Privacy Policy

Last updated October 31, 2026 · Terms of Use

Getogether is a shared calendar for friend groups. We collect what's needed to run it, we don't sell anything about you, we don't show ads, and we don't use tracking or analytics.

Who runs Getogether

Getogether is run by Sam, an individual based in Ontario, Canada ("we", "us"). For anything about your privacy, email [email protected].

What we collect

Your account

If you sign in with Google: your name, email address and profile photo, as shared by Google. We never see your Google password.
If you sign in with email: your email address and the name you give. We email you a one-time code and link to sign in; we keep only a scrambled (hashed) form of them, for 15 minutes.
If you join as a guest: just the name you type, until you add an email or connect Google.
When you agreed to these terms and confirmed your age.

What you add

Plans (title, dates and times, place, notes, a photo-album link), your answers (in, maybe, can't make it), date-poll votes, comments and reactions, who you tag, bring-list items, rides and seats, costs and payments, suggested films and your rankings, and marked dates such as birthdays or time away.
If you pick an address from the suggestions, its map coordinates are saved with the plan.

To make things work

A sign-in cookie that keeps you signed in. It's the only cookie we use, and it's not used for tracking. We store only a scrambled (hashed) form of it.
Notification settings, and if you turn on notifications, the address your browser gives us for delivering them to that device.
Calendar feed and personal links you create (stored scrambled where possible), which groups you're in and your role, which plans you've already seen, and addresses you removed from your "recent places".
Your own calendar (optional): if you connect your own calendar to see its events on Getogether, we keep what's needed to read it, encrypted: for Google Calendar, the read-only access Google gives us (a token); for other calendars, the private link you give us. We don't store your events. Each time you look at the calendar, we fetch the events for the dates on your screen and send them only to you, holding them in memory for a few minutes so paging through months is quick.
Adding your plans to Google Calendar (optional): if you turn this on, we create a calendar called "Getogether" in your Google account and keep the plans you've said you're in on there (name, time, place, notes and a link). Google only lets us change that one calendar. Turning it off, or disconnecting, deletes it.
Reports you make about content, including a copy of what was reported.
Feedback you send us (bug reports, ideas and notes), along with your name and, if you chose to include them, your browser and screen size. It's seen only by the person running Getogether, and it's deleted if you delete your account.
Server logs: the time, type and page of requests, and error details. Secret links are hidden from logs. Logs are deleted as new ones replace them, usually within a few weeks.

Kept only on your device

Your theme and calendar look, the group you last opened, tips you've dismissed, and, if you allow it, your approximate location (rounded to about 1 km) for suggesting nearby addresses. These stay in your browser and aren't stored on our server.

How we use it

Only to run Getogether: to show your groups' calendars, send the notifications and emails you've chosen, keep the service secure (for example, limiting repeated sign-in attempts), deal with reports, and fix problems. We don't sell, rent or share your information for advertising, and we don't build profiles of you.

Who can see what

People in your groups see your name and photo, and what you add in that group. Each group is separate: people in one group can't see another group's calendar.
Your own calendar, if you connect one, is shown only to you. Nobody else in your groups can see your events, or that you've connected a calendar.
Your email address isn't shown to other members. If you use "Email" to invite someone, Getogether sends it and replies go to you, so the person you invite sees your email address.
Group admins can remove content and members in their group, and see reports made there.
We (the person running Getogether) can technically access everything stored on the server. We only look when needed to run it, deal with a report or problem, or comply with the law.
Legal requests: we'd only hand over information if the law requires it, and we'd tell you if we're allowed to.

Services we rely on

A few other companies help run Getogether. Some are outside Canada (mainly in the United States), so your information may be processed there, under their laws.

Cloudflare: carries all traffic to and from the site (which means it handles your IP address), runs our domain, and stores our backups, which we encrypt before they leave our server so Cloudflare can't read them.
Google: Sign in with Google. Google's sign-in page and script load in your browser.
Resend: delivers emails (sign-in codes, invites, and notifications if you turn email on).
Your calendar service (Google, Apple iCloud, Microsoft Outlook, Proton or Fastmail), only if you connect your calendar: our server reads your events from them when you look, to show them to you.
Your browser's push service (Apple, Google or Mozilla, depending on your device) delivers notifications. Their contents are encrypted on the way.
Place and address search (Google Places, with Photon and OpenStreetMap data as a backup) and movie search (The Movie Database, TMDB): our server sends them what you type in the search box and, for places, a rough area (about 1 km). It doesn't send your name or account. Your browser loads movie posters directly from TMDB, which therefore sees your IP address.

Links you choose to open (Google Maps, Apple Maps, a calendar app, a photo album) take you to those services under their own policies.

Information from Google

Getogether's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. From Google sign-in we use your name, email address and photo to run your account; from Google Calendar we read your events and your list of calendars, only to show you your own events on your own screen (we don't store them, and never show them to anyone else), and, if you ask us to, we add the plans you're in to a "Getogether" calendar we create in your account. We don't use either for advertising or sell them, we don't use them to train AI models, and nobody running Getogether looks at them except to keep the service working, for security, or when the law requires it.

Where it's stored and how it's protected

Getogether's data is stored on our own server in Ontario, Canada. Encrypted backups are kept off-site with Cloudflare. Connections use HTTPS, sign-in tokens are stored scrambled, access is limited to group members, and we keep the server and software up to date. No system is perfectly secure; if a breach put you at real risk of harm, we'd tell you and the authorities as the law requires.

How long we keep it

Your information is kept while your account exists.
If you leave a group, your answers and votes there are removed; your comments stay unless you delete them.
If you delete your account (under your name → Your data), it's removed from the live service straight away: your answers, votes and comments are erased, and your name is taken off plans, costs and items other people still rely on.
Backups are kept for up to 12 months, then deleted, so deleted information can remain in a backup until then. We only use backups to recover from problems.

Your choices and rights

See your data: under your name → Your data → Download my data.
Correct it: change your name, or edit or delete what you've posted.
Delete it: delete your account at any time. Disconnecting your calendar deletes its link (or cancels Google's access) straight away. You can also remove Getogether's access in your Google Account at any time.
Notifications: choose what you hear about, and turn email on or off.
For anything else, or if you'd like to complain, email [email protected]. We'll reply within 30 days. In Canada you can also contact the Office of the Privacy Commissioner of Canada. If you're in the EU or UK, you have rights under the GDPR, including to object and to complain to your local data protection authority.

Age

Getogether is for people aged 16 or older. If we learn that someone under 16 has an account, we'll delete it. If you think that's happened, email us.

Changes

If we change this policy, we'll update the date above. If the change matters, we'll tell you in the app and ask you to agree again.