Privacy Policy

1. What we access from Google

• Google Calendar (read-only) — We fetch your upcoming events from all calendars to display them in the app. We never create, edit, or delete calendar events.
• Google Drive (limited) — When you create a planning doc, we create a Google Doc in a folder called "Event Plans" in your Drive. We only access files that MooMee itself created — we cannot read or modify other files in your Drive.
• Google profile — Your name, email address, and profile photo are used to display your account in the app and to send collaboration invites on your behalf.

2. How we use this data

• Calendar events are fetched in real time and displayed only to you — they are never stored in our database.
• Planning docs are created in your own Google Drive; you own and control them.
• Your email address is used to send collaboration invites when you invite someone to co-plan an event.
• We do not use your data for advertising, profiling, or any purpose beyond operating the app.

3. What we store in our database

We store the minimum needed to run the app:

• Your Google account ID, name, email address, and avatar URL
• A refresh token (encrypted at rest) so the app can fetch your calendar in the background
• Which events you have pinned
• Quick notes you have written for events
• IDs and URLs of planning docs created through MooMee
• Checklists and checklist items you create (either attached to an event or standalone), and their shared/private status
• Collaboration invites you have sent or received (for events and for checklists)
• Email notification preferences you set in Settings

4. What we never do

• Sell, rent, or share your data with third parties or advertisers
• Read Drive files you did not create through MooMee
• Write to, edit, or delete your calendar events
• Send emails on your behalf other than collaboration invites you explicitly trigger
• Track you across other websites or services

5. Third-party services

• Google APIs — Calendar and Drive access governed by Google's Privacy Policy. MooMee's use of Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
• Supabase — Our database provider. Data is stored in the EU/US region with encryption at rest.
• Postmark — Used to send transactional emails (collaboration invites, checklist invites, account emails). Only your name, the invitee's email address, and the relevant event or list title are passed to Postmark. You can opt out of non-essential emails in Settings → Email Notifications.
• Vercel — Our hosting provider. Handles HTTPS and edge routing.

6. Revoking access

You can revoke MooMee's access to your Google account at any time by visiting myaccount.google.com/permissions and removing MooMee. This immediately stops any further access to your calendar or Drive. Data already stored in our database (pins, notes, doc links) is retained until you delete your account or contact us to request deletion.

7. Data deletion

To request deletion of all your data from our database, email us at the address below. We will delete your account and all associated records within 30 days.

8. Contact

Questions or data requests: hello@moomee.io