what we keep, and why
last changed 6 september 2026
The short version: your family’s school dates, the address we send mail to, and nothing we could sell.
what we store
Your email address, and a name and timezone if you give us one. The name of your household and of the children in it — first names are plenty, and you can leave them out entirely.
The schools you follow, the calendars you upload, and the dates we read out of them. That is the actual product: without it there is nothing to put on your phone.
If you turn on reminders, we keep the settings and a record of which mail we sent you, so we don't send the same reminder twice.
If you forward school email to your household's address, we keep the raw message for thirty days so a failed read can be retried, then delete it. The dates and titles read out of it stay, like any other calendar; the message itself does not, and is never shown on a public page.
the calendar link
Your calendar link works like a house key. Anyone holding it can see your family's dates without signing in — that is the only way phone calendar apps can subscribe to anything.
So we keep it hidden behind a tap rather than printed on the screen, and you can replace it with a new one at any time. Replacing it stops the old link working immediately; you re-subscribe once on each phone.
Be careful with screenshots and QR codes of it, for the same reason you would be careful photographing a key.
who else sees it
The companies that run this thing on our behalf: the host the site runs on, the database it stores rows in, the file storage the uploaded PDFs sit in, and the service that sends our email. They handle the data to provide that service and for nothing else.
The calendar you upload is read by an AI model to pull the dates out of it. That means the text of the school's PDF is sent to the model provider we have configured for the job. School calendars are documents schools publish, but you should know it leaves our machines.
If you sign in with Google, Google tells us your email address and name, and knows that you signed in here.
If you publish a community page for a school, the school-wide dates on it — titles, days, categories — are public at that page's address. Nothing about a child can be on a community calendar: the database refuses the row. The documents you uploaded are never republished, and the page shows how many people maintain it, not who. A community school page may carry one labelled sponsor line. The sponsor receives a count of how many times its link was followed and nothing else; we keep no record of who read the page or who clicked.
what we don't do
There is no advertising here and no tracking pixels for anybody else's benefit. We don't sell or rent anything about you or your children, and we don't build profiles for other companies.
We don't email you about anything except the reminders you asked for and the occasional message about your own account.
getting rid of it
Delete your account and we delete your household, children, schools, uploads and calendar dates with it. The calendar link stops working at the same moment.
Backups roll off on their own within thirty days, so a deleted account can survive in a backup for that long and no longer.
You can also just stop: an unused account holds still. Nothing is sent, and nothing is shared while you are away.
asking us anything
Delete your account from your account page, or write to privacy@onthefridge.app and a person will answer.