OurSharedLife app privacy policy

We collect information you provide directly to us, including:

• Account information (name, email address)
• Household data (tasks, bills, meal plans, calendar events)
• Connected calendar data (Google, Outlook, iCloud)
• OAuth tokens for calendar integrations
• Messages and shared notes (end-to-end encrypted)
• Reminders (time and location data)
• Usage data and preferences

We use your information to:

• Provide and maintain our service
• Sync your calendar data into our unified view
• Send you notifications about upcoming tasks, bills, or events
• Respond to your support requests
• Improve our service

Your data is stored securely using industry-standard practices:

• Data is encrypted in transit using HTTPS/TLS
• Data at rest is encrypted using AES-256 encryption
• OAuth tokens and credentials are encrypted using AES-256-GCM
• API keys and webhooks are verified using HMAC signatures
• Encryption keys are rotated regularly
• You can self-host with your own database for full control

When you connect Google or Outlook calendars, you grant us permission to:

• View your calendar events
• Create new events in your dedicated OurSharedLife calendar
• Update events you've created through OurSharedLife
• Delete events you've created through OurSharedLife

For iCloud, we use CalDAV for two-way sync.

We never modify events in your personal calendars unless they were created through OurSharedLife. OAuth tokens are stored encrypted using industry-standard encryption.

Messages and Shared Notes are end-to-end encrypted. This means:

• Content is encrypted on your device before sending
• Only household members can decrypt and read the content
• We (OurSharedLife) cannot access your encrypted messages or notes
• We use industry-standard X25519 key exchange and AES-256-GCM encryption
• Each message uses a unique encryption key for maximum security
• Keys are stored securely using encrypted local storage on your devices

Disappearing messages: When you set messages to disappear, the encryption keys are permanently deleted after the specified time, making the messages permanently unreadable.

Read receipts: You control whether others can see when you've read their messages. This setting can be toggled in Privacy Settings.

When you set reminders, we store:

• The reminder time or location
• Reference to the associated task or note

We use push notifications to alert you at the appropriate time. Location data for reminders is processed securely and never shared with third parties.

We do not sell your personal data to third parties. We may share data only to:

• Calendar providers (Google, Microsoft, Apple) for OAuth integration
• Service providers who assist our operations (e.g., hosting)
• With your consent, or as required by law

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt-out of non-essential communications
• Withdraw consent at any time

We retain your data for as long as your account is active. Upon account deletion, your data will be permanently deleted within 30 days, except as required by law.

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

We may update this privacy policy from time to time. We will notify you of any material changes by email or by posting the new policy on this page.

If you have questions about this privacy policy or your data, please contact us at:

privacy@oursharedlife.app