Privacy Policy

Busy — Effective Date: March 29, 2026 · Last Updated: April 17, 2026

Busy ("we," "us," or "our") operates the Busy mobile application and website at busy-app.com (together, the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use the App.

1. Information We Collect

Information You Provide

• Google Account: When you sign in with Google, we receive your name, email address, and profile photo.
• Profile Information: Your display name and avatar, which you may update at any time.
• User Content: Events you create, bucket list items, comments, friend groups, and related content you post through the App.

Information We Access With Your Permission

• Google Calendar (read-only): If you grant access, we read your Google Calendar events to determine when you are busy. We do not modify, create, or delete any events on your Google Calendar.
• Device Calendar: If you enable device calendar sync, we read events from calendars you select on your device to determine your availability.
• Push Notifications: If you allow notifications, we store a device token to send you event invites, friend requests, and comment notifications.
• Camera & Photo Library: If you choose to upload a profile photo, group image, or event image, we request access to your camera or photo library. Photos are uploaded to our servers and stored securely.

Information Collected Automatically

• Calendar Busy Blocks: Start and end times of calendar events are cached on our servers to calculate availability. We store event titles only if you enable "show details" in your calendar preferences. No other event metadata (attendees, descriptions, locations, attachments) is stored.

2. How We Use Your Information

We use your information to:

• Authenticate your account and maintain your session
• Display your profile to friends you connect with
• Show your calendar availability to friends you choose to share it with
• Find mutually free times among groups of friends
• Send push notifications for event invites, friend requests, and comments
• Display your events and calendar on the App's calendar view

We do not:

• Sell your personal information to third parties
• Use your data for advertising or ad targeting
• Share your calendar details with anyone you have not explicitly added as a friend
• Access your Google Calendar for any purpose other than determining free/busy times

3. How We Share Your Information

With Other Users

• Your display name and profile photo are visible to other Busy users who search for you or are connected with you.
• Your availability status (free/busy, not event details) is visible only to friends or groups you explicitly select.
• Event details are visible only to the event creator and invited participants.
• Comments are visible to event or bucket list item participants.

With Service Providers

We use the following third-party services to operate the App:

• Supabase (database, authentication, file storage)
• Google (OAuth sign-in, Calendar API)
• Expo (push notification delivery, app builds)
• Apple (TestFlight and App Store distribution)

We do not share your personal information with any other third parties.

4. Data Security

• Google Calendar OAuth tokens are encrypted using AES-256 encryption before storage.
• All data is transmitted over HTTPS/TLS.
• Database access is protected by Row-Level Security policies — users can only access their own data and data explicitly shared with them.
• Session tokens are stored in your device's secure storage.

5. Data Retention

• Calendar busy blocks are cached for up to one year and replaced on each sync.
• Account data is retained for as long as your account is active.
• Expired availability statuses (e.g., "open to hang") are automatically deleted within 5 minutes of expiration.

6. Your Rights & Choices

Access & Control

• You can view and update your profile information at any time in the App.
• You can revoke Google Calendar access by disconnecting in the App's settings or in your Google Account permissions.
• You can disable device calendar sync at any time in the App's settings.
• You can disable push notifications in your device's system settings.

Account Deletion

You can delete your account at any time from the App's profile screen. Account deletion permanently removes:

• Your profile, display name, email, and avatar
• All events you created and related invites
• All friendships and group memberships
• All calendar data, comments, bucket list items, and availability records
• Your Google Calendar token and push notification token

Deletion is immediate and irreversible.

7. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App or sending a push notification. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

9. Google API Services User Data Policy

Busy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Limited Use Disclosure

Notwithstanding anything else in this Privacy Policy, Busy's use of information received from Google APIs adheres to the following restrictions:

• Busy will only use access to Google Calendar data to provide and improve user-facing features that are prominent in the App (specifically: determining your availability, finding mutually free times among friends, and displaying your schedule).
• Busy will not transfer Google Calendar data to other apps or third parties, except:
  • As necessary to provide or improve user-facing features that are prominent in the App (e.g., showing your availability to friends you have explicitly added),
  • To comply with applicable laws or regulations,
  • As part of a merger, acquisition, or asset sale, with prior explicit user consent.
• Busy will not use Google Calendar data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• No humans will read your Google Calendar data unless: (a) you have given affirmative consent to view specific data, (b) it is necessary for security purposes (e.g., investigating abuse), (c) it is required by law, or (d) the data has been aggregated and anonymized for internal operations.
• Busy will not use Google Calendar data for credit assessment, lending, or insurance underwriting purposes.
• Busy will not use Google Calendar data for surveillance purposes.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: busyauth@gmail.com

← Back to Busy