NallenteriSuomeksiPrivacy policy
This privacy policy explains how Nallenteri (nallenteri.app, "the app") handles your information, including the data the app receives from Google when you sign in with your Google Account and connect Google Calendar.
1. Who is responsible
Nallenteri is developed and operated by Timothy Sikorski (Finland), who acts as the data controller. Contact: timosikorski89@gmail.com.
2. What Nallenteri is
Nallenteri is a family organizer: a shared family calendar, lists, tasks and notes. Each family member signs in with their own Google Account and can connect their own Google Calendar, so that their calendar events appear next to the family's shared events and can be created and edited from the app.
3. Information we access and why
| Data | Source | Purpose |
|---|---|---|
| Name, email address, profile picture and Google account identifier | Google Sign-In (scopes openid, email, profile) | To sign you in, check whether you have access, and show who you are to the members of your family. |
| The list of your Google calendars (name, color, your access level) | Google Calendar API, scope calendar.calendarlist.readonly | To let you choose which of your calendars are shown in Nallenteri and which calendar new events are saved to. Calendars you can only read are shown but not offered for writing. |
| Events in the calendars you have chosen to show | Google Calendar API, scope calendar.events | To display your events in the family calendar view, and to create, edit, move and delete events in your Google Calendar when you do so in the app. |
| Content you add to Nallenteri: family name and members, shared events, lists, tasks, notes and pictures | You and your family members | To provide the family calendar, lists, tasks and notes to your family. |
Nallenteri does not request access to your Google Calendar settings, sharing settings (ACLs) or to create or delete whole calendars.
4. How Google user data is used
- Google Calendar events are fetched directly from Google to your own browser or device while the app is open, for the date range you are viewing. They are kept in the app's memory and are not stored on Nallenteri's servers.
- Events are created, changed or deleted in your Google Calendar only when you do so yourself in the app.
- Your Google Calendar events are shown only to you. They are not shared with other family members or anyone else.
- Your calendar choices (which calendars to show, their colors and which family member they belong to) are stored only in your browser's local storage on your device.
- Google user data is used only to provide and improve the user-facing features described above. It is not used for advertising, it is not sold, and it is not used to train artificial intelligence or machine learning models.
- No person reads your Google data, unless you have explicitly asked for help with a specific item, it is necessary for security purposes (such as investigating abuse), or it is required by law.
Nallenteri's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Access tokens
When you sign in, Google issues the app a short-lived access token (valid for about one hour) that allows it to call the Google Calendar API on your behalf. The token is kept only in your browser's session storage and is removed when you sign out or close the browser tab. Nallenteri does not store Google access tokens or Google refresh tokens on its servers. When the token expires, you may be asked to sign in again to refresh calendar access. Your Nallenteri sign-in session itself is managed by Firebase Authentication.
6. Where data is stored
- Family content (shared events, lists, tasks, notes, pictures, family members) and your user profile (name, email address, profile picture link and app settings) are stored in Google Cloud Firestore in the europe-north1 (Finland) region.
- Sign-in accounts are managed by Firebase Authentication, a Google service.
- The app is served by Firebase Hosting. Like any web server, it processes technical data such as your IP address and browser type to deliver the site.
- To make the app work offline, a copy of your family's data is cached in your browser on your own device. It is cleared when you sign out.
Google acts as a service provider (data processor) for these services. Nallenteri uses no analytics, advertising or tracking services.
7. Sharing
Content you add to a family is visible to the signed-in members of that family. Your name, email address and profile picture are visible to the members of the families you belong to. Access to the app may be limited to invited email addresses; for that purpose, the invited email addresses are stored. We do not sell, rent or share your data with third parties, except with the service providers mentioned above, or if required by law.
8. Retention and deletion
- Google Calendar events are not stored by Nallenteri, so there is nothing to delete on our side. Events you created or changed in Google Calendar remain in your Google Calendar.
- Family content is kept as long as the family exists. You can delete your own items at any time, leave a family, or (as the family owner) delete the whole family with its content in the app's settings.
- To delete your account and profile data, email timosikorski89@gmail.com from the address you use with Nallenteri. Your account, profile and the content of families where you are the only member will be deleted within 30 days.
9. Revoking access
You can stop showing Google Calendar in the app's settings at any time. To revoke Nallenteri's access to your Google Account completely, go to Google Account → Third-party apps & services, select Nallenteri and remove access. After that, the app can no longer read or change your Google Calendar.
10. Your rights
Under the EU General Data Protection Regulation you have the right to access, correct and delete your personal data, to restrict or object to its processing, and to data portability. The legal basis for processing is the performance of the service you have signed up for (Art. 6(1)(b) GDPR) and, for Google Calendar access, your consent, which you can withdraw at any time as described above. To use your rights, contact timosikorski89@gmail.com. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
11. Children
Nallenteri is meant for families. Children under 13 may use the app only with a Google Account managed by their guardian and under the guardian's supervision.
12. Security
All connections are encrypted (HTTPS). Access to family data is restricted by server-side security rules so that only the members of a family can read or change its data.
13. Changes
If this policy changes, the updated version will be published on this page with a new date. Significant changes will be announced in the app.