat lets us find a record only by an exact identifier: its own random identifier, or, for a purchase, Apple’s order ID or transaction ID. So:

• If you bought CalChime Pro, send us the Apple order ID from your App Store receipt email or from your purchase history (in the App Store app under your account, or at reportaproblem.apple.com), together with the plan and the purchase date shown there. We check that the order matches the record before deleting it. We will not ask for your Apple Account password or any payment details.
• If you never bought anything, this version of the app does not show you the record’s random identifier, and there is no order to match, so we currently have no exact way to find your record among the others. We do not delete records on a guess. That record holds only the random identifier, the identifier for vendor and the technical details listed above, with no name, email address or calendar data. We intend to show the identifier in a later version so that this limitation goes away; until then, deleting the app ends any further contact with RevenueCat from your phone, but does not remove the record.

Deleting the record does not cancel a subscription or refund anything; Apple handles those, through your Apple Account subscription settings and reportaproblem.apple.com. If you keep using CalChime afterwards, the app creates a new record the next time it runs. If you tap Restore purchases, Apple’s receipt reaches RevenueCat again and RevenueCat may connect your purchase to the new installation’s identifier. You can also write to RevenueCat directly at compliance@revenuecat.com, but RevenueCat says it will direct you back to us, because it holds the record on our behalf.

Apple’s own records. Apple keeps its own record of your purchases in your Apple Account, under its App Store privacy notice. You can see it in the App Store app under Apps and Purchase History, or at reportaproblem.apple.com. Apple says it keeps it for at least as long as you have an Apple Account, and longer where financial-reporting laws require. We cannot change or delete Apple’s records.

The app also keeps a note on your phone of whether you have CalChime Pro, so that it keeps working without a connection. It is removed when you delete the app.

9. Children

CalChime is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, for example by emailing us, tell us at ben@confidere.biz and we will delete it.

10. Changes to this policy

If this policy changes, the new version will be posted on this page with a new effective date. If a change affects how CalChime uses your calendar data or your Google sign-in, we will tell you in the app and ask you to agree before the change applies to you.

What changed in this version. This version, effective on the date at the top of this page, replaces the version effective October 11, 2026. It adds a second calendar source, the calendars on your iPhone, and says what CalChime reads from them, where that is kept and how to stop it. Nothing changed in how CalChime uses Google Calendar data or your Google sign-in. CalChime reads your iPhone’s calendars only if you choose that source and allow access when iOS asks.

11. Contact

Benjamin Haberman
Email: ben@confidere.biz
Website: confidere.biz

If you email us, we see your email address and whatever you choose to send, and we use it to answer you. We keep that correspondence in our mailbox for as long as we need it to help you and to keep a record of what we agreed. Ask us at any time and we will delete your messages.

CalChime’s Terms of Use also apply when you use the app.