Privacy Policy

Last updated: April 29, 2025

This Privacy Policy describes how GCal Wrapped ("we", "us", or "our") collects, uses, and discloses your information when you use our service at gcalwrapped.com.

GCal Wrapped is a free service built by Simon Ilincev and Megan Yap. By using the service, you agree to the collection and use of your information in accordance with this Privacy Policy.

What We Collect

1. Google Calendar Data

When you sign in through Google, we access your calendar events to generate your personalized GCal Wrapped. This includes:

Event titles, times, and descriptions
Meeting durations and scheduling patterns

We do not share raw calendar data. Your processed summary is stored in our database and can be shared by you.

2. Google Workspace Directory

If your account is part of a Google Workspace organization (e.g. a university), we may read your organization's directory metadata (e.g. school email domain) to:

Group you with other users in your school or organization
Display anonymized, aggregate leaderboard statistics by school

We do not store or expose your full contact list, only the minimal metadata required for grouping.

3. Profile and Authentication Info

We collect and store:

Your name and email
Avatar URL (if available)
Google OAuth access and refresh tokens (to sync your calendar)
Timezone and school (if derived or provided)

4. Usage Data

We use Google Analytics to track anonymized usage behavior:

Browser and device type
Visit duration and navigation patterns
Referrer and general location (e.g. country)

How We Use Your Data

We use your data to:

Generate and store your GCal Wrapped report
Let you share your report with others
Populate anonymized school leaderboards and aggregate statistics
Improve the functionality, performance, and design of the service

We do not share your personal calendar or directory data with other users or third parties.

Data Retention

We retain your GCal Wrapped report and associated profile data (like your name, email, and Google access tokens) in our database.

You can request deletion of your data in two ways:

Email us directly at [email protected]. This will remove your report and profile data from our database.
Revoke GCal Wrapped's access via your Google account settings. This prevents us from accessing your Google Calendar data going forward by invalidating our access tokens, but it does **not** automatically delete the data already stored in our database. Please email us if you also want your stored data deleted.

Aggregated, anonymized statistics (e.g. total event time per school) may be retained indefinitely.

Data Security

We use standard encryption and access control best practices to protect your data. However, no online service can guarantee 100% security.

If you are finished using the service, you can sign out and optionally revoke GCal Wrapped's access via your Google account permissions page.

Children's Privacy

GCal Wrapped is not intended for users under 13. We do not knowingly collect personal information from children under 13.

Changes

We may update this Privacy Policy in the future. We'll notify you of changes by updating the "Last updated" date on this page.

Contact

If you have questions or want your data deleted, email us at:

📧 [email protected]