Privacy notice

This notice explains how Fidz Technologies SG Pte Ltd (“we”, UEN 200300426H) handles personal data in CalendarMi, the scheduling app at calendarmi.sg and app.calendarmi.sg, under Singapore's Personal Data Protection Act 2012 (PDPA).

Who uses CalendarMi

• Organisers sign in with Google and send invitations or booking links.
• Guests (invitees) open a link from an organiser and book a time. They don't need an account.

What we collect

From organisers

• Your Google account name and email, used to sign you in.
• Who invited you and whom you invited, because CalendarMi is invite-only.
• Your mobile number, if you verify it to unlock WhatsApp updates for your guests. One number can unlock one account.
• Your appointments: titles, times, places and up to three photos per booking that you choose to add. Photos are resized on your device, which removes location data.
• If you connect Google Calendar: the connected Google email, the calendars you choose, and an encrypted access grant. See Google Calendar below.

From guests

• Your name, email and mobile number, given when you book, so the organiser and CalendarMi can send you confirmations and reminders and reach you about the meeting.
• Whether you chose WhatsApp updates.
• Any message or other times you suggest to the organiser.

From people an organiser meets

An organiser can record a meeting they agreed directly, with the other person's name and, optionally, their email and mobile.

Automatically

A record of the messages we sent (type, channel, status), with email addresses and numbers removed from any error details, and a security log of important actions. We don't use advertising or analytics trackers.

How we use it

• To run the service: sign-in, invitations, booking links and bookings.
• To send booking confirmations, reminders, changes and cancellations by email, and by WhatsApp when the guest opts in.
• To keep the organiser's Google Calendar up to date, and to show them their own events on their CalendarMi calendar, if they connect it.
• To control invite-only access, prevent abuse, and keep the service secure.
• To answer your questions and requests.

We don't sell personal data or use it for advertising.

Google Calendar

Organisers can connect Google Calendar in Settings. With your permission, CalendarMi:

• reads busy times from the calendars you choose, so booking links offer only times you're free. Busy times are fetched when needed and never stored;
• for the chosen calendars that you own, also reads event titles and times, to show them only to you on your CalendarMi calendar. They're fetched when needed, never stored, and never shown to the people who book with you. It reads busy times only from other calendars, such as ones shared with you. We never read event descriptions or attendees;
• reads the list of your calendars, so you can choose which ones to use;
• creates, moves and removes the events for your CalendarMi bookings, in the calendar you choose. Each event names the guest and adds them as a guest. Google's own invitation emails are turned off.

CalendarMi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide these features. We don't transfer it except to provide them, for security, or when the law requires it, and we never use it for advertising. No person at Fidz Technologies SG Pte Ltd reads it unless you ask us to for support, or the law or security requires it.

You can disconnect at any time in Settings, which revokes our access and deletes the stored grant. You can also remove access in your Google Account settings.

WhatsApp and email

WhatsApp updates are sent only if the guest opts in, to a Singapore mobile number. A guest can stop them at any time with “Stop WhatsApp updates” on their booking page; email continues. Emails come from CalendarMi, and replies go to the other person in the booking.

Who we share data with

The organiser and guest in a booking see each other's details for that booking. We also use these service providers, who process data for us under their data processing terms:

Some of them process data outside Singapore. Where they do, we rely on their contractual commitments to protect it to a standard comparable to the PDPA. We may also disclose data when the law requires it.

How long we keep it

• Account details: until your account is deleted.
• Appointments and the details of the people in them: for the life of the account.
• Photos: until the organiser deletes them or the appointment.
• Message delivery records: 90 days.
• Security log: 2 years.
• Verified mobile numbers: until the account is deleted. A scrambled copy is kept for 90 days afterwards, so the same number can't unlock a fresh free allowance straight away.
• Encrypted backups: up to 14 daily and 8 weekly copies, then deleted.

How we protect it

Data is encrypted in transit. Each workspace's data is kept separate. Google access grants are encrypted, photos are private and shown only through short-lived links, and backups are encrypted before they leave the database. Access is limited to what each person needs.

On your device

We use cookies only to keep you signed in and to secure the Google Calendar connection. For organisers, the app keeps an offline copy of upcoming bookings on your device (titles, times, names and places; no emails or numbers), deleted when you sign out.

Your choices and rights

You can ask to see or correct the personal data we hold about you, withdraw consent (for example to WhatsApp updates), or ask us to delete your account. Write to our Data Protection Officer at ask@fidztech.com. We'll reply as soon as we reasonably can, usually within 30 days. If you booked with an organiser, you can also contact them directly about that booking.

Changes

We'll update this notice when our practices change, and show the new date at the top.

Contact

Data Protection Officer, Fidz Technologies SG Pte Ltd, 22 Sin Ming Lane, #06-76 Midview City, Singapore 573969. Email: ask@fidztech.com. See also the contact page.