Privacy Policy

GDPR Compliance​

Using our software enables you and your organization to meet GDPR regulatory requirements. Aany data entered into our apps, including Personally Identifiable Information (PII) or Protected Health Information (PHI), is never transferred, saved, or stored on our servers. All data remains on your device or with the third-party services you choose to sync with (such as iCloud, Google, Microsoft Office etc) ensuring your information stays under your control at all times.

As a result, our operations do not involve large-scale processing or monitoring of personal data, which means we are not required to appoint a Data Protection Officer (DPO) under GDPR. However, we remain fully committed to ensuring all interactions comply with GDPR regulations, prioritizing secure and direct communication between the app and the services you choose to use.

EULA​

Our End User Licensing Agreement is accessible here.

Contacts Access Permission​

When you launch our apps, they will request your permission to access your Contacts.

• BusyCal: Access to your Contacts is required to display birthdays and anniversaries, schedule meetings, and autofill addresses when adding locations to events. Your name and email addresses from your "Me Card" are used for sending invitations, managing shared calendars, and tracking changes to events (e.g., last modified details). BusyCal does not collect or upload your contact details to its servers. Contacts are only uploaded to the CalDAV server you sync with if you explicitly attach them to events.

• BusyContacts: Access to your Contacts is required to autofill addresses, names, and numbers as needed. It also uses your "Me Card" to accurately identify you and allow changes to your contact card. Like BusyCal, BusyContacts does not collect or upload your contact details to its servers.

Login Credentials​

BusyCal and BusyContacts use your login credentials (e.g., username and password) to synchronize, manage, and display your calendars, events, reminders, and contacts.

• When adding accounts such as Office 365 or Google, our apps use industry-standard authentication methods like OAuth for secure login.
• Your credentials, including usernames, passwords, or OAuth tokens, are securely stored in the system Keychain on macOS or iOS. The Keychain is a secure component designed to safely store app and system credentials.
• We do not transfer or share your account information, including synced data, with any third-party servers, including our own, outside of your device.

Office 365 / Exchange Web Services​

BusyCal and BusyContacts connect to Office 365 and Exchange accounts via Microsoft’s Exchange Web Services (EWS) protocol. ActiveSync is not supported.

• All communication occurs directly between your device and the server associated with your account for synchronization purposes.
• No information is sent to or shared with any other servers outside of this connection.

1. Delegate and Shared Calendars

BusyCal and BusyContacts offer a full replacement of Outlook in their own rights and so in order to sync with Exchange / O365, our apps need to be able to see delegate and shared calendars and address books (only related to the connected account) so that the user is able to manage calendars they own, including ones shared them.

2. Basic profiles

Our applications do not probe, discover, or access the profiles of others within your organization. They only request the email addresses of users from the server when adding an "attendee" to an event or when setting up a shared calendar. This is also necessary when using the Availability Viewer to conduct Free/Busy lookups.

3. Full Access to User Calendars/Address Books

Our apps are designed to serve as replacements for native apps like Apple Calendar or Microsoft Outlook, and therefore require full access to perform actions such as creating, editing, or deleting events and contacts on your behalf.

Licensing​

When you place an order or purchase a copy of our software, you are required to share your email address with us. This email is linked to the serial number generated to uniquely identify your installation(s). This information is stored and used exclusively for licensing and invoicing purposes. When you register your Mac for the first time, your Mac-ID, IP address, and serial number are sent to our servers to validate and activate your copy. This process is necessary solely for licensing purposes and to validate your installation.

Automatic Updates​

BusyCal and BusyContacts on macOS periodically check for updates by contacting our servers. This process involves sending anonymous information about your installation, including the version of BusyCal/BusyContacts and macOS, to determine if an update is available for your software.

Mailing Lis​

If you have subscribed to our mailing list, you will receive infrequent emails from us about important software updates, new product announcements (which may or may not be developed in association / collaboration with another company) or special offers. We will protect your privacy and not share / sell your email addresses to anyone. You may unsubscribe from our mailing list at any time.

Application Logs​

If you contact us and choose to share private logs for diagnostic purposes (with your consent), these logs are retained only as long as necessary to resolve the issue. No one outside our organization has access to this information. You have the right to request immediate deletion of logs at any time, even before the issue is resolved.

Logs are never shared automatically, and we cannot access your computer or installed apps. Our apps are sandboxed, native applications that securely store data locally on your device, giving you complete control over your logs, including the ability to delete them or adjust logging levels as needed.

Non-Personal Information​

Non-personal information refers to data that cannot be used to uniquely identify an individual. This typically includes crash stack traces and performance-related analytics. We use Google Firebase—formerly known as Fabric/Crashlytics—to receive automatic crash reports and optional performance metrics. This information helps us identify bugs and improve app performance. It is used exclusively for these purposes and is not employed for tracking individuals or any other purpose.

The only exception is when users voluntarily choose to send their application logs for diagnostic support. In such cases, users are informed that the logs may contain sensitive information before sharing.

Crash reporting can be entirely disabled via the application's preferences, ensuring complete control over data sharing.

Internet Access Policy​

Apart from third-party CalDAV, Exchange, and WebDAV servers that you may configure with our apps, here is a list of domains our apps communicate with. No personal information is ever collected, tracked, stored, or shared, especially anything you enter or store within the apps. This applies to all our apps.

Cookies and Other Technologies​

Our website, services, apps, email communications, and advertisements may use "cookies" and other technologies such as "pixel tags" and "click-through URLs". We use the information we collect in this manner to better understand our users' interactions with our website and to optimize the user experience. You can disable cookies in your browser settings, but please note that certain features on our website may not be available as a result.

As you access our services, we gather some information automatically on our servers and store it in log files. This information includes your browser type, version, and language, your operating system, the referring and exit websites, IP address, a date/time stamp of the request, and the requested resource (file name and URL). We use this information in anonymized form for statistical analysis, to administer our site, and to improve our product and services, without directly associating this data with individual users.