Legal

Privacy Policy

Last updated: 2026-09-15

1. Scope and Data Controller

This Privacy Policy describes how information is handled in connection with the PickaDay web and mobile application and the website https://pickaday.net (together, the "Services"). The Services are operated by Sean McCarren, Regenboogven 89, 5508RK Veldhoven ("PickaDay", "we", "us"). For the purposes of the EU General Data Protection Regulation ("GDPR"), we are the data controller for the limited processing described below.

2. What we do not collect

We designed PickaDay to need as little of your data as possible. In particular, we do not:

• require an account, email address, phone number, or sign-in of any kind;
• collect, upload, or store your calendar events, attendees, locations, or any other calendar contents;
• use advertising, analytics, tracking, or profiling SDKs;
• collect precise location, contacts, payment card data, or device advertising identifiers; or
• sell or rent any information to anyone.

3. Calendar access is optional, off by default, and opt-in

PickaDay works fully without any calendar access. Calendar access is disabled by default, and PickaDay reads none of your calendars until you explicitly opt in:

• On mobile and desktop (Android, iOS, macOS) — access begins only after you grant the operating system's calendar permission. Until you do, no calendar data is read.
• On the web — you must tap Connect in Settings and sign in to Google before any calendar is read through Google's API.

Once you opt in, events are read solely to display your existing commitments next to each date option while you are viewing a poll. On Android, iOS, and macOS this happens entirely on your own device; on the web the events are read through Google's API under the permission you grant. In every case the events are used only to render that view and are never transmitted to our servers or stored by us. You can revoke access at any time from the Settings screen, your device settings, or your Google account, and PickaDay will stop reading calendars.

4. What we store

The only information PickaDay stores is the content of polls and the responses to them:

• Polls — the title, optional description, the date options (start/end times and any note), the creator's timezone (used only for display), the creation time, and the poll's status (open/closed) and chosen outcome. The creator is identified only by a randomly generated identifier for that installation.
• Responses — the display name you choose to type, your answer to each date (yes, maybe, or no), any optional comment you add, the same random installation identifier, and the time the response was last updated.

There is no user profile, no email address, and no other personal data beyond the display name you voluntarily enter and any text you choose to write in a poll or response.

5. Your identity

PickaDay creates a stable, random identifier when you first use the app and keeps it on your device. It is not linked to your real identity and is used only so that your own responses can be recognised and updated. The display name you enter is shown to other people who open the same poll, and is stored alongside your responses.

6. Who can see your content

Polls are reached through a long, unguessable link. Anyone who possesses that link can read the poll and its responses, including participants' display names, answers, and comments. Do not put anything in a poll title, description, comment, or display name that you are not comfortable sharing with everyone who has the link. Poll links are never listed or enumerated by us.

7. Service providers

We use a small number of infrastructure providers strictly to run the Services. They process data on our behalf and do not use it for their own purposes:

• Google Firebase (Cloud Firestore) — stores poll and response documents. See the Firebase Privacy Notice and Google Privacy Policy.
• Cloudflare — serves the website and app through its edge network. See the Cloudflare Privacy Policy.

These providers may process standard technical information (such as IP addresses and request times) as part of operating their networks, as any host must. We do not use that information to identify you.

8. Retention and deletion

Polls and their responses are automatically and permanently deleted 90 days after the poll was created. Before then, the poll's creator can remove a poll from the poll screen: it disappears for everyone immediately, and its data is deleted with the poll's 90-day retention. If you want a poll or response removed sooner and are not the creator, contact us and we will action a reasonable request. Locally cached data on your device is removed when you clear the app's storage or uninstall it.

9. Legal bases and your rights

Where the GDPR applies, we process the limited data described above to perform the service you requested (Article 6(1)(b) GDPR) and on the basis of our legitimate interest in operating and securing the Services (Article 6(1)(f) GDPR). Subject to applicable law, you may request access to, rectification of, or erasure of your data, object to processing, or lodge a complaint with your local supervisory authority. Because we hold no account and no contact details, we may be unable to identify you from our records; please include the poll link with any request.

10. International transfers

Poll and response data may be stored on or accessed from servers outside the European Economic Area, including the United States. Such transfers rely on appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission.

11. Children

The Services are intended for individuals aged thirteen (13) and older. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided personal data, contact us so we can delete it.

12. Security

We use encrypted transport and access controls appropriate to the data we hold. Because poll content is readable by anyone with the link, please treat a poll link as a shared secret. No security measure is infallible.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the Services after the effective date constitutes acknowledgement of the revised policy.

14. Contact

Questions about this Privacy Policy or our data practices can be sent to mccarrenapps@gmail.com. You may also write to the postal address listed in section 1. We aim to respond within thirty (30) days.