Privacy Policy

LuxeCal Privacy Policy

Effective Date: April 18, 2026

This privacy policy explains how IronAppStudio LLC ("we," "us," or "our") handles information when you use the LuxeCal app.

1. Data We Access

Google Account Data (via Google OAuth)

When you connect a Google account, LuxeCal requests the following OAuth scopes:

• email — Identify the signed-in Google account
• profile — Display your name within the app
• https://www.googleapis.com/auth/calendar — Read and write your Google Calendar events

What we do with this data:

• Your email address is used solely to identify which Google account a calendar belongs to and to display it in the app's account list.
• Your profile name may be displayed in the morning briefing greeting.
• Calendar and event data is fetched from Google's servers and displayed to you in the app. You can create, edit, delete, and respond to events through the app; those changes are written back to Google Calendar via the official Google Calendar API.

What we do NOT do with this data:

• We do not sell, share, rent, or transfer your Google user data to any third party.
• We do not use your Google data for advertising or marketing purposes.
• We do not allow humans, including developers, to access your Google user data.
• We do not use your data to train machine learning models.
• We do not use your data for any purpose beyond displaying your calendar and enabling you to manage it within LuxeCal.

Google Limited Use Compliance:

LuxeCal's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

1. Where Data Is Stored

The following data may be stored as described below:

• Google OAuth tokens (access and refresh): Device Keychain (encrypted, on-device only)
• Microsoft OAuth tokens: Device Keychain (encrypted, on-device only)
• CalDAV credentials (username and password): Device Keychain (encrypted, on-device only)
• Calendar events (display cache): Local device file system (/Caches/) — temporary
• Connected account email list: Device UserDefaults and iCloud Key-Value Store (for cross-device restore; emails only, no tokens)
• App settings and preferences: Device UserDefaults and iCloud Key-Value Store

No user data is stored on any server we operate. All authentication tokens stay on your device's Keychain. Event data is fetched live from Google, Microsoft, or your CalDAV server and cached locally for display performance only.

1. Location Data

LuxeCal requests "When In Use" location permission for two purposes:

• Weather forecasts — your approximate location (city-level accuracy) is passed to Apple's WeatherKit service to retrieve a local forecast.
• Travel time to events — if you add a location to an event, LuxeCal uses Apple's MapKit to estimate drive time so it can remind you when to leave.

Your precise GPS coordinates are never stored persistently. Location is cached in memory for up to one hour to avoid redundant lookups, then discarded. Your location is never sent to our servers, and never shared with third parties outside of Apple's own services used to provide these features.

1. Contacts Data

If you grant Contacts permission, LuxeCal searches your address book locally on your device to suggest email addresses when you invite people to events and to suggest addresses in the event location field.

• Contacts are read on-device only. No contact data is uploaded, transmitted, or shared anywhere.
• Contact searches happen in real time as you type. No contacts are stored by the app beyond the duration of the search result display.

1. Notifications

LuxeCal schedules local notifications only. There is no push notification server. Reminders for events, travel-time leave alerts, and the optional morning briefing are all generated and delivered entirely on your device by iOS's local notification system.

1. Camera and Photos

If you grant Camera or Photos access, LuxeCal allows you to set a custom photo for a calendar month. That photo is stored locally on your device within the app. No photos are uploaded anywhere.

1. Face ID / Biometrics

If you enable App Lock, LuxeCal uses iOS's Local Authentication framework, including Face ID or Touch ID, to protect the app. No biometric data is ever accessed, read, or stored by CaLuxeCalAuthentication is handled entirely by iOS.

1. iCloud Sync

LuxeCal uses iCloud Key-Value Storage (KVS) to back up the list of connected account email addresses and app settings. This allows you to restore your account configuration after reinstalling the app on the same Apple ID.

What is synced:

• Account email addresses
• App preferences, such as view settings, notification preferences, and theme

What is NOT synced:

• OAuth tokens
• Passwords
• Calendar events
• Any calendar content

Authentication tokens remain in the Keychain only.

1. Third-Party Services

LuxeCal integrates with the following third-party services on the user's behalf. Each service is governed by its own privacy policy:

• Google Calendar API — Read and write Google Calendar events
• Microsoft Graph API — Read and write Microsoft/Outlook Calendar events
• Apple WeatherKit — Local weather forecasts
• Apple MapKit / MKDirections — Travel time estimates
• iCloud Key-Value Storage — Account list and settings backup

No analytics SDKs, advertising networks, or crash-reporting services are included in LuxeCal.

1. Data Retention and Deletion

• Cached events are stored locally and automatically overwritten on each sync. They can be cleared by removing the app.
• OAuth tokens are deleted from Keychain immediately when you disconnect an account from within the app.
• iCloud Key-Value Store data is deleted when you sign out of iCloud or delete the app.
• Removing the app from your device removes all locally stored data. Because we operate no servers, there is nothing additional to delete on our end.

1. Children's Privacy

LuxeCal is not directed to children under 13. We do not knowingly collect personal information from children.

1. Changes to This privacy policy

We may update this privacy policy as the app evolves. Significant changes will be noted in the App Store release notes. The current version of this privacy policy is available at:

https://ironappstudio.com/luxecal_privacy_policy

1. Contact

If you have questions about this privacy policy, contact:

LuxeCalbugs@ironappstudio.com